Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: gPo5iE7pkqH+TZ4Evg9mbGFoy3oN3w5/Wou3iV+KAyQ=
Subject key identifier: B8:8C:74:64:F4:C5:35:FC:02:1E:69:C3:A0:5A:83:31:C6:BF:A5:DA
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 01A17A719E184059C0890225B1DAF14FC11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 0EB7
Signing time: Mon 26 Oct 2026 23:00:28 +0000
Manifest this update: Mon 26 Oct 2026 23:00:28 +0000
Manifest next update: Tue 27 Oct 2026 23:00:28 +0000
Files and hashes: 1: jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa (hash: heA9ElftnVcEx/Z56cUQXfy2JpdBhi/Gw5ToPa737lc=)
2: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: HOHoE9ZlZqPfLwei6gqdzIDS7RSECKrOOPwxmtKt3fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:9e:18:40:59:c0:89:02:25:b1:da:f1:4f:c1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Oct 26 23:00:28 2026 GMT
Not After : Oct 27 23:00:28 2026 GMT
Subject: CN=b88c7464f4c535fc021e69c3a05a8331c6bfa5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:2d:2a:1b:68:47:b3:39:d7:8e:46:17:65:
58:4d:1c:99:6f:78:ca:32:40:d2:e9:6c:c9:f6:49:
41:84:bb:33:45:55:b2:05:34:23:8b:f6:bf:da:e0:
92:59:7e:0f:d9:39:66:48:25:58:e7:f7:18:79:b0:
f6:6c:fd:0d:1e:85:53:03:4f:2c:d9:56:52:ea:ad:
9f:15:53:59:26:0e:83:32:3c:6c:dd:8f:20:ba:54:
ed:47:df:cb:e3:f2:57:27:bd:fa:68:a9:11:66:06:
31:44:61:c1:14:90:bc:5b:59:a4:8b:00:0b:5b:91:
34:81:d8:72:f6:05:71:02:1e:d9:5e:81:ad:ba:d5:
60:09:2f:aa:5f:31:1a:80:cc:86:06:a2:7f:2b:41:
a0:e4:19:25:a7:7c:73:42:8b:bd:6c:75:72:d9:8f:
e4:14:4a:5a:46:8c:26:4b:35:c9:3c:a0:20:72:d2:
65:9d:8d:ac:12:d4:63:31:bf:ee:98:91:43:82:72:
51:d4:58:e7:d1:99:89:17:02:27:3b:af:ac:2e:e9:
97:7e:6f:f7:58:b1:03:03:83:05:6c:92:bb:eb:97:
21:00:6b:c0:91:6a:5f:b6:f9:1c:b4:76:12:bd:11:
d0:4c:6b:69:7c:2e:62:ec:6d:aa:52:03:99:8b:ee:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8C:74:64:F4:C5:35:FC:02:1E:69:C3:A0:5A:83:31:C6:BF:A5:DA
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:18:83:ca:af:1e:ff:02:10:b6:37:64:fb:c5:18:ab:c8:67:
4f:8a:aa:ef:ef:be:63:8e:d2:ef:bb:a9:19:85:ee:c3:ff:4e:
a8:d6:4c:f6:d8:f2:c0:5e:41:92:59:29:17:b8:5a:48:2a:72:
b1:03:ef:a4:45:94:04:7a:a8:16:ec:4f:9b:eb:da:2c:ae:1c:
b5:b6:48:0d:77:d2:8c:72:04:31:8b:67:6a:0c:37:ab:49:de:
9c:dd:c5:c1:14:ce:d0:af:38:20:fa:b7:c4:6d:4f:91:96:11:
cd:0f:ff:08:41:4f:3c:57:5e:6e:d7:60:82:e8:c7:e6:b0:59:
dc:cc:81:4d:81:94:51:56:8a:3b:13:d9:32:57:68:da:3d:c1:
68:5e:bc:33:aa:55:e9:c0:fb:3e:d2:39:8e:5a:44:d3:5d:0e:
03:7d:e3:c5:3b:d2:57:1b:2c:9e:73:bf:e5:e0:9b:9a:ec:f0:
5f:88:ee:d0:ff:5d:b9:73:8a:bd:2c:ca:41:44:80:c5:de:de:
6d:c9:74:ec:7d:5e:11:df:12:4e:b1:ce:be:f8:9c:e1:29:d4:
3f:35:71:36:15:2f:c4:c7:d3:1c:ee:14:4f:16:ad:0d:83:f7:
0f:d6:91:9e:07:14:5f:dc:2c:ad:00:cd:8f:6e:40:e5:ef:f1:
f8:06:90:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:15:09 2026 by rpki-client