Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: MEladBHGpJyslfZpJJI3DpT+1G4g1OSn2wEDCUzIoYA=
Subject key identifier: F3:F4:EB:76:2E:55:B9:42:AB:49:EC:51:A2:44:B5:24:41:66:5B:51
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 01A171381168F20F6A54DE3B0EF3D02B1929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 14F6
Signing time: Sun 25 Oct 2026 04:01:02 +0000
Manifest this update: Sun 25 Oct 2026 04:01:02 +0000
Manifest next update: Mon 26 Oct 2026 04:01:02 +0000
Files and hashes: 1: N4Y10Ua1e6-XUNgoamRd4hJuHM0.roa (hash: u/ttBIhtxAmlNbTBEOD7s6FeOeykOPEDDbaJasWKOp8=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: ZkV2PHWglmXVG/PWvdthrPkCetUiKwFqExHQT+j0rdM=)
3: P7s6SkBNrB3yuV7739uVskU8ZG8.roa (hash: ZmJidlTbaMdMKLRXvEzc/VS03klVrtlteUmPhSejjJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:38:11:68:f2:0f:6a:54:de:3b:0e:f3:d0:2b:19:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Oct 25 04:01:02 2026 GMT
Not After : Oct 26 04:01:02 2026 GMT
Subject: CN=f3f4eb762e55b942ab49ec51a244b52441665b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:26:e3:07:d1:ca:73:1d:f7:44:6d:ba:32:
54:be:3b:29:09:24:34:6b:c3:2b:70:45:53:8f:03:
09:6e:d0:b9:6e:35:0a:32:4d:e5:fb:bc:12:7a:cd:
cd:4c:0b:99:ed:a0:57:87:22:7f:8e:07:53:21:55:
07:6f:89:c5:e9:52:07:e1:29:bd:9f:50:4c:92:77:
68:98:09:47:b9:04:40:01:22:5a:72:5e:d6:26:2e:
3e:b7:82:95:0e:13:8a:b4:86:b1:b8:26:e5:49:70:
b6:28:62:b5:59:3f:18:af:c1:6a:93:77:5b:4d:27:
3c:2f:7c:2d:b8:7f:53:99:6c:de:30:b1:79:5a:18:
fb:1f:55:16:84:87:b3:35:e1:d6:32:76:b9:e2:20:
36:84:a2:82:94:75:11:51:b5:46:ab:19:01:f8:8a:
18:d8:c1:02:4a:98:04:9c:30:19:d0:d8:d3:1a:30:
0b:b2:3d:8f:25:b6:35:ce:3d:c9:ac:94:9f:2d:8a:
ec:72:c4:16:46:e1:da:6f:16:a5:5c:e6:b9:e6:dd:
93:5c:69:aa:20:7b:f5:e2:a4:78:45:b6:7e:39:14:
61:b5:81:17:6a:ff:a1:5b:d3:96:09:2d:52:7f:96:
67:c4:8e:b6:35:e1:19:b7:d8:ad:e1:b4:d4:fc:a8:
bc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F4:EB:76:2E:55:B9:42:AB:49:EC:51:A2:44:B5:24:41:66:5B:51
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:26:1a:c1:d6:68:3e:e8:dc:bb:97:fe:50:c1:97:2a:a5:cd:
2c:4f:8a:36:b6:53:0a:f6:60:4b:c5:19:c4:6d:59:f7:dc:46:
ac:9b:39:c6:b1:eb:09:4f:8a:2c:d6:15:54:6b:4d:75:c7:60:
9e:e8:34:f5:15:62:35:47:1f:43:ae:ca:59:8f:56:a5:ff:54:
5d:13:61:7d:5b:ac:e7:e7:f3:93:4f:c6:37:7b:37:59:93:a8:
a2:87:cc:f1:b4:a4:41:34:2d:db:e8:93:49:19:bd:db:b0:91:
fb:7d:68:86:24:05:28:73:4e:d7:70:68:fb:c5:1e:67:df:83:
a8:d6:f0:6c:6f:3a:5f:b5:d6:79:d7:25:4d:18:8e:66:dc:5e:
50:ab:96:56:c7:56:5e:48:bc:85:97:bd:3f:de:a5:0b:ad:fb:
d9:e5:f9:b6:f3:4e:6c:59:e0:12:4d:af:a6:9d:18:08:52:90:
17:00:df:c3:fd:c0:4d:28:77:f0:3e:f6:9e:73:c4:4b:ed:b1:
11:f8:fc:1b:53:0a:70:31:40:16:4d:d1:5b:ec:f7:4a:48:4c:
b2:13:ba:f1:ce:3f:91:c6:9f:92:82:e1:84:7b:a8:e3:db:e7:
2d:90:6f:72:58:67:33:36:c8:5c:58:8f:a1:f4:76:ec:33:39:
fa:cd:44:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 12:38:26 2026 by rpki-client