Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: 0BwyCazEYuan7HuuXEaBqlZ9N17kGUCGxF11PAWT3CA=
Subject key identifier: 66:C4:B7:EB:8B:B5:FB:40:32:A1:F3:84:51:F2:6F:11:D5:03:8D:A8
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 01A083E536AD575BEA0D7AA6123B466FB799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 1A46
Signing time: Wed 09 Sep 2026 02:00:31 +0000
Manifest this update: Wed 09 Sep 2026 02:00:31 +0000
Manifest next update: Thu 10 Sep 2026 02:00:31 +0000
Files and hashes: 1: Svs8WaYMaBYooAK5Llbdr0Xwf0o.roa (hash: ulklpVL+jocMv3vi7VJBHLEzxNJlxmy7adHjaQUdJa4=)
2: liNOwl4ffjTNwLOg4lX3c6vkVXc.roa (hash: ec9XZ/8wZUP1CTV/xvGoOKI7TsGIEdOECU3xzYakfZA=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: Q/t2AAOAaTCyOH9es4rkDfSTIUvXFj6kGDJCgSNTK9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:83:e5:36:ad:57:5b:ea:0d:7a:a6:12:3b:46:6f:b7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Sep 9 02:00:31 2026 GMT
Not After : Sep 10 02:00:31 2026 GMT
Subject: CN=66c4b7eb8bb5fb4032a1f38451f26f11d5038da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:40:5d:54:6b:bd:15:75:16:e9:de:a8:bc:
da:e6:88:0b:9a:30:e9:50:a0:d6:4b:02:b9:ca:41:
91:80:3e:53:21:ea:2d:d5:5b:07:08:a9:fb:c5:a4:
f3:56:e3:97:1b:80:87:c9:0c:59:df:11:b5:4b:c5:
dd:92:ea:ca:78:a5:e8:39:39:10:bf:b5:71:65:b1:
32:79:d7:2d:23:14:76:a4:a0:21:ff:26:00:62:38:
52:8c:62:30:d7:9c:06:6b:9c:f2:4a:1f:e5:ef:6c:
6e:06:7e:f2:65:12:93:ed:b0:63:31:a8:b9:5f:c7:
1f:d1:2d:71:b0:a0:fe:4e:c3:d6:46:f3:4f:95:5a:
8b:7e:4e:a7:58:4c:f0:35:4e:25:64:0f:0c:db:de:
b9:63:7d:90:dc:43:8d:e4:85:5c:52:53:f7:68:ad:
7c:a2:c4:de:5a:28:e9:63:f4:ee:0c:41:98:62:a8:
1e:14:af:30:85:04:d7:c5:aa:7a:14:1a:2d:7b:20:
9a:6d:e7:86:d2:24:60:bd:d2:9f:cb:9d:0e:67:f2:
b7:46:05:b5:37:b9:1e:12:37:db:15:a3:96:06:83:
4d:59:c4:14:73:66:79:6a:7a:d6:98:33:d1:a1:2c:
d4:53:78:4c:6d:6e:66:b5:a1:e1:7d:aa:74:4d:44:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C4:B7:EB:8B:B5:FB:40:32:A1:F3:84:51:F2:6F:11:D5:03:8D:A8
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:75:1d:34:fa:3b:ac:f9:71:c1:7a:f0:1d:31:81:85:52:af:
6d:8f:d4:4f:2e:e5:2c:ef:62:58:a5:6d:4d:9b:55:34:69:b2:
6e:9c:a6:f2:83:87:0e:d0:01:ae:8c:3a:f5:91:68:80:34:ff:
2c:96:a3:7d:93:21:d9:6d:35:27:64:5b:eb:66:53:1a:8c:32:
21:49:0e:77:5c:89:c8:b6:17:e7:56:b6:9e:76:6f:12:38:44:
2d:f9:27:83:e2:69:5c:c3:72:47:6b:8a:60:80:dc:ac:3a:1d:
45:f4:96:bc:d2:08:4d:62:22:58:59:bd:95:0c:4e:7c:e1:d9:
81:ef:20:82:4a:f8:e1:91:82:e4:a4:d8:5e:80:1f:3b:8d:a5:
14:1a:e2:ca:41:d8:0d:e4:c0:46:04:f6:29:23:93:ad:67:d8:
e5:d0:c0:ac:a1:df:83:ae:3c:bd:31:19:18:b0:a2:68:7b:9a:
d3:4c:93:98:74:b7:ea:c1:f5:f6:9a:66:d1:e1:1f:c6:63:1e:
52:8a:0d:c8:6c:24:9d:03:39:24:62:0a:8d:d9:7e:c5:70:ce:
5d:e0:74:6f:7c:29:06:a6:b5:6f:6c:10:d1:7b:64:21:7d:01:
a8:e0:1d:09:24:02:46:84:3d:09:02:7d:93:85:b6:3d:4e:3b:
4e:17:78:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 09:33:42 2026 by rpki-client