Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
File: pH9wjDSl5x2vPS5UuZq3Twae-As.mft (raw, json)
Hash identifier: FRBht5u0DisfD8U2m4ZxO7xJfajCeAneBbbwCGJJKKk=
Subject key identifier: D1:79:53:F9:18:F4:8D:92:FC:9F:8C:C0:7F:0F:32:E6:56:3C:90:3A
Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Certificate serial: 01A024D6CFD7D42F41D6146BC41C411648D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
Manifest number: 0FAD
Signing time: Fri 21 Aug 2026 15:00:52 +0000
Manifest this update: Fri 21 Aug 2026 15:00:52 +0000
Manifest next update: Sat 22 Aug 2026 15:00:52 +0000
Files and hashes: 1: A6bS9MJ8yre_3dAu3nPGm8Z-iC8.roa (hash: aAYbB32YuDe6wK9PH2k9OTcq9zpop8zHvpCVPrmNr5w=)
2: IGrzDBTp7WeP7TiBE_F5uUv9_o4.roa (hash: BP1wezzsyhWU23ICMkBjQqvAxLHe4ED89SFQ2RP2Mlw=)
3: pH9wjDSl5x2vPS5UuZq3Twae-As.crl (hash: Hx+TFVKZ+hnQhLT7RpOQY3rykkZU/DIIQ+RcXQcV2DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:d6:cf:d7:d4:2f:41:d6:14:6b:c4:1c:41:16:48:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Validity
Not Before: Aug 21 15:00:52 2026 GMT
Not After : Aug 22 15:00:52 2026 GMT
Subject: CN=d17953f918f48d92fc9f8cc07f0f32e6563c903a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:ce:04:3b:f4:07:f0:a2:30:10:50:9f:07:
5f:89:42:ef:4e:d0:f3:87:3a:73:79:97:d3:57:3f:
e5:d9:4a:e2:a3:b3:7d:07:c0:94:ae:55:f1:2c:9f:
60:34:63:fd:c6:5c:7b:2f:ce:8b:3e:69:31:f8:6e:
6d:d4:6d:4b:cc:9c:c2:05:ff:a7:ae:d4:30:f3:01:
13:7f:a2:da:29:13:18:e0:d9:e0:c3:c3:9d:70:0e:
c1:d1:17:f7:29:f4:ab:22:3b:33:0c:bf:89:36:9f:
5e:df:d6:e2:67:03:21:be:39:68:6c:fe:ee:50:ea:
c1:e6:0f:df:07:0f:d1:aa:4e:b5:7b:e1:0f:c4:97:
aa:25:92:b4:e6:7c:2c:30:42:94:94:42:95:a8:3d:
a4:ee:86:5b:34:f4:0b:90:17:a4:b0:fc:4f:36:b6:
ec:62:c0:30:84:ec:bb:02:8f:98:49:9d:ac:62:b2:
46:ea:94:1b:03:99:49:14:ec:5d:df:43:80:43:da:
65:8c:6f:fc:2a:fe:8e:7f:85:4e:cc:11:4e:3a:28:
1a:79:7d:e7:49:19:d1:2d:75:8a:79:d1:9d:c5:37:
cc:98:86:fa:d1:46:12:8b:62:35:23:bc:ea:54:67:
bb:e2:10:16:98:0c:58:4e:64:57:df:fa:2d:c4:9f:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:79:53:F9:18:F4:8D:92:FC:9F:8C:C0:7F:0F:32:E6:56:3C:90:3A
X509v3 Authority Key Identifier:
keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:12:a0:f2:50:a0:0d:52:38:26:d2:63:78:ae:d7:c2:c3:6e:
91:72:e7:e8:38:1b:b6:50:bc:de:aa:a7:8a:2f:b6:d7:89:44:
e8:02:d5:83:67:0e:68:99:1a:a9:07:5d:8d:9f:84:13:ae:5e:
07:f5:e5:e9:f8:bb:11:4a:ff:5e:ad:f2:d4:1d:99:d1:19:f0:
19:12:a8:df:96:1c:7e:94:47:57:b4:0e:1b:50:c1:c8:5f:8a:
67:40:b0:3c:1f:17:db:70:c8:04:e8:d3:50:f9:97:00:7e:52:
5e:ad:20:10:ee:a1:32:b4:11:cb:6d:28:56:5e:0f:aa:e7:16:
93:b6:3c:8d:6e:22:a5:f9:e7:1c:49:79:e1:d3:a0:3f:d5:1b:
65:6a:53:e5:18:70:65:fc:80:f2:fe:c2:f9:a0:04:9d:9f:d8:
8e:2d:fe:98:d1:93:fb:d9:cd:dc:a5:1d:3c:14:0c:8c:53:f2:
70:2c:73:53:87:72:50:6f:3b:59:f4:7f:30:ec:38:fb:2c:5f:
12:2e:3a:d7:a0:e3:65:73:b0:e3:47:e3:7a:3d:5b:f5:03:f9:
dd:e2:23:e5:21:a1:bd:9b:41:9f:2b:1d:22:4f:3e:64:a2:12:
7d:34:7f:ab:e5:df:07:70:3a:ae:79:20:b5:c1:6a:75:5b:43:
21:42:0d:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAk1s/X1C9B1hRrxBxBFkjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0N2Y3MDhjMzRhNWU3MWRhZjNkMmU1NGI5OWFiNzRmMDY5
ZWY4MGIwHhcNMjYwODIxMTUwMDUyWhcNMjYwODIyMTUwMDUyWjAzMTEwLwYDVQQD
EyhkMTc5NTNmOTE4ZjQ4ZDkyZmM5ZjhjYzA3ZjBmMzJlNjU2M2M5MDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSDOBDv0B/CiMBBQnwdfiULvTtDz
hzpzeZfTVz/l2Urio7N9B8CUrlXxLJ9gNGP9xlx7L86LPmkx+G5t1G1LzJzCBf+n
rtQw8wETf6LaKRMY4Nngw8OdcA7B0Rf3KfSrIjszDL+JNp9e39biZwMhvjlobP7u
UOrB5g/fBw/Rqk61e+EPxJeqJZK05nwsMEKUlEKVqD2k7oZbNPQLkBeksPxPNrbs
YsAwhOy7Ao+YSZ2sYrJG6pQbA5lJFOxd30OAQ9pljG/8Kv6Of4VOzBFOOigaeX3n
SRnRLXWKedGdxTfMmIb60UYSi2I1I7zqVGe74hAWmAxYTmRX3/otxJ9FtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNF5U/kY9I2S/J+MwH8PMuZWPJA6MB8GA1UdIwQY
MBaAFKR/cIw0pecdrz0uVLmat08GnvgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMt
NmIyN2ZmMjI1N2M2LzEvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMtNmIyN2ZmMjI1N2M2
LzEvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxKg8lCg
DVI4JtJjeK7XwsNukXLn6DgbtlC83qqnii+214lE6ALVg2cOaJkaqQddjZ+EE65e
B/Xl6fi7EUr/Xq3y1B2Z0RnwGRKo35YcfpRHV7QOG1DByF+KZ0CwPB8X23DIBOjT
UPmXAH5SXq0gEO6hMrQRy20oVl4PqucWk7Y8jW4ipfnnHEl54dOgP9UbZWpT5Rhw
ZfyA8v7C+aAEnZ/Yji3+mNGT+9nN3KUdPBQMjFPycCxzU4dyUG87WfR/MOw4+yxf
Ei4616DjZXOw40fjej1b9QP53eIj5SGhvZtBnysdIk8+ZKISfTR/q+XfB3A6rnkg
tcFqdVtDIUINCg==
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:09:42 2026 by rpki-client