Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
File: pMtQ54o6MeM3XPKquGXoRf8umcE.mft (raw, json)
Hash identifier: t72awWQ/r/gr3FQPaTpHSqlGyisbARA4Z8aCzcsgcJE=
Subject key identifier: 04:A8:A1:B4:6C:F1:97:DF:33:31:8A:9F:D0:4E:1F:36:53:7A:55:12
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 01A17D73E3C26AA25BF0FD645224C7DFF914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
Manifest number: 1AD6
Signing time: Tue 27 Oct 2026 13:01:49 +0000
Manifest this update: Tue 27 Oct 2026 13:01:49 +0000
Manifest next update: Wed 28 Oct 2026 13:01:49 +0000
Files and hashes: 1: KeBHh_EXoo6vxPcJVgCWPFy_Qck.roa (hash: Lb6JJsVM1wJrwKLdOhRrqdN+kt/BOWmpYchxNlLSv+A=)
2: RgbTxSuQRNXFVhZjHsG1yRfbDcY.roa (hash: QEQTGxs8uKOEp8JVm8z26NyHbZ3CIT8Ts2wlZUqrfqw=)
3: fc-z64p9INgXqSlpt0wgmjnDjcM.roa (hash: iAvsJsJGvYYjjk6ye/5/KN/cmvlNuk2vjqxHBnhTILY=)
4: pMtQ54o6MeM3XPKquGXoRf8umcE.crl (hash: Xuogp9nq02xp01x1qoklnv9g0JgBzyhOUGgZsHdes90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:e3:c2:6a:a2:5b:f0:fd:64:52:24:c7:df:f9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Oct 27 13:01:49 2026 GMT
Not After : Oct 28 13:01:49 2026 GMT
Subject: CN=04a8a1b46cf197df33318a9fd04e1f36537a5512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:8f:07:78:3a:2d:c2:1f:90:5d:72:cf:63:
46:67:6c:c8:ab:cf:5a:5a:7e:00:72:e1:c4:2d:dd:
83:32:a5:0f:43:e8:04:ac:3e:f1:52:f4:9c:fa:b6:
6e:71:b9:b5:59:74:42:50:7f:76:ce:68:56:8c:4a:
9b:0b:de:c0:4b:c2:33:22:27:71:e3:e4:d0:04:ec:
31:a4:e1:e2:de:8a:2a:79:70:9f:a8:c9:45:0a:ad:
d3:1f:e1:63:d2:f6:f3:67:fd:c6:f6:c7:dc:d9:82:
a1:44:3d:d7:2c:d5:7d:41:e2:5a:36:0e:d7:1c:18:
43:05:83:79:77:b2:dc:5e:24:eb:60:ba:b8:2d:8c:
6f:82:19:df:ef:33:d9:ea:04:fe:eb:4f:39:25:92:
c1:9c:f0:37:e1:0d:c3:15:a9:f4:e8:66:c8:f7:d1:
7d:7f:0c:bf:28:4e:72:90:fb:5f:c6:df:d0:45:e3:
cc:7e:88:d6:48:d0:3b:ff:73:6a:2b:74:76:ac:c6:
86:66:5f:df:5b:74:c0:39:30:09:54:c7:dd:59:d3:
1c:91:35:2e:7f:97:c0:61:0c:4d:18:a3:02:70:6c:
9b:92:bb:1b:dd:00:e4:11:5c:ba:27:6f:21:16:66:
3c:51:e2:c5:72:fb:38:d5:5d:0a:38:b6:f3:a8:3f:
59:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A8:A1:B4:6C:F1:97:DF:33:31:8A:9F:D0:4E:1F:36:53:7A:55:12
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fb:a0:2b:3e:36:dd:85:a6:82:4b:aa:1c:11:f1:e1:66:c8:
30:2e:7f:e4:f1:47:ce:77:59:75:51:7d:8b:d6:69:c0:97:4a:
f9:f5:70:7b:70:8b:7f:11:b0:53:fc:d9:9f:ed:5c:61:08:d7:
69:49:47:38:6c:23:72:32:59:e7:d5:ab:9d:76:fb:9b:67:38:
ee:a5:b8:26:34:eb:23:7f:44:7f:59:f1:9e:52:5b:90:29:7d:
f0:e3:f9:e4:55:9d:f9:15:3a:c7:10:89:80:55:f0:5d:90:1e:
db:19:41:41:7f:07:24:fb:65:67:86:23:33:62:a9:27:c7:4c:
5e:61:f0:62:42:85:6a:cc:f8:3b:a1:fd:47:25:e1:95:62:98:
01:63:58:21:f8:d8:75:a3:12:b9:00:ff:16:6b:22:40:53:56:
0e:63:90:5d:2e:83:92:1b:0c:6d:e2:ed:d7:42:d9:11:8e:60:
84:4a:7e:25:59:07:16:a0:63:cd:9e:1b:aa:4d:b7:af:6a:f3:
8f:e2:b8:2a:b9:e1:cf:1b:e9:76:dc:1a:7c:75:30:4d:6e:a3:
01:2c:47:84:9c:0d:f2:6a:73:0a:25:91:ae:e1:70:1d:3a:5c:
64:b0:19:a2:4b:fd:19:3a:64:39:d3:59:d5:eb:a5:79:58:22:
fa:e8:b7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:59:37 2026 by rpki-client