Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
File: pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft (raw, json)
Hash identifier: IjsGblvCU8jsGRCzNsSM7sVZPzJHF1wSv0GAKGTDh0Y=
Subject key identifier: 01:44:2A:A3:DA:67:D7:16:D7:A5:49:A4:4E:43:8A:ED:17:31:82:E4
Authority key identifier: A4:5A:3D:EE:A2:2A:D7:0F:44:BD:FF:F3:DA:CA:78:7C:FA:B7:3A:FC
Certificate issuer: /CN=a45a3deea22ad70f44bdfff3daca787cfab73afc
Certificate serial: 019E284AC49875ECB1A74C054600A0721B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
Manifest number: 08
Signing time: Thu 14 May 2026 21:00:48 +0000
Manifest this update: Thu 14 May 2026 21:00:48 +0000
Manifest next update: Fri 15 May 2026 21:00:48 +0000
Files and hashes: 1: ZhmfZOQthLNwaXu66U6ErWqlalA.asa (hash: qf+Z2Ej6j2Id/dJp4k8hFnsz0b10rm8/N0nNZYscrA0=)
2: pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl (hash: Nq1wDVvcsVt2wgk9MfLOnFkoiVE/iFT/6fafySj1FQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4a:c4:98:75:ec:b1:a7:4c:05:46:00:a0:72:1b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45a3deea22ad70f44bdfff3daca787cfab73afc
Validity
Not Before: May 14 21:00:48 2026 GMT
Not After : May 15 21:00:48 2026 GMT
Subject: CN=01442aa3da67d716d7a549a44e438aed173182e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:54:d8:73:b4:a2:8d:45:9b:4f:d0:e1:2d:
b9:44:e3:81:c8:b1:9f:74:dc:ae:69:35:50:45:31:
bb:82:97:13:e1:3d:bc:b5:37:45:d4:d0:53:00:37:
e3:9a:9d:c2:8b:5d:86:62:ae:7d:60:95:f2:00:af:
0c:3e:6b:f5:7d:4b:56:fd:0d:f9:85:27:71:f5:50:
43:29:44:81:da:97:e8:a0:dc:ba:e9:7f:29:6f:43:
70:b1:e5:b8:3e:81:89:ea:bf:be:9d:81:bb:37:d1:
44:ac:98:37:9a:50:90:d9:fd:d9:68:b7:22:bb:b2:
f6:c2:b1:3f:39:61:28:34:c8:5b:05:b8:ae:e9:f0:
88:c8:74:31:46:f5:93:ed:86:5c:2f:5c:03:fe:c4:
09:a1:44:e3:3a:17:f1:b2:e1:83:db:8c:73:4d:ac:
68:ca:1e:9a:46:2f:34:b5:7c:a7:c0:a7:3e:08:f0:
b1:c1:2c:52:a2:9a:c9:38:0c:16:12:34:20:43:7c:
60:0b:14:34:ab:33:e2:ba:87:ef:53:51:62:2d:5b:
08:d4:8d:a5:cb:2f:9f:b4:9d:b5:3a:6a:f5:b5:78:
2e:1d:37:a4:c6:d7:27:dc:e8:06:a3:09:64:c6:9f:
cc:87:02:91:90:f8:03:ef:ba:b1:bd:71:d8:00:8f:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:44:2A:A3:DA:67:D7:16:D7:A5:49:A4:4E:43:8A:ED:17:31:82:E4
X509v3 Authority Key Identifier:
keyid:A4:5A:3D:EE:A2:2A:D7:0F:44:BD:FF:F3:DA:CA:78:7C:FA:B7:3A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:60:1d:dc:bc:a0:98:3c:c8:a8:a4:71:c1:4f:57:64:46:5d:
31:27:41:0d:5b:02:a2:8d:8f:e2:91:aa:10:6d:f7:e1:0e:e1:
2b:4d:e3:c2:e3:e9:41:8c:cc:b7:c1:ec:27:1b:ee:42:bb:d7:
59:b6:df:48:1a:a4:99:3a:38:db:4d:c6:94:ce:b2:0f:d2:ab:
91:70:83:d8:c6:c1:68:b8:13:bf:7a:dc:7b:84:7f:95:e2:67:
b1:1a:30:cc:a8:e0:e5:44:a4:ff:df:0a:c5:a6:ad:d0:37:ad:
20:d8:95:0c:f7:bb:cc:47:3b:f3:16:c0:c6:e6:a9:79:98:a8:
8f:49:dc:a2:3b:a6:93:c9:9e:d1:ee:cd:1b:4d:c1:ea:ba:f3:
b8:1c:8c:b8:1a:7e:ea:19:69:c7:4a:79:1f:09:46:6a:d8:95:
dd:d3:b0:70:78:42:fa:76:36:73:46:fd:89:47:4c:e2:46:52:
2d:dd:05:a9:8d:5f:f8:d4:3e:60:18:df:15:92:89:7f:04:ee:
50:f2:13:ba:36:5e:32:aa:e7:32:7c:f5:fe:77:dc:f1:e7:ab:
eb:1e:f9:6d:cb:23:c6:18:70:0f:ae:84:3e:92:32:06:c9:82:
c8:9b:51:50:e3:80:f0:9e:94:6b:b9:ac:35:28:23:03:1a:5f:
21:c3:74:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:14:49 2026 by rpki-client