Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File: PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier: 65ZQrGdK/jyGVujxQP9ajS7aSp4igqL8sqo4qwlE4YM=
Subject key identifier: 64:18:C0:93:A6:82:DA:05:60:A5:14:70:2C:D2:78:27:24:D5:C5:E8
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 01A11A192FC5DEACCDC8D81E59449B4CB2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number: 1AA4
Signing time: Thu 08 Oct 2026 06:00:20 +0000
Manifest this update: Thu 08 Oct 2026 06:00:20 +0000
Manifest next update: Fri 09 Oct 2026 06:00:20 +0000
Files and hashes: 1: 5ktFpVoHtcv-4PVj4xQGVTm6rZs.roa (hash: Zqkw6KvI8acX/aUr49KfIKqTAKRlHDvQQG+hF6oNumM=)
2: L1LuXNyLmddWoquATgiWDCkvIvc.roa (hash: 4bMlcyRakC1GsgwgHN92wea/CUU4Dqc8/FL+CIWH9ng=)
3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: hCH+wIr7xIDpC3mmsgbl7qJOqqdYUAVHVGhA8foVrJQ=)
4: o5xjwD3RHYwZb8BGUpI8BsGBfV0.roa (hash: GZFTwMUyNntUts8RndeOn9OC9VYkHxusfe9yub/gTL4=)
5: t48mXkmHCqZPmvOXE_EaAv0d4IU.roa (hash: kn+opPbME6YgDhBuXcQLf7UfJNA4/7anLklPax/nt4w=)
6: tl_q-hSPqgL5VpoDk8C2Ua5xTVc.roa (hash: P7Vo08T4BVo4faac/Yk9jWiigRql2vSCBoh+fxrW89w=)
7: xocNCIYKfAnpt4j7-4dI5cWkT8Q.roa (hash: og0HfAzHezrSbN3NhEsFptFW8eiLweJs1cF+3fN0CHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:19:2f:c5:de:ac:cd:c8:d8:1e:59:44:9b:4c:b2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Oct 8 06:00:20 2026 GMT
Not After : Oct 9 06:00:20 2026 GMT
Subject: CN=6418c093a682da0560a514702cd2782724d5c5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:76:98:7f:94:c4:38:65:54:98:37:6c:34:
8e:a1:9a:12:c8:47:5f:53:9b:b2:17:8d:99:82:c7:
4f:0e:d0:ea:0d:23:c7:2c:31:e2:28:e4:1a:1e:7a:
24:60:10:f1:70:4f:84:2f:36:14:cd:53:76:5b:7c:
f9:b5:28:89:29:1d:41:0a:a3:3b:a5:4d:33:1f:1c:
42:d7:72:18:cd:27:7a:60:6a:f7:d5:18:58:82:2f:
2d:2f:8b:23:99:f2:b8:81:d1:65:1c:f9:2d:d0:c3:
c1:06:f8:00:11:6e:12:3f:5b:02:35:bc:0a:54:a2:
a7:30:d5:19:1b:ae:6d:0b:f7:52:5b:49:4c:5f:d0:
68:8b:26:c2:0e:4c:99:ea:2e:4f:bd:b3:a6:d6:1f:
c7:30:63:d3:d8:64:4a:a0:23:47:41:da:c0:95:e9:
2a:66:99:67:5e:56:27:72:e1:bd:9d:7f:5e:4a:3f:
ab:c2:27:f6:21:d7:21:30:2b:e2:58:42:6b:ad:6c:
e1:ae:71:47:c6:02:c5:98:3c:28:0b:05:3c:4b:fa:
f5:89:28:de:94:65:32:c6:61:3f:26:a9:cf:67:5b:
f3:a4:b5:40:02:36:d1:ff:83:88:e2:02:2b:a5:e2:
5e:4c:ce:70:ac:45:92:36:46:53:b4:63:35:6a:3c:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:18:C0:93:A6:82:DA:05:60:A5:14:70:2C:D2:78:27:24:D5:C5:E8
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:18:f3:e6:2d:94:a7:cb:7a:d5:58:e5:a0:2c:16:c9:92:11:
61:24:95:f4:0c:a8:d7:f1:46:46:58:5f:ec:4f:f0:e0:a3:08:
25:d2:b5:7a:d4:2f:e3:91:61:35:b0:0e:29:79:25:f7:8b:41:
81:c0:d9:29:7e:53:33:e2:5a:5c:f2:c8:35:d3:90:38:0f:1b:
c7:bb:bd:04:84:b7:ac:9e:d9:fd:a2:74:3d:c7:65:a0:41:b5:
c7:5a:2a:bb:6b:f9:58:96:a5:6b:46:93:ef:4c:f7:58:0c:08:
26:b9:15:16:6c:22:7c:ef:de:50:4e:ae:1e:79:95:b0:c6:7f:
4a:42:9a:82:d6:50:ec:77:80:36:b5:cd:ff:1e:92:6e:bb:38:
0f:f1:81:ea:e2:7a:5a:f8:b1:c8:e4:00:1b:df:bf:7c:96:b3:
5d:d7:d3:4a:f0:75:45:be:7d:92:32:71:a3:ce:8a:b1:66:ab:
b0:4c:9d:bd:ec:02:ee:fc:9e:1a:8f:57:c4:a6:2e:3e:6d:a4:
a1:de:4c:6e:c1:d9:5d:8b:77:d6:06:c7:62:ed:8d:59:c2:52:
8c:e0:41:e7:53:0d:4d:6d:7f:ad:d8:4c:1e:9f:fb:57:c9:ad:
d2:08:92:b2:e4:43:a6:42:17:64:96:54:75:49:11:fd:12:cb:
39:ec:c2:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEaGS/F3qzNyNgeWUSbTLLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjRjN2VjZmEzN2QyNDg3MTUyZmI5YmJiYWI1MGJlNzlk
ZTI2MTkwHhcNMjYxMDA4MDYwMDIwWhcNMjYxMDA5MDYwMDIwWjAzMTEwLwYDVQQD
Eyg2NDE4YzA5M2E2ODJkYTA1NjBhNTE0NzAyY2QyNzgyNzI0ZDVjNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyR2mH+UxDhlVJg3bDSOoZoSyEdf
U5uyF42ZgsdPDtDqDSPHLDHiKOQaHnokYBDxcE+ELzYUzVN2W3z5tSiJKR1BCqM7
pU0zHxxC13IYzSd6YGr31RhYgi8tL4sjmfK4gdFlHPkt0MPBBvgAEW4SP1sCNbwK
VKKnMNUZG65tC/dSW0lMX9BoiybCDkyZ6i5PvbOm1h/HMGPT2GRKoCNHQdrAlekq
ZplnXlYncuG9nX9eSj+rwif2IdchMCviWEJrrWzhrnFHxgLFmDwoCwU8S/r1iSje
lGUyxmE/JqnPZ1vzpLVAAjbR/4OI4gIrpeJeTM5wrEWSNkZTtGM1ajwZGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQYwJOmgtoFYKUUcCzSeCck1cXoMB8GA1UdIwQY
MBaAFD4kx+z6N9JIcVL7m7urUL553iYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMt
NDkzZDc3NGFhMWZmLzEvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMtNDkzZDc3NGFhMWZm
LzEvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhjz5i2U
p8t61VjloCwWyZIRYSSV9Ayo1/FGRlhf7E/w4KMIJdK1etQv45FhNbAOKXkl94tB
gcDZKX5TM+JaXPLINdOQOA8bx7u9BIS3rJ7Z/aJ0PcdloEG1x1oqu2v5WJala0aT
70z3WAwIJrkVFmwifO/eUE6uHnmVsMZ/SkKagtZQ7HeANrXN/x6Sbrs4D/GB6uJ6
WvixyOQAG9+/fJazXdfTSvB1Rb59kjJxo86KsWarsEydvewC7vyeGo9XxKYuPm2k
od5MbsHZXYt31gbHYu2NWcJSjOBB51MNTW1/rdhMHp/7V8mt0giSsuRDpkIXZJZU
dUkR/RLLOezCsg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:06:43 2026 by rpki-client