Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
File: pNFmKbDakg__Ob-1rSmmjYR4BcY.mft (raw, json)
Hash identifier: fk1ZqRHyA1AaxNgOF2NNApSiV7DbAPmhl1EnyfAanic=
Subject key identifier: 79:36:B7:5E:0A:8C:05:1A:38:EE:6C:99:0F:A5:5F:6D:DA:A0:17:A1
Authority key identifier: A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6
Certificate issuer: /CN=a4d16629b0da920fff39bfb5ad29a68d847805c6
Certificate serial: 01A0F945C2F093CE8CE1AFD1A6082237D8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
Manifest number: FB
Signing time: Thu 01 Oct 2026 21:01:33 +0000
Manifest this update: Thu 01 Oct 2026 21:01:33 +0000
Manifest next update: Fri 02 Oct 2026 21:01:33 +0000
Files and hashes: 1: ZbVknpayZkYaSssOD6rrhRn8Uew.asa (hash: uH8YNsT4olZ4QCB+2CENMu1+IA4IAyWwSnwOCS0RVB8=)
2: pNFmKbDakg__Ob-1rSmmjYR4BcY.crl (hash: S+kaM45qP10Pxiq743yKC5XpMkCHJIFWukZdCgT0A9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:45:c2:f0:93:ce:8c:e1:af:d1:a6:08:22:37:d8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d16629b0da920fff39bfb5ad29a68d847805c6
Validity
Not Before: Oct 1 21:01:33 2026 GMT
Not After : Oct 2 21:01:33 2026 GMT
Subject: CN=7936b75e0a8c051a38ee6c990fa55f6ddaa017a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:e9:16:53:81:8e:da:76:75:63:ca:8c:c0:
64:73:c7:8f:bc:a2:8a:d8:5d:61:ed:9d:da:8b:97:
4a:18:bf:a6:83:0e:6f:ad:e6:0d:b7:e6:c5:00:35:
4e:20:4e:29:c6:f7:88:46:78:90:31:3a:5a:db:48:
f5:17:35:ef:68:6c:c8:ad:90:5c:63:3b:61:74:aa:
8c:bf:02:e0:0c:5e:7b:8e:c4:10:aa:0e:7f:1f:d8:
7c:e5:bd:22:8e:ec:60:13:7f:0c:34:82:45:3c:db:
a2:8b:05:b6:9d:a6:26:0c:d2:ae:1c:3f:3e:f3:4c:
96:7d:c2:ca:7a:e6:1e:d4:74:b9:aa:33:d6:41:df:
91:c5:be:ba:1a:54:a5:47:6f:c9:05:11:54:25:1e:
5e:7f:c4:ce:ed:16:8f:96:bf:8c:45:a4:d8:64:d5:
d2:b6:64:3a:36:3f:9c:28:e9:b9:f2:db:d4:70:1c:
5a:33:9a:33:ff:6d:af:4c:8a:cc:ce:c9:a2:89:62:
19:70:d2:6b:15:dc:30:2e:00:33:02:7b:cb:ba:40:
b6:e2:8d:69:e5:5f:68:1f:22:d5:52:94:4a:a6:23:
a5:54:fb:dd:74:48:68:2c:07:0d:12:b0:a2:69:c8:
11:68:cd:de:f3:fc:0a:6f:ba:e6:e4:c3:13:ed:56:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:B7:5E:0A:8C:05:1A:38:EE:6C:99:0F:A5:5F:6D:DA:A0:17:A1
X509v3 Authority Key Identifier:
keyid:A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bd:70:5b:05:ac:8f:a6:e9:d8:fe:21:b6:c7:01:1a:64:7f:
cf:70:9d:63:29:c7:36:f2:fa:0c:13:ed:9b:50:c4:5b:11:ea:
cc:16:ce:6e:cd:ee:ba:ae:22:f5:f9:d1:3c:30:41:0f:00:6e:
5f:0a:d7:0b:46:40:dd:98:fb:9b:c0:5f:24:9c:73:73:e7:9d:
8e:cb:8c:91:f1:ba:cf:f4:3d:b2:f1:1d:c0:b2:b6:91:7b:21:
42:90:e3:9f:c4:ae:a1:14:1c:11:f6:55:69:e8:d8:71:8b:87:
d6:9e:a1:a5:b4:b6:c4:64:2a:dd:72:14:d3:cd:ad:57:2e:6e:
3e:92:f0:f5:03:ef:14:10:d5:c4:d2:53:e2:a8:73:a8:45:b9:
bc:9c:77:53:b7:f6:14:4f:27:f1:20:7a:50:5b:f1:d4:d2:53:
9c:4d:0c:d5:af:67:d1:e5:4c:fa:22:1f:28:50:a8:87:56:c2:
28:3b:06:e6:c8:6d:de:0e:50:75:65:a7:01:5e:32:cb:8f:db:
a6:12:c7:b9:e8:1e:a2:89:d9:52:74:a0:72:cb:66:50:14:c1:
fc:09:88:6f:91:3b:c8:14:c2:02:9c:bd:0c:cb:e5:42:9c:cf:
4d:93:f3:dd:fc:6c:ae:cd:cf:3a:d7:5d:67:33:17:20:3c:d1:
0d:e7:95:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:50:13 2026 by rpki-client