Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: qaUIH26Nt3kawK2u7RSXdBmd9c+d8tTY45lkHktGVbQ=
Subject key identifier: 46:D1:4D:E4:49:F8:69:B0:EE:59:0D:19:CB:D6:1C:8D:EF:C1:4D:CA
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 01A16DC92BE2E603F14D30A5E559F645BE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 1A4E
Signing time: Sat 24 Oct 2026 12:01:02 +0000
Manifest this update: Sat 24 Oct 2026 12:01:02 +0000
Manifest next update: Sun 25 Oct 2026 12:01:02 +0000
Files and hashes: 1: RI1PUJj0Q_MD3P8uweukuXuYhlU.roa (hash: Udb4Yel6QV6x+EojTVD0SPU2vkANJh/DkSOzlaEFuOQ=)
2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: 2k2BuDNUOkE4KX/8ZzaCqutaOIwgW5dnmgg06y9YiXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:c9:2b:e2:e6:03:f1:4d:30:a5:e5:59:f6:45:be:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Oct 24 12:01:02 2026 GMT
Not After : Oct 25 12:01:02 2026 GMT
Subject: CN=46d14de449f869b0ee590d19cbd61c8defc14dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:48:de:e5:14:82:a1:c0:12:a6:9b:57:2b:
2c:7c:bb:84:31:bc:f0:a2:b2:23:eb:64:0e:f1:85:
61:7a:0f:3a:e9:d5:88:13:96:ec:a8:16:65:7e:c8:
f0:70:7c:4c:a2:96:21:f1:a6:e0:ab:48:8e:78:14:
e7:c4:59:8a:ba:ef:e2:cf:17:52:9d:0a:41:5f:c3:
7a:b9:d2:ba:c1:73:42:db:ba:a7:ed:ef:50:c8:91:
2b:29:1d:9d:bb:71:73:3c:9d:7a:58:02:4e:72:d2:
0d:64:3a:f7:a2:82:07:f9:0e:6f:e2:44:2a:f9:1c:
0f:85:b2:ca:2e:39:0c:61:66:70:6f:d6:12:a5:a4:
20:a5:33:52:38:45:46:1d:38:6e:4b:f8:1d:aa:32:
fd:de:dc:1c:a3:c4:14:be:7b:aa:77:cd:07:a9:ed:
e6:f7:4b:f0:29:a1:a5:b1:05:ea:78:9b:46:7c:ce:
e8:11:67:60:8a:81:e8:d9:f8:98:11:dd:96:a1:57:
4b:98:fd:74:7e:20:b1:7d:be:30:85:13:fc:e6:0d:
cc:26:1c:18:92:2c:4a:a7:78:b3:79:16:c2:e4:10:
a7:7d:3f:58:6f:84:f8:4e:da:68:f0:12:2f:8a:7a:
71:71:8d:71:b9:d6:e0:28:d0:aa:3f:09:93:9e:45:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D1:4D:E4:49:F8:69:B0:EE:59:0D:19:CB:D6:1C:8D:EF:C1:4D:CA
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9e:81:82:26:5c:89:07:69:76:b4:53:1c:cd:8d:8d:59:ec:
08:30:5a:f7:32:a7:cd:b5:f8:ae:5a:cf:7a:c9:69:b9:73:80:
8b:eb:58:f7:08:ed:80:f8:59:a9:d1:45:b4:42:53:88:44:f0:
dd:8f:41:7f:2a:b2:9b:30:89:aa:0b:2a:14:1b:15:1c:6f:16:
dc:2f:ab:b4:fe:e1:65:5d:bb:59:31:91:88:52:ca:6f:5e:da:
f1:d8:7e:14:87:cb:e8:4a:97:7c:b9:6e:f0:13:32:a8:a9:e3:
04:66:f6:4d:ab:95:f0:9d:5d:44:e4:d1:98:1f:5d:04:ec:d8:
0f:3c:80:dd:aa:96:7b:6d:7e:1d:8e:f7:ec:92:86:a3:79:9a:
a4:d9:0e:42:cf:73:fe:2f:a7:cc:d5:99:cc:ec:c6:04:1d:fb:
2d:46:39:fd:d5:46:13:a7:c5:32:5a:9d:83:5f:9a:ab:2e:70:
a9:94:42:61:d8:02:3a:10:f6:99:e6:ca:db:46:52:cf:02:bc:
ed:d2:77:f9:43:66:fb:f3:7c:24:28:d2:fb:65:22:ee:fe:08:
28:43:49:65:59:a8:df:c3:8d:1a:d1:d0:02:02:2d:7c:9a:f3:
94:c1:99:9c:17:45:2d:ee:37:34:37:19:40:a9:39:65:a2:26:
36:0e:9a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:34:06 2026 by rpki-client