Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
File: p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft (raw, json)
Hash identifier: 7B+CsG5bnRqTSmAeijMaDTLdOQMgUftm9f90n92E488=
Subject key identifier: 99:DA:61:A8:76:9F:E2:98:3E:8F:1F:5E:64:08:58:28:81:32:EB:E2
Authority key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
Certificate issuer: /CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Certificate serial: 01A18006599A04B9B54070453454F6500E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
Manifest number: 0ACE
Signing time: Wed 28 Oct 2026 01:01:02 +0000
Manifest this update: Wed 28 Oct 2026 01:01:02 +0000
Manifest next update: Thu 29 Oct 2026 01:01:02 +0000
Files and hashes: 1: 8HLfSggRfCQKqxfP5-UeXb00I7g.roa (hash: Z2nghP6xwioSl3jH3QUVmpIFKFZILHts7G8PmuEqq+Y=)
2: CYXPumOChSdoMa-5o0FCbfSsOYE.roa (hash: Ki1vUDNQjiNnTFWXimQLwQJZU9YwEW1064X+1jbc6MM=)
3: p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl (hash: 7j4YLqg33OXJ245hUiaKKItWugGwdOKloNPwvG2t1Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:59:9a:04:b9:b5:40:70:45:34:54:f6:50:0e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Validity
Not Before: Oct 28 01:01:02 2026 GMT
Not After : Oct 29 01:01:02 2026 GMT
Subject: CN=99da61a8769fe2983e8f1f5e640858288132ebe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:b1:65:9c:df:1c:4d:48:8e:85:12:cf:71:
03:c9:8d:cb:0f:26:bb:b7:f3:8b:bb:16:91:66:55:
ba:a4:a0:e4:82:74:da:64:61:fd:58:02:22:fb:31:
b7:a4:ec:8e:b1:ae:07:0a:23:7e:23:17:04:99:ae:
8a:19:9a:f6:12:b6:47:2b:f2:18:e1:ab:5d:5c:d4:
dd:e0:4c:9d:81:0b:b3:91:29:43:e8:64:13:df:a6:
6c:18:94:11:b9:89:a6:38:35:fc:fa:75:68:a6:82:
7f:9a:5a:82:d5:0e:bd:d9:71:df:2e:51:eb:af:e2:
c2:b4:68:e4:b9:8d:3f:af:5e:fc:48:80:52:bc:8f:
aa:5a:c4:0e:7e:4e:13:54:e2:b0:05:9f:ba:5b:38:
fd:fb:89:09:f0:69:84:b5:6a:cc:1f:68:99:32:53:
3a:b0:d9:cb:74:0c:dd:8e:0e:73:25:89:27:59:1d:
de:12:5a:90:8a:33:a2:35:e2:b5:ba:21:53:7d:08:
7b:e1:ef:0c:18:1a:9c:22:2e:91:0a:a3:3d:a3:5a:
7b:9b:cf:20:30:e3:d1:02:a5:5f:76:56:a2:14:98:
6f:30:cb:ae:ba:0c:3a:7b:5c:e9:3b:94:73:2b:6b:
cc:c4:40:82:14:96:4a:77:6b:18:78:4e:e0:63:e0:
35:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DA:61:A8:76:9F:E2:98:3E:8F:1F:5E:64:08:58:28:81:32:EB:E2
X509v3 Authority Key Identifier:
keyid:A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:52:0c:2e:fd:80:a0:bb:8e:73:0c:89:36:7d:15:1d:ef:fb:
b6:07:68:f3:19:55:56:e2:77:d2:24:a7:fa:c6:17:7a:a6:3a:
90:a6:46:99:50:e2:52:9e:cb:33:aa:28:f0:8a:13:e8:96:75:
56:62:b2:fd:33:51:d2:f6:db:bd:79:ec:25:88:20:60:70:17:
6c:a3:f1:8f:a7:a6:69:82:61:37:2d:e7:08:a1:a5:8b:ab:b2:
43:88:29:6e:05:ed:29:c6:58:ae:af:a9:ab:1d:63:64:0f:6b:
6f:36:e2:79:24:49:d1:33:4f:c0:2d:54:5d:ca:97:b1:32:21:
71:8b:43:e4:0b:7d:e3:8b:34:d4:a8:50:d2:4d:b9:da:60:5a:
3c:67:11:4d:94:fb:8e:a6:a0:52:cc:49:d8:e7:d9:43:2d:35:
92:d5:6f:66:38:b5:5e:6d:a1:54:24:15:e2:64:3d:79:fc:e3:
6c:23:cf:2c:d5:1d:57:e4:13:54:f4:bd:de:1e:07:ed:68:8c:
ba:69:95:57:2b:70:93:88:01:c5:2c:a5:e4:15:cb:20:47:f6:
70:11:f5:1f:8a:c2:06:32:a6:36:eb:07:a0:94:08:66:be:66:
06:ab:f7:34:f8:8f:9e:10:53:8a:82:45:bc:f7:d3:d0:e2:80:
78:16:04:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGABlmaBLm1QHBFNFT2UA5qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NzcyMGM3ZGMxZGMzZWRkMWQwZDQ3ZjkyM2JjZDgzM2Yw
NmFmMzYwHhcNMjYxMDI4MDEwMTAyWhcNMjYxMDI5MDEwMTAyWjAzMTEwLwYDVQQD
Eyg5OWRhNjFhODc2OWZlMjk4M2U4ZjFmNWU2NDA4NTgyODgxMzJlYmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgaxZZzfHE1IjoUSz3EDyY3LDya7
t/OLuxaRZlW6pKDkgnTaZGH9WAIi+zG3pOyOsa4HCiN+IxcEma6KGZr2ErZHK/IY
4atdXNTd4EydgQuzkSlD6GQT36ZsGJQRuYmmODX8+nVopoJ/mlqC1Q692XHfLlHr
r+LCtGjkuY0/r178SIBSvI+qWsQOfk4TVOKwBZ+6Wzj9+4kJ8GmEtWrMH2iZMlM6
sNnLdAzdjg5zJYknWR3eElqQijOiNeK1uiFTfQh74e8MGBqcIi6RCqM9o1p7m88g
MOPRAqVfdlaiFJhvMMuuugw6e1zpO5RzK2vMxECCFJZKd2sYeE7gY+A1UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnaYah2n+KYPo8fXmQIWCiBMuviMB8GA1UdIwQY
MBaAFKd3IMfcHcPt0dDUf5I7zYM/Bq82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDNjZ3g5d2R3LTNSME5SX2tqdk5nejhHcnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iYTcyMTktYWQ3Yy00OGIwLTljOTYt
MTcyMjhjZWYwMDQ5LzEvcDNjZ3g5d2R3LTNSME5SX2tqdk5nejhHcnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iYTcyMTktYWQ3Yy00OGIwLTljOTYtMTcyMjhjZWYwMDQ5
LzEvcDNjZ3g5d2R3LTNSME5SX2tqdk5nejhHcnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVIMLv2A
oLuOcwyJNn0VHe/7tgdo8xlVVuJ30iSn+sYXeqY6kKZGmVDiUp7LM6oo8IoT6JZ1
VmKy/TNR0vbbvXnsJYggYHAXbKPxj6emaYJhNy3nCKGli6uyQ4gpbgXtKcZYrq+p
qx1jZA9rbzbieSRJ0TNPwC1UXcqXsTIhcYtD5At944s01KhQ0k252mBaPGcRTZT7
jqagUsxJ2OfZQy01ktVvZji1Xm2hVCQV4mQ9efzjbCPPLNUdV+QTVPS93h4H7WiM
ummVVytwk4gBxSyl5BXLIEf2cBH1H4rCBjKmNusHoJQIZr5mBqv3NPiPnhBTioJF
vPfT0OKAeBYEHA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:33:27 2026 by rpki-client