Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: xsDDmFUQeG67/TjvNfTBw8YyL3AuM/1aJc069l4szN4=
Subject key identifier: 08:10:03:AB:D3:95:EC:C2:1D:63:C3:E4:43:B3:3C:6A:78:1F:65:E2
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 01A1754C1347072AC7CD09AE751B7166FEB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 1AC3
Signing time: Sun 25 Oct 2026 23:01:22 +0000
Manifest this update: Sun 25 Oct 2026 23:01:22 +0000
Manifest next update: Mon 26 Oct 2026 23:01:22 +0000
Files and hashes: 1: Svs8WaYMaBYooAK5Llbdr0Xwf0o.roa (hash: ulklpVL+jocMv3vi7VJBHLEzxNJlxmy7adHjaQUdJa4=)
2: liNOwl4ffjTNwLOg4lX3c6vkVXc.roa (hash: ec9XZ/8wZUP1CTV/xvGoOKI7TsGIEdOECU3xzYakfZA=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: l1IUaGilFGs9HkzpCLmCQ0V0TnJs1kXvDY/a4QcM4TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:4c:13:47:07:2a:c7:cd:09:ae:75:1b:71:66:fe:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Oct 25 23:01:22 2026 GMT
Not After : Oct 26 23:01:22 2026 GMT
Subject: CN=081003abd395ecc21d63c3e443b33c6a781f65e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:7f:de:ec:ab:2d:c0:ee:12:45:53:b7:55:
65:25:66:0a:fc:64:22:c2:20:76:19:0b:2e:24:a4:
d0:62:38:b9:95:ba:e7:f3:d5:e6:1e:c0:c3:4e:66:
25:08:60:64:4f:66:ed:97:2c:a0:46:1a:1a:5d:6a:
10:eb:bb:6b:8a:a4:c6:de:44:90:df:7b:42:ef:11:
15:ea:db:3e:47:48:7a:04:4e:ab:74:5f:61:0a:a2:
98:f7:34:fb:96:38:32:71:01:f5:bb:97:06:18:ec:
2c:2d:41:f8:cf:b5:41:8d:f3:3d:6d:b9:61:5e:1c:
f2:60:35:31:cd:01:d9:52:02:e2:75:48:5b:55:67:
20:45:1c:74:71:26:e9:bf:cc:6b:76:6a:f9:79:03:
74:fa:25:a9:9c:6d:b9:da:db:ae:a8:c3:a9:36:a2:
07:9b:90:70:c6:6b:81:7f:fd:3e:ec:19:51:1b:cc:
15:20:77:2f:7c:0b:cc:79:7b:0f:aa:0a:b5:17:9e:
04:05:a2:72:3e:d3:37:64:38:96:25:07:54:51:2d:
29:22:23:f8:09:9c:35:9a:3b:6d:14:c0:ab:c8:48:
ab:9a:b0:90:9a:e4:9a:d1:0d:38:f0:54:1e:ae:92:
9b:2c:75:eb:b1:e6:4a:b5:b5:a0:de:e6:f8:8a:92:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:10:03:AB:D3:95:EC:C2:1D:63:C3:E4:43:B3:3C:6A:78:1F:65:E2
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:9d:a5:f7:b5:fe:07:aa:c6:70:2e:9b:13:91:85:01:df:bd:
0d:9a:ac:4d:b6:ae:1e:76:44:01:62:8b:0b:0b:fe:85:dd:0f:
e0:d7:14:59:65:bf:ff:be:c3:7a:d4:da:b0:01:72:62:44:86:
20:14:37:f1:30:e4:1b:0a:10:c0:81:5b:be:11:8c:7c:4d:d1:
1c:4b:3c:00:d6:75:9b:dc:bb:f6:56:8e:9a:3d:9d:38:14:a5:
5d:90:08:e0:b0:8a:86:f1:45:99:d1:dd:21:7a:4a:9c:06:01:
b2:0d:f4:21:f5:15:00:b4:5c:09:b3:dc:10:01:25:dd:83:e0:
34:78:91:6e:4f:f4:e0:6d:14:d5:f3:97:89:65:09:36:06:34:
c5:b6:e3:2f:8a:fd:fc:e7:9b:53:1b:c8:0b:dd:b2:6c:08:e8:
de:25:fc:78:fa:8c:af:9e:9e:8f:75:ff:6b:da:d2:75:8b:51:
e9:8f:99:55:98:f2:63:49:d0:ba:03:80:09:2c:a6:70:fd:a0:
0a:4b:e3:a5:26:c8:e2:bc:0a:fd:04:7d:b8:6b:a0:0c:2e:90:
04:12:33:e3:6a:c9:5f:95:68:75:73:da:ef:cc:88:62:8c:f2:
b6:a7:4c:8c:92:aa:63:b7:0d:98:03:ea:c1:56:4c:4b:12:9d:
8a:49:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:35:35 2026 by rpki-client