Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
File: pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft (raw, json)
Hash identifier: I2HHeVTpvrVAZ0iQCV3KfV+yySLbadPHZnZuoLSfuVo=
Subject key identifier: 72:3D:8E:93:62:69:2D:E9:76:EA:1F:92:53:4C:BC:A9:16:59:CC:DE
Authority key identifier: A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
Certificate issuer: /CN=a5541609cd947bedfc99125840030108a3f141c1
Certificate serial: 01A1852D1B165E284A3BDFC317DDE4040661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
Manifest number: 0440
Signing time: Thu 29 Oct 2026 01:01:28 +0000
Manifest this update: Thu 29 Oct 2026 01:01:28 +0000
Manifest next update: Fri 30 Oct 2026 01:01:28 +0000
Files and hashes: 1: 2751EE97ZUX46PuQKd5VXZi8NQ4.roa (hash: ttrLfXYMhhaOogoOW1E72PyGhahP9uiFnKhfYUnBtRs=)
2: 92O93VxDU4pUVWr7dnT1Y4KqdI0.roa (hash: 27cPDTqD5XdPrxS6jGsrQqv1l0PeJCPzXimQBRdpqQ4=)
3: pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl (hash: 7nEb4xg0u0IbY8BnzNrjqTTwsJSdaYbBQcFiCZK4kdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:2d:1b:16:5e:28:4a:3b:df:c3:17:dd:e4:04:06:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5541609cd947bedfc99125840030108a3f141c1
Validity
Not Before: Oct 29 01:01:28 2026 GMT
Not After : Oct 30 01:01:28 2026 GMT
Subject: CN=723d8e9362692de976ea1f92534cbca91659ccde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:b5:47:c1:1c:6b:19:3a:76:54:5c:84:cc:
b6:d5:8f:58:dd:e1:f8:da:71:c3:f2:e3:b9:bf:75:
f2:10:12:4c:2e:67:77:d2:7e:f6:a7:9e:00:ea:65:
68:e0:bd:37:ee:b6:54:bb:11:15:5f:bd:63:e5:c6:
e2:e5:5c:51:39:f5:09:b6:de:15:10:4c:f2:19:db:
fd:86:86:01:8d:ee:3b:d2:a8:0b:99:f1:7f:e4:e3:
c1:7d:58:90:94:a6:e7:d7:f9:7a:46:d7:f5:56:35:
82:e9:97:26:30:07:a3:8f:e3:8c:6b:01:79:5a:91:
6d:08:a7:b7:95:fb:c4:ce:92:1b:57:6c:b2:2e:55:
78:21:94:d4:ec:ba:d9:2d:94:7a:38:c7:aa:75:69:
71:f7:63:13:96:8f:bb:91:4c:97:75:12:72:93:ec:
76:dc:95:3d:1a:3e:14:3a:a7:13:78:dd:74:65:26:
81:79:8a:cd:68:a0:6c:17:3e:93:ea:0d:2b:88:bd:
4b:7d:54:8b:f9:fe:98:03:82:58:f8:f7:ca:48:c6:
53:49:f1:bf:6f:0c:44:07:5e:f7:6d:6b:87:04:49:
4b:49:6f:8f:1b:e2:f5:f4:84:3b:c2:da:58:68:a7:
bc:08:bd:07:6a:97:fe:90:0a:7b:cd:1c:a3:dc:19:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3D:8E:93:62:69:2D:E9:76:EA:1F:92:53:4C:BC:A9:16:59:CC:DE
X509v3 Authority Key Identifier:
keyid:A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0e:cc:b7:fb:5c:78:73:b4:6c:a6:94:48:4c:83:18:a2:44:
b0:4d:ab:44:a4:70:91:dd:53:2b:a0:a1:99:27:b0:40:ae:45:
ab:40:63:26:fe:17:69:3f:2d:0a:7c:2f:e9:6f:38:23:89:ba:
e2:84:2b:eb:34:ac:a1:f0:03:a8:c5:ae:31:50:04:4b:17:01:
c6:26:51:75:a9:8a:ac:01:ce:2c:c1:7b:7e:dc:8a:85:6a:21:
b2:9c:96:2c:b6:c2:95:be:53:4f:7e:09:ed:0d:0e:26:d4:1f:
5e:3e:ad:6e:ac:53:64:dc:b5:ea:bd:72:77:4a:8f:18:51:1b:
f2:86:66:44:f0:9a:08:0f:54:6b:19:cb:4e:71:06:9f:75:07:
d5:7a:f6:55:e5:71:ce:3f:e6:84:67:ca:c8:71:12:0b:b7:97:
f6:6f:d5:1e:fa:c5:13:b6:09:3e:26:d5:5a:ca:97:48:63:16:
a4:74:69:9c:ab:9a:ee:50:5b:4a:1c:2f:51:2b:87:53:74:55:
52:d7:5e:c7:8d:d4:bc:a5:34:ff:25:a5:e2:ff:02:9d:60:65:
07:22:86:ae:77:cf:84:a0:a3:b5:89:88:61:bf:0b:96:45:e4:
d1:52:9a:1b:d6:2f:f1:68:e4:dd:37:69:76:97:21:4d:4b:18:
41:84:9a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 07:38:17 2026 by rpki-client