Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
File: pXlpaAlFNrk-cervrwEKoeg85-o.mft (raw, json)
Hash identifier: GZ82rWiiUe/5hy+87zJLpiXP/0DIJlIvt2ayt8QAP4g=
Subject key identifier: F1:F3:3A:48:5C:02:69:75:5A:53:C8:A0:3D:BC:28:55:A9:37:24:6D
Authority key identifier: A5:79:69:68:09:45:36:B9:3E:71:EA:EF:AF:01:0A:A1:E8:3C:E7:EA
Certificate issuer: /CN=a5796968094536b93e71eaefaf010aa1e83ce7ea
Certificate serial: 01A08A8CA841A9CE95D0B59D6D5FA7F4AE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:08 +0000
Manifest this update: Thu 10 Sep 2026 09:01:08 +0000
Manifest next update: Fri 11 Sep 2026 09:01:08 +0000
Files and hashes: 1: _DzVp-qQbUGUWJR9yTGDbteQ9eI.roa (hash: JCR4JCzOBUmsSicgbt13vgqc/sqq+RW2fZ4Pr3z6YPQ=)
2: pXlpaAlFNrk-cervrwEKoeg85-o.crl (hash: XGYAR5LcqMQLK7sDRVhEBvMJ2BuNjEgBFg9qfzYiMFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:a8:41:a9:ce:95:d0:b5:9d:6d:5f:a7:f4:ae:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5796968094536b93e71eaefaf010aa1e83ce7ea
Validity
Not Before: Sep 10 09:01:08 2026 GMT
Not After : Sep 11 09:01:08 2026 GMT
Subject: CN=f1f33a485c0269755a53c8a03dbc2855a937246d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:24:ed:ca:d5:b9:f5:8b:51:85:7f:98:55:
b8:2c:b2:3e:6b:ab:ed:10:4c:47:2e:f2:e2:f5:f0:
0e:da:23:88:db:80:7a:ab:71:ad:b4:68:ca:f6:dc:
de:42:a8:ae:ee:ff:fd:a4:c7:72:a9:2b:ba:ed:3e:
6f:ad:60:dc:7f:18:89:c0:83:25:b4:e7:80:d6:be:
59:67:e0:e3:14:82:79:6e:39:d7:c9:3b:a2:4f:e5:
d9:e4:dc:4f:3b:27:34:9b:af:3a:61:02:15:62:91:
d5:62:df:f4:f2:cf:95:60:59:cb:4f:ac:e9:36:21:
d9:e0:fc:ee:13:00:d3:34:b2:a0:e2:6d:a0:47:89:
69:2a:be:a2:3a:fc:6e:31:6f:09:35:41:3b:b9:3e:
48:c1:1c:07:cd:77:3a:b2:e5:13:97:35:b7:bc:d2:
29:54:51:db:5c:cf:f7:b0:f8:31:50:e7:fd:fb:89:
d3:c2:34:a1:90:8e:90:1d:0a:fa:ea:b0:d8:13:de:
eb:b0:21:d1:fd:3f:f9:6e:e7:29:38:03:5c:03:e2:
31:cc:5e:20:2b:0e:43:98:da:a7:38:37:7f:01:b8:
dc:a0:ce:47:06:a5:5b:c6:94:0a:d9:77:86:87:1f:
2f:e7:28:fa:e1:f2:b0:67:e7:04:47:28:c6:ab:fa:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F3:3A:48:5C:02:69:75:5A:53:C8:A0:3D:BC:28:55:A9:37:24:6D
X509v3 Authority Key Identifier:
keyid:A5:79:69:68:09:45:36:B9:3E:71:EA:EF:AF:01:0A:A1:E8:3C:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c2:fe:4b:b4:63:c5:6c:76:e7:75:ae:b5:0d:e3:28:09:c7:
dc:a1:c9:5d:49:7c:2a:c3:4f:5a:93:24:c6:4a:cd:93:4e:b4:
46:b3:84:b7:e6:02:29:d0:b9:86:3e:ea:63:b2:9d:11:af:20:
7b:61:58:7b:0e:17:af:f7:b9:9a:12:ff:6d:47:d1:a9:be:99:
06:3f:0f:1b:68:39:e8:be:6d:0b:ac:45:03:c0:6f:9f:e7:98:
fa:d7:c5:1a:68:ad:37:c2:46:56:71:c5:aa:52:d2:4b:3d:17:
2c:bd:a9:99:fd:c8:2a:78:c9:81:93:d0:9a:a0:81:2b:c9:eb:
f0:58:8f:6d:57:bc:10:9e:2e:1a:c2:1d:c2:4b:9e:34:96:94:
bc:10:64:41:79:fe:26:79:d6:c0:55:cb:b9:85:6f:bd:c1:ec:
97:92:d4:27:3c:79:dd:1f:f9:51:07:00:91:2a:f1:10:c1:5e:
03:7c:e8:0e:02:c3:11:ab:af:57:e8:eb:2c:41:8c:a3:12:d9:
52:09:d5:34:bd:e6:6c:96:af:7c:fc:fd:d5:f6:75:8e:71:e5:
1a:ca:78:b5:92:57:29:cd:90:0f:4f:b3:27:65:8a:23:65:91:
62:9c:b5:0a:f4:7a:f4:0e:49:d9:cf:37:61:88:49:6a:76:5e:
78:11:8c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:41:51 2026 by rpki-client