Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: 4EES3wYyT3oEe/0fjAl51+A211ITC8BN96QfFQ/Dy98=
Subject key identifier: 49:27:B4:56:39:90:31:5B:FA:87:95:B0:89:9E:6B:BA:71:7B:36:B8
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 01A17C6081145D797A7AFDE09AD2B6C8227C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 0EB8
Signing time: Tue 27 Oct 2026 08:01:01 +0000
Manifest this update: Tue 27 Oct 2026 08:01:01 +0000
Manifest next update: Wed 28 Oct 2026 08:01:01 +0000
Files and hashes: 1: jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa (hash: heA9ElftnVcEx/Z56cUQXfy2JpdBhi/Gw5ToPa737lc=)
2: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: P36XJcHX4wK+IZx0SnTKq43+Jatk5fZRXUl4hzzfn3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:81:14:5d:79:7a:7a:fd:e0:9a:d2:b6:c8:22:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Oct 27 08:01:01 2026 GMT
Not After : Oct 28 08:01:01 2026 GMT
Subject: CN=4927b4563990315bfa8795b0899e6bba717b36b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:6e:78:37:68:77:e7:ab:b7:74:48:fe:94:
8e:a4:8a:23:9c:59:ad:1c:73:aa:ba:86:4d:8a:ac:
7e:20:6c:41:bb:9f:aa:42:46:e9:04:9f:42:4a:ae:
60:1d:33:7d:e8:86:4c:85:01:94:fa:3d:b7:c9:ab:
1e:4d:db:ca:fc:9e:37:89:1f:bd:d5:d4:fa:b1:a1:
46:79:b3:0b:26:84:ea:66:b8:da:07:97:3c:7b:a4:
68:ec:7a:9d:00:34:cd:7f:93:de:8b:53:b5:91:44:
dd:66:28:07:eb:bc:40:37:1e:45:01:b8:f5:5b:b9:
06:72:db:d7:38:50:68:db:d9:ac:2a:48:67:8d:1c:
c9:c1:cf:f1:49:f9:a2:5b:9e:cf:98:6f:35:5c:58:
da:4a:39:81:97:72:d7:a3:1c:4e:d8:8d:38:e8:eb:
7c:03:5e:0f:4c:d6:92:5f:3d:27:49:48:29:51:2f:
b8:0a:1c:12:c5:43:11:04:eb:c0:e9:bb:cc:4f:ce:
76:b4:67:b8:e0:f9:e1:d2:42:48:49:85:c9:2f:8a:
5b:07:8b:14:aa:37:89:da:a5:d7:15:06:c6:e6:ab:
f0:74:63:64:cf:b7:f6:b5:75:64:72:3c:cb:66:89:
67:f0:f2:cb:6b:bb:70:0a:00:69:f9:b0:04:07:cb:
98:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:27:B4:56:39:90:31:5B:FA:87:95:B0:89:9E:6B:BA:71:7B:36:B8
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8d:9f:2d:1b:2a:1f:58:61:24:d5:5f:3c:db:09:b2:db:9a:
1f:75:5f:df:e4:19:ed:fa:17:4e:83:bf:8b:b5:2b:23:9d:5c:
17:0f:8b:a4:d6:ae:01:d3:07:4a:00:6a:2a:46:d6:c4:74:79:
9d:5e:05:7f:f2:8a:6d:7d:41:92:c8:e9:78:6a:3f:10:83:b0:
e3:db:08:41:8d:da:f7:27:b0:b6:a0:3e:fa:6f:ed:70:aa:42:
c2:1d:b6:df:c8:cd:43:61:ce:2a:72:93:d4:c4:a7:12:c7:18:
fa:ce:00:d2:8a:31:e6:5e:27:6e:9c:d1:69:fd:4f:a3:3b:05:
36:dc:02:ef:eb:a7:5c:15:77:71:57:3f:21:df:ac:3f:4a:cf:
84:65:56:03:e1:67:94:a0:2b:e3:61:0b:af:4a:c9:23:19:51:
87:69:b3:5a:7e:dc:87:d4:90:20:50:b2:48:cd:a6:1b:ef:8a:
7d:15:66:1b:03:8d:9e:e1:5c:5f:8b:c5:9d:e9:7b:9c:7c:03:
08:a9:eb:13:8e:c2:1b:78:68:b2:a1:61:02:08:1c:d8:11:f4:
bd:56:06:c5:a6:38:f5:01:33:98:ed:fe:09:10:ff:4a:f6:a4:
a8:7b:83:ba:36:00:6e:30:f8:9f:16:4f:3a:64:fe:a7:39:e9:
c4:cf:b3:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8YIEUXXl6ev3gmtK2yCJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDc4OTNmYjViMzQ4ZTY4YTY2ZDU1YTI4ZjI3OGNiZjM5
MzFkZjQwHhcNMjYxMDI3MDgwMTAxWhcNMjYxMDI4MDgwMTAxWjAzMTEwLwYDVQQD
Eyg0OTI3YjQ1NjM5OTAzMTViZmE4Nzk1YjA4OTllNmJiYTcxN2IzNmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RhueDdod+ert3RI/pSOpIojnFmt
HHOquoZNiqx+IGxBu5+qQkbpBJ9CSq5gHTN96IZMhQGU+j23yaseTdvK/J43iR+9
1dT6saFGebMLJoTqZrjaB5c8e6Ro7HqdADTNf5Pei1O1kUTdZigH67xANx5FAbj1
W7kGctvXOFBo29msKkhnjRzJwc/xSfmiW57PmG81XFjaSjmBl3LXoxxO2I046Ot8
A14PTNaSXz0nSUgpUS+4ChwSxUMRBOvA6bvMT852tGe44Pnh0kJISYXJL4pbB4sU
qjeJ2qXXFQbG5qvwdGNkz7f2tXVkcjzLZoln8PLLa7twCgBp+bAEB8uYiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkntFY5kDFb+oeVsImea7pxeza4MB8GA1UdIwQY
MBaAFKZHiT+1s0jmimbVWijyeMvzkx30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDIt
ZDYyNDQ5NmRkY2M4LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDItZDYyNDQ5NmRkY2M4
LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO42fLRsq
H1hhJNVfPNsJstuaH3Vf3+QZ7foXToO/i7UrI51cFw+LpNauAdMHSgBqKkbWxHR5
nV4Ff/KKbX1BksjpeGo/EIOw49sIQY3a9yewtqA++m/tcKpCwh2238jNQ2HOKnKT
1MSnEscY+s4A0oox5l4nbpzRaf1PozsFNtwC7+unXBV3cVc/Id+sP0rPhGVWA+Fn
lKAr42ELr0rJIxlRh2mzWn7ch9SQIFCySM2mG++KfRVmGwONnuFcX4vFnel7nHwD
CKnrE47CG3hosqFhAggc2BH0vVYGxaY49QEzmO3+CRD/SvakqHuDujYAbjD4nxZP
OmT+pznpxM+zNA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:38 2026 by rpki-client