Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
File: pXlpaAlFNrk-cervrwEKoeg85-o.mft (raw, json)
Hash identifier: VgHGn/S6229fRxNXOm2wdGs+/fH3qa+aTiyWBnF5jEA=
Subject key identifier: B8:28:69:83:6F:A8:0F:62:16:8C:40:99:CD:23:99:6C:72:21:5A:93
Authority key identifier: A5:79:69:68:09:45:36:B9:3E:71:EA:EF:AF:01:0A:A1:E8:3C:E7:EA
Certificate issuer: /CN=a5796968094536b93e71eaefaf010aa1e83ce7ea
Certificate serial: 01A17FCF746415A4D16FB7C215E59054A3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:01:04 +0000
Manifest this update: Wed 28 Oct 2026 00:01:04 +0000
Manifest next update: Thu 29 Oct 2026 00:01:04 +0000
Files and hashes: 1: _DzVp-qQbUGUWJR9yTGDbteQ9eI.roa (hash: JCR4JCzOBUmsSicgbt13vgqc/sqq+RW2fZ4Pr3z6YPQ=)
2: pXlpaAlFNrk-cervrwEKoeg85-o.crl (hash: YmgS17+QdsFxCXyiyvPE0v0FwbRPRZPFhGVXNfVLAyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:74:64:15:a4:d1:6f:b7:c2:15:e5:90:54:a3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5796968094536b93e71eaefaf010aa1e83ce7ea
Validity
Not Before: Oct 28 00:01:04 2026 GMT
Not After : Oct 29 00:01:04 2026 GMT
Subject: CN=b82869836fa80f62168c4099cd23996c72215a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:35:44:25:54:9e:ac:57:f2:fa:c0:1e:53:1e:
cc:9e:a2:4e:cb:9b:05:5e:18:0d:44:cf:5f:82:ed:
98:66:5d:50:81:95:2b:cb:43:13:81:12:22:47:4c:
ea:9a:75:5b:45:3c:7e:51:51:dd:41:94:1f:8a:98:
c0:87:7c:68:59:4a:28:90:a6:28:b8:68:7d:11:ac:
a5:c3:7a:2b:47:6e:90:d2:1e:ea:42:06:e1:fc:8b:
0a:26:e6:93:b4:51:29:03:d7:53:1f:83:8c:09:fe:
41:35:36:24:d3:a2:a6:df:40:de:8c:74:5d:2c:25:
b3:cf:00:cc:22:48:d6:a3:4a:3a:bd:dd:a6:8a:63:
99:81:da:64:4c:20:21:8f:bd:15:ec:21:b5:05:d8:
26:c0:9b:29:9a:bb:3e:6b:ba:91:bc:9f:1d:1f:45:
4f:cc:ac:2a:f7:fb:1b:86:72:b0:fa:10:ea:bf:d0:
6f:eb:f0:96:f4:48:67:07:a2:8e:31:aa:84:5b:4a:
3e:36:62:9d:0c:b7:be:b4:10:36:7d:a7:13:e5:32:
f1:2a:48:c2:ec:5d:ab:61:c8:ba:d4:84:13:2c:ea:
86:4d:44:dc:64:4d:40:a6:db:2f:03:15:cb:75:b9:
de:37:7d:64:d2:24:7c:20:7e:6f:ab:42:79:98:33:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:28:69:83:6F:A8:0F:62:16:8C:40:99:CD:23:99:6C:72:21:5A:93
X509v3 Authority Key Identifier:
keyid:A5:79:69:68:09:45:36:B9:3E:71:EA:EF:AF:01:0A:A1:E8:3C:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:90:78:a4:4a:e0:cf:22:1c:31:64:98:91:78:01:0b:ce:c3:
86:a5:f1:ff:56:bb:7f:7e:bd:11:2c:6e:bc:47:76:78:c2:61:
fd:d3:85:4a:bf:15:63:88:cb:cb:35:58:23:bd:ea:3e:89:66:
77:5c:e1:57:bd:19:6c:64:ae:f2:20:9a:da:4d:a4:3f:1d:07:
d4:cf:6f:2f:ab:0a:6e:58:f6:33:12:13:c5:2c:ae:19:a8:05:
69:83:6d:ba:56:99:7b:07:e3:a9:c4:6d:dc:32:e5:6b:5d:86:
28:56:f9:5e:ea:8f:54:bd:92:0f:05:57:26:74:01:10:66:e7:
65:d6:8b:e0:fd:ca:84:7c:6e:3e:6d:ab:d1:56:9b:ce:01:75:
b8:92:48:d8:48:4f:fc:de:d3:88:2b:b6:de:3c:f5:0c:f8:14:
8a:6a:15:6d:01:82:f4:16:2f:f4:58:0e:4d:e5:2f:81:5d:30:
2e:93:57:a9:5c:06:df:3a:7d:28:1f:66:23:c3:85:33:5d:33:
82:6f:68:73:f4:54:07:2f:80:0b:eb:1f:11:70:5b:bc:fa:50:
84:1f:bd:c2:3e:36:f3:76:d0:49:b2:69:57:92:e1:bb:6f:41:
c6:af:8c:52:14:b2:5a:0f:68:d8:e8:fa:a9:2f:e6:30:84:1e:
5e:0b:5b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:21:55 2026 by rpki-client