Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
File: pMtQ54o6MeM3XPKquGXoRf8umcE.mft (raw, json)
Hash identifier: Q/3ZTcJW3ES6Q9jgVFaEfcHAVBGXkcXHMgcuI7JqlwI=
Subject key identifier: D3:20:96:E7:57:68:40:82:1E:C9:B4:AA:F8:4A:4E:09:BA:B2:C5:D4
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 01A08C0DB00B7AA704F7A85063C45435B03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
Manifest number: 1A59
Signing time: Thu 10 Sep 2026 16:01:42 +0000
Manifest this update: Thu 10 Sep 2026 16:01:42 +0000
Manifest next update: Fri 11 Sep 2026 16:01:42 +0000
Files and hashes: 1: KeBHh_EXoo6vxPcJVgCWPFy_Qck.roa (hash: Lb6JJsVM1wJrwKLdOhRrqdN+kt/BOWmpYchxNlLSv+A=)
2: RgbTxSuQRNXFVhZjHsG1yRfbDcY.roa (hash: QEQTGxs8uKOEp8JVm8z26NyHbZ3CIT8Ts2wlZUqrfqw=)
3: fc-z64p9INgXqSlpt0wgmjnDjcM.roa (hash: iAvsJsJGvYYjjk6ye/5/KN/cmvlNuk2vjqxHBnhTILY=)
4: pMtQ54o6MeM3XPKquGXoRf8umcE.crl (hash: tfAuZ8TzYGV07MtWVX42nnDvASf9s5G1lDhzbuZH16Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:b0:0b:7a:a7:04:f7:a8:50:63:c4:54:35:b0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Sep 10 16:01:42 2026 GMT
Not After : Sep 11 16:01:42 2026 GMT
Subject: CN=d32096e7576840821ec9b4aaf84a4e09bab2c5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c8:ef:db:f7:2b:b8:06:83:2f:56:cb:c4:52:
b1:3c:7b:62:b0:89:bf:d2:d4:d0:24:42:20:e0:4b:
96:6e:92:e4:30:16:59:da:8c:fc:31:43:4b:08:ef:
fd:11:2d:3a:12:0a:0d:07:c0:b6:36:d9:43:0b:b2:
74:36:af:7f:73:9d:e7:66:a0:04:44:a3:12:3c:80:
9d:02:af:a9:73:30:18:24:bc:00:49:be:f9:d1:ff:
ac:d6:5e:2e:08:11:e1:01:9a:f2:df:31:06:ef:8e:
0e:3d:a0:35:c3:f2:47:34:62:ec:94:f6:51:19:33:
a6:89:a6:e7:cb:f6:bf:ca:84:3a:2c:1d:1a:1d:35:
d1:68:e2:32:41:9e:7f:12:19:cf:fa:53:3a:8c:6f:
3b:bf:b8:e3:ce:86:96:65:6e:0d:44:f3:8b:04:6d:
bd:6c:c1:9d:64:79:a2:b7:a8:1c:6d:41:7b:01:4c:
52:bf:cc:56:a4:df:15:2a:2d:cb:d0:af:79:1e:c9:
3b:be:cc:e7:11:93:52:50:90:89:58:84:2a:29:7b:
6d:80:55:79:51:bd:69:d0:b2:1b:d1:46:87:03:a7:
a9:3f:89:28:bd:51:9f:91:e9:56:46:10:79:b7:63:
43:15:64:59:f4:e7:85:b9:29:95:33:9a:ab:d4:e3:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:20:96:E7:57:68:40:82:1E:C9:B4:AA:F8:4A:4E:09:BA:B2:C5:D4
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0a:5e:35:03:13:b9:b6:60:60:d7:a2:34:f3:c7:76:13:c1:
8d:c5:ea:70:8d:ab:90:70:d4:ed:3b:fe:73:a4:38:c3:54:ac:
49:74:eb:8c:5b:23:f9:55:fb:55:3c:f5:47:1d:02:89:d4:4d:
8c:ca:83:f0:1b:cc:d8:b7:1a:48:cd:f8:f8:4f:8e:99:0a:56:
56:42:93:d6:fa:55:be:a2:22:d8:dd:9d:54:d7:32:f6:76:03:
4e:21:a0:ef:af:63:8e:c0:f8:a4:4a:81:0e:bf:d6:6d:c1:c9:
ad:7c:7f:dc:e8:f3:90:57:e0:5e:f0:9c:34:9d:18:ef:ee:e4:
f3:d1:43:42:21:e9:59:c6:4f:40:98:5f:2b:2e:ce:bd:40:98:
9f:dd:a5:b3:a2:02:4b:77:90:2f:ea:91:c3:23:4f:97:8c:ec:
07:61:45:eb:0f:8d:1f:71:b3:9a:81:66:5b:db:a5:33:34:8c:
75:ab:b6:2c:55:53:99:1c:7a:4c:7d:64:7e:97:63:cf:67:fb:
dc:3d:1e:31:6a:06:97:1c:d2:80:f2:d8:42:22:f1:cd:bd:b4:
8b:28:78:a2:90:02:97:6c:59:37:7d:57:6f:69:d1:42:2f:af:
d9:99:d8:d1:aa:e6:32:93:8b:4e:93:95:8c:a1:78:10:c9:68:
d3:dd:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:39 2026 by rpki-client