Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
File: pPAKrld-dFH4jqYEv2ozc0zQMAk.mft (raw, json)
Hash identifier: LjlmpKCVaa6KAoOky6F9gOyB1rSrrVEeCzXWbhyuG9A=
Subject key identifier: 61:DE:AB:EB:24:F8:C6:B1:3D:EE:C8:65:ED:67:D6:E3:C9:3F:B6:7A
Authority key identifier: A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
Certificate issuer: /CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Certificate serial: 01A08C0D3F6BB9860B6D1347A03B94A022F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
Manifest number: 12A7
Signing time: Thu 10 Sep 2026 16:01:13 +0000
Manifest this update: Thu 10 Sep 2026 16:01:13 +0000
Manifest next update: Fri 11 Sep 2026 16:01:13 +0000
Files and hashes: 1: pPAKrld-dFH4jqYEv2ozc0zQMAk.crl (hash: kiDk7QH72ezzGkJcGAFKYQXsQWyiSvEvBgQRUZX/E+w=)
2: wCMCzmGItEBLiq2zhCPR7XIYkCc.roa (hash: nQv2a3Px/0ZD2/O010YD46BOn/AzS13ORg3ozlLVCtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:3f:6b:b9:86:0b:6d:13:47:a0:3b:94:a0:22:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Validity
Not Before: Sep 10 16:01:13 2026 GMT
Not After : Sep 11 16:01:13 2026 GMT
Subject: CN=61deabeb24f8c6b13deec865ed67d6e3c93fb67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:e4:96:ed:32:38:a9:b6:22:ff:87:f5:5a:
af:f4:e0:db:ed:49:bc:86:32:c1:69:26:8b:62:d3:
70:99:26:b3:bc:11:85:d0:99:74:65:84:42:bb:16:
f2:1a:7d:a7:f5:0a:e4:5f:73:b9:4c:18:9f:bd:1c:
44:ed:9d:18:77:01:35:f5:bc:05:49:57:1d:50:91:
0a:15:99:70:e0:10:65:3b:b9:c5:61:3b:0b:bf:8f:
1f:63:dd:7e:99:d4:5f:65:d8:8a:2d:3a:f6:8d:7b:
31:bd:f2:26:f9:4b:35:b1:9d:23:e3:76:63:4d:1d:
12:d2:bc:89:a4:25:79:6b:e8:8e:04:cc:d3:ce:ca:
83:db:dd:32:d3:23:e5:02:3a:7c:a8:5c:90:57:25:
e2:aa:d5:23:40:38:42:1e:19:64:1f:4a:af:7b:72:
6b:58:e9:eb:09:38:43:3c:13:72:aa:90:6f:d9:69:
c0:9b:8d:42:fa:92:44:f7:aa:d5:04:0e:09:bf:85:
64:96:18:5f:d7:b5:91:8b:90:27:99:84:db:5f:42:
bc:0b:b6:ca:e7:7a:21:34:0d:03:4e:b5:cf:6a:b4:
1d:c8:f3:74:eb:83:ba:49:b9:97:0b:e5:0a:37:6a:
ba:70:b5:0f:ca:0b:6b:70:3b:87:68:a6:a0:f6:a3:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DE:AB:EB:24:F8:C6:B1:3D:EE:C8:65:ED:67:D6:E3:C9:3F:B6:7A
X509v3 Authority Key Identifier:
keyid:A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:20:c0:fc:af:26:32:f4:44:f9:b9:72:41:b4:dc:37:5e:b9:
30:ce:8e:36:fd:f0:c2:ba:0f:a2:34:ee:6e:f8:2f:3b:29:40:
52:2b:b2:63:5b:08:21:c7:05:c5:81:a2:cf:7c:46:2c:af:1b:
95:2d:ae:63:ad:bd:68:6f:2d:08:77:48:9b:d5:5a:a1:08:59:
33:91:db:a0:42:54:17:9f:cf:a6:5c:79:bd:0d:bb:da:fc:42:
68:f0:35:85:38:3c:b5:9a:aa:62:64:47:81:0f:5d:70:82:18:
c9:e3:3c:de:d5:57:6b:2d:77:a6:9a:f4:9e:70:3b:0d:be:8d:
5d:6c:84:1f:ca:98:5b:6c:04:91:54:9d:6e:c9:35:39:f7:31:
b4:60:0a:1b:a6:f6:62:04:f5:2b:03:32:fc:d3:05:e5:62:1b:
19:34:14:6b:fa:f9:03:6c:fa:24:4a:9a:a1:c0:05:ec:26:5d:
a7:9e:4e:df:b3:1c:ec:1c:91:70:7f:f0:2a:58:07:c4:69:37:
3e:ab:d2:83:b6:46:81:c9:13:9c:d8:78:61:1e:68:dc:6d:25:
1a:b1:6a:07:d8:ef:35:a1:4b:0a:8b:a2:ba:ba:a5:41:7e:40:
68:4f:40:53:85:85:e5:c0:8f:06:90:ef:17:ad:58:0d:26:1f:
91:42:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:14:29 2026 by rpki-client