Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
File: pNFmKbDakg__Ob-1rSmmjYR4BcY.mft (raw, json)
Hash identifier: 5a7T74j09ynGsUWLA5s9s62TfvhEbrP9m6WT7zHAQuc=
Subject key identifier: F5:AD:D4:1A:BD:84:AB:4F:66:E0:9A:33:C1:A1:DC:C3:C3:1F:F3:69
Authority key identifier: A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6
Certificate issuer: /CN=a4d16629b0da920fff39bfb5ad29a68d847805c6
Certificate serial: 01A0F56906656834564AA215E56C078B17BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
Manifest number: F9
Signing time: Thu 01 Oct 2026 03:01:35 +0000
Manifest this update: Thu 01 Oct 2026 03:01:35 +0000
Manifest next update: Fri 02 Oct 2026 03:01:35 +0000
Files and hashes: 1: ZbVknpayZkYaSssOD6rrhRn8Uew.asa (hash: uH8YNsT4olZ4QCB+2CENMu1+IA4IAyWwSnwOCS0RVB8=)
2: pNFmKbDakg__Ob-1rSmmjYR4BcY.crl (hash: GTHM4WSdnwSSRPxtwwy5NK0h8ba2cX9tDfdgyc9tR7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:69:06:65:68:34:56:4a:a2:15:e5:6c:07:8b:17:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d16629b0da920fff39bfb5ad29a68d847805c6
Validity
Not Before: Oct 1 03:01:35 2026 GMT
Not After : Oct 2 03:01:35 2026 GMT
Subject: CN=f5add41abd84ab4f66e09a33c1a1dcc3c31ff369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:c1:6f:11:ad:50:df:b6:7c:4c:5b:94:79:
08:48:0c:38:f8:95:5b:89:8a:2a:cd:c8:04:4e:31:
b8:4f:63:ed:2e:15:dd:34:a0:f8:ae:b4:17:b3:f1:
a8:e8:f0:a7:b1:3b:31:cc:7b:6b:4e:11:6f:54:54:
97:4a:d5:0a:53:d7:f7:a2:df:99:23:42:8d:ae:c6:
95:bd:d6:c1:1d:ce:32:39:1f:0c:bb:7b:2d:89:5e:
fc:7b:4c:4b:f8:58:90:ea:fd:e3:e6:7c:72:9f:92:
14:b9:5e:01:e8:5d:55:89:f8:c9:50:63:a8:29:66:
f8:9f:7f:98:a0:68:bc:e5:1b:3f:c0:85:e2:cc:1f:
05:46:1b:44:9c:70:3d:70:83:79:f4:b6:a6:43:53:
a6:d6:4c:da:be:bc:aa:e0:61:ba:76:e6:50:8b:7e:
47:11:55:90:7c:46:d4:77:26:14:5b:c5:c8:aa:f6:
39:cc:8f:2a:32:11:fc:de:fc:02:f8:1f:a2:2a:c3:
65:e0:30:1c:d2:75:c1:dd:7e:0e:17:e0:df:9d:a1:
90:a1:7b:15:73:a6:28:8d:cb:02:21:90:cb:a1:d5:
7c:4a:f4:de:5e:e0:d7:bc:a3:fe:15:53:04:1a:2d:
cf:76:03:66:63:b6:a3:1c:2b:d6:e6:db:bf:f2:2a:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AD:D4:1A:BD:84:AB:4F:66:E0:9A:33:C1:A1:DC:C3:C3:1F:F3:69
X509v3 Authority Key Identifier:
keyid:A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:6d:fb:4a:97:51:c1:3c:7f:3d:3a:bd:82:41:97:f6:cc:ac:
91:fa:ab:39:0b:dd:f4:42:35:ab:6b:65:78:71:fe:6a:a0:3b:
db:78:68:cf:aa:31:ff:75:de:85:54:af:d0:cc:ec:3d:c4:5a:
26:6b:cb:32:01:af:a2:fc:16:64:a9:5f:ef:78:2d:36:f3:cf:
fd:77:a9:92:34:ae:51:d7:58:30:98:ae:9b:e1:b7:ad:71:0e:
70:55:e6:78:c8:46:7a:8c:23:2c:e5:f2:4d:6f:83:3b:83:38:
8a:8f:78:9f:2c:db:3e:14:62:d3:a1:3c:59:d6:55:09:57:12:
b5:60:65:7b:8c:ca:d8:0c:2e:7f:7d:4c:41:ae:94:df:4a:05:
f2:bb:80:00:ac:86:d8:be:6f:e4:e8:1e:8a:3d:29:73:0e:79:
51:0f:6b:eb:5f:13:12:76:0f:a4:33:83:26:f0:a6:a0:c2:90:
3b:cb:7f:21:8c:c3:41:63:b8:fc:44:4e:cd:43:81:68:c2:99:
d9:82:0c:4f:aa:53:7d:a8:9e:0d:9d:4b:aa:32:75:97:61:27:
5d:1c:7b:b7:08:d1:22:bf:e1:7e:f0:fa:db:f0:64:e5:ad:df:
02:30:a7:e0:d5:83:05:f1:ea:22:82:df:b7:9b:bd:fc:f2:a2:
5a:46:43:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 12:54:49 2026 by rpki-client