Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
File: p4kEQNrxw6w4dz6FIVES90twYjI.mft (raw, json)
Hash identifier: CkJ2NRTdQ8z9tkYtlKlbGaznYAAlymiLG3VUc50oAOY=
Subject key identifier: D3:4A:C5:28:8F:0D:61:2D:0C:13:F3:F1:49:CF:A9:7D:84:D3:A8:64
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 01A17C298043406E7566C0A52478FC388712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
Manifest number: 027D
Signing time: Tue 27 Oct 2026 07:00:56 +0000
Manifest this update: Tue 27 Oct 2026 07:00:56 +0000
Manifest next update: Wed 28 Oct 2026 07:00:56 +0000
Files and hashes: 1: iX6vy1XcuPqqbDz8w-InkH2wG7I.roa (hash: GqKpcRA3VOR2P5FWA83zgHTmjRMOW1fhvmM6tUVqgDI=)
2: jcRzJUg7IUVEUlfjHqL1NEbulJY.roa (hash: 043yV8J6dMsTpPpYvQ/xWssybIOO8FTRI8kOXFFcDXA=)
3: p4kEQNrxw6w4dz6FIVES90twYjI.crl (hash: PiQ02bseUbpvntwEyCn6aP+QzsolikusexLnR+gFi8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:80:43:40:6e:75:66:c0:a5:24:78:fc:38:87:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Oct 27 07:00:56 2026 GMT
Not After : Oct 28 07:00:56 2026 GMT
Subject: CN=d34ac5288f0d612d0c13f3f149cfa97d84d3a864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:87:28:d3:ff:7d:50:f5:f6:f8:c7:d9:b3:
92:63:e9:ee:cc:8c:69:3d:69:bc:b5:ae:5d:d8:c6:
47:f8:b8:ad:74:88:d1:2b:94:18:5e:84:be:f5:03:
0d:50:03:a9:75:2f:1e:19:77:90:f5:55:7a:f2:e5:
c2:22:68:ad:56:7e:37:9f:cd:41:91:c9:76:94:b1:
22:d1:72:52:ba:2f:a8:d5:f1:78:a0:97:c6:19:6a:
2f:c7:27:88:24:86:53:48:ae:83:64:5b:9d:2f:ab:
bd:25:b0:b6:61:af:85:0f:aa:0c:39:27:e9:ef:d6:
32:47:41:3d:13:3b:06:31:14:11:ac:60:15:94:6a:
1f:95:90:d9:f1:d9:d7:b2:25:f0:a4:c3:ff:36:20:
81:64:5b:8f:a4:78:87:b6:cb:2a:ca:cf:7d:11:fa:
a5:48:85:aa:de:52:47:94:00:98:61:02:86:a8:05:
db:8f:9f:48:7d:20:c3:65:34:49:db:24:a7:61:e3:
9f:7a:fa:cc:fd:a7:8c:d9:ab:ca:9b:50:04:06:33:
53:0e:cf:a8:39:51:93:2d:7b:08:bc:4b:8e:6e:30:
e2:b0:95:5b:d3:08:ce:dd:ef:e9:53:16:1c:02:a7:
aa:58:1c:62:00:86:c4:d7:5e:1b:32:40:bd:e0:e3:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4A:C5:28:8F:0D:61:2D:0C:13:F3:F1:49:CF:A9:7D:84:D3:A8:64
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d4:92:fc:8e:18:13:a0:2e:12:f1:c8:a3:35:cf:14:ba:18:
a7:6b:9a:b4:e4:79:23:05:b3:55:7d:95:dd:99:ae:ef:8d:80:
f8:a8:8f:71:bb:7a:33:ce:e7:dd:db:cd:e7:08:10:a4:52:5d:
aa:b8:8f:85:e6:3e:4f:44:40:6a:a9:60:c6:d9:ea:b6:fa:00:
32:9a:2c:5c:50:92:f9:d7:50:3c:e9:1c:94:57:79:a2:6f:0f:
54:6e:7e:dc:3e:78:65:ac:59:13:e0:01:9b:98:42:3b:b0:ca:
8f:cb:8b:61:da:de:dd:21:54:59:d7:f9:3f:17:a9:f1:d6:31:
5e:f0:c6:b6:69:fe:6d:b2:6c:72:c4:de:92:e2:42:4e:75:bd:
40:6f:af:bf:f9:b9:5e:50:f3:0a:0a:6e:1f:e3:75:0a:d5:14:
dc:25:d2:d1:c9:f7:0b:23:6a:34:77:d3:eb:31:cc:a2:2c:c0:
3a:eb:6c:38:55:b7:f4:9d:69:b5:12:b5:cb:75:97:c7:2d:c4:
28:2a:24:22:96:bc:b2:20:d3:39:5c:80:d0:f7:53:eb:33:fc:
eb:9b:71:55:2d:90:b7:08:6f:39:f4:75:93:9a:b2:6b:b5:0d:
70:9c:f9:6c:ae:ed:1b:95:de:ab:da:27:6c:b2:26:f1:48:f0:
e6:61:d4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:48:44 2026 by rpki-client