Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: q3q0kHnXj49pJXDC1J7BDTUCfY8zW0o/YiwDWF89X5o=
Subject key identifier: B5:32:94:34:41:19:3B:3B:F6:B2:E1:70:E1:31:1E:B1:2E:26:5C:7B
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 01A0BAD3F60DECC6AFA71C06C5742B49C414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 1A68
Signing time: Sat 19 Sep 2026 18:00:48 +0000
Manifest this update: Sat 19 Sep 2026 18:00:48 +0000
Manifest next update: Sun 20 Sep 2026 18:00:48 +0000
Files and hashes: 1: 8MCnCiuGbqnzU7k4AiuuVxxMVjI.roa (hash: 3AKQoBBhnfUzI34hMZSnvSfZtjxdcBOFKymfp/vwl0g=)
2: MnRpYakEEH_3YM8B7YjpXHZCSHs.roa (hash: As4Z8EIpoOCvUeHagBG0PnKSVumw3phPbQAL1UT50X8=)
3: Xw_Yrbs6dG8gOuv7i9EZQhlPhlw.roa (hash: EFAh20ucPzMb4NyAoN8tNqkVM4vbiB7eJqswxMwPTCU=)
4: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: VM6yoabnbONd1SKWSzP19AqvddiCKfXJ5B0FQpm8XDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:d3:f6:0d:ec:c6:af:a7:1c:06:c5:74:2b:49:c4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Sep 19 18:00:48 2026 GMT
Not After : Sep 20 18:00:48 2026 GMT
Subject: CN=b532943441193b3bf6b2e170e1311eb12e265c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:b7:79:ca:7e:b7:62:c0:57:eb:91:81:27:
0b:d7:c0:e9:86:ec:25:cf:31:c9:e7:2b:b2:6c:9c:
48:ab:10:ce:c9:7e:8a:4b:78:b2:c4:3d:23:cb:0c:
5e:6e:54:02:03:fd:62:50:53:8b:1b:40:d9:d1:51:
48:15:c4:26:78:7e:71:81:a0:d8:d8:55:6d:ba:4e:
f0:b1:f2:ad:c5:cf:65:d3:98:4b:c2:b2:4b:1d:c0:
98:35:cb:fc:2f:bc:86:de:db:e5:b3:7d:a1:4a:92:
28:67:4e:84:42:4c:ec:60:81:6a:ff:95:b3:0d:3b:
26:cc:59:cc:d6:53:10:e1:f6:9b:df:a5:1a:90:7f:
e4:05:ff:c5:d9:67:cd:67:9d:cb:b5:c1:22:06:88:
33:e9:2b:99:63:5b:bf:a3:1b:9c:38:95:c2:1b:42:
06:ed:75:ee:da:16:6d:28:1b:5d:ee:70:6f:ba:0e:
b1:87:e4:d3:46:a2:30:79:e8:e6:3b:08:59:88:4b:
8e:a2:36:d5:45:78:98:af:05:91:c8:d9:3a:f3:58:
2e:93:ae:34:de:4f:79:6e:fd:fc:1d:df:95:3a:d8:
e6:7d:44:7c:7a:ea:bf:a9:5f:e5:b8:37:df:e8:27:
f1:34:b4:24:51:63:f3:ac:ea:48:3d:6c:ab:a8:9b:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:32:94:34:41:19:3B:3B:F6:B2:E1:70:E1:31:1E:B1:2E:26:5C:7B
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2b:ef:89:16:e0:3d:4e:03:88:86:28:f1:05:58:04:53:95:
01:0f:1c:b1:3c:ba:c9:56:0a:72:8b:9e:b0:89:30:02:25:1a:
37:29:80:45:2c:57:34:5e:83:8f:b7:57:5e:7d:d8:6a:5a:35:
d6:30:d9:32:17:d6:4d:6d:54:8d:e5:f1:6f:4f:88:7a:72:a0:
51:7c:e1:3a:a8:46:5b:20:b0:5a:2d:f7:4a:eb:d8:47:4a:14:
94:00:f1:e5:01:3e:a4:6a:9d:93:64:68:dd:55:35:df:e0:ef:
3e:79:fd:a4:21:08:66:ac:c7:9e:0f:e4:d4:7a:9c:01:21:cb:
81:8f:75:3a:da:dd:3a:55:19:65:9d:83:00:1b:d6:5d:e3:56:
2a:5a:ca:9d:1a:9e:b4:fc:b8:45:76:74:c1:db:d0:d2:31:82:
6a:7a:61:5e:6f:a3:81:cd:cd:62:3c:92:30:b7:31:9b:f3:0f:
2e:3d:b6:7a:1d:d5:73:f3:d3:83:53:19:14:8c:b8:17:e1:ff:
17:9a:0a:17:03:14:05:aa:76:bd:34:36:e8:cb:50:37:bb:50:
f3:53:98:84:44:b8:c7:ad:4e:31:02:41:c9:c0:56:48:4e:b9:
84:93:8c:00:36:e1:00:d5:66:6b:53:bd:3a:45:be:a9:aa:e6:
a7:ae:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 04:18:21 2026 by rpki-client