Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
File: pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft (raw, json)
Hash identifier: +kj/6NHB8o//W9tlDAK/mkCi/U3Lufwr2mnkqifceOQ=
Subject key identifier: ED:7F:90:AB:1A:11:21:B2:28:C1:14:B8:A5:86:B5:D8:F0:FF:64:DF
Authority key identifier: A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79
Certificate issuer: /CN=a4396ac14b77b1f033d9e459210c873b012e0a79
Certificate serial: 01A1295669A8FEC4C17537AA8AFDDA283804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
Manifest number: 0137
Signing time: Sun 11 Oct 2026 05:01:31 +0000
Manifest this update: Sun 11 Oct 2026 05:01:31 +0000
Manifest next update: Mon 12 Oct 2026 05:01:31 +0000
Files and hashes: 1: 2GYhbWHtfBWPF1UEk4OY2FR4BlE.roa (hash: w4kZnQsbsuOxKFHTlD0TVfi8ciQmtnzyEXnJDLUlaZo=)
2: pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl (hash: ophJiLzTHhL2LfiJ2s2rYjW3Johk3myZxraVPWZo+fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:69:a8:fe:c4:c1:75:37:aa:8a:fd:da:28:38:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4396ac14b77b1f033d9e459210c873b012e0a79
Validity
Not Before: Oct 11 05:01:31 2026 GMT
Not After : Oct 12 05:01:31 2026 GMT
Subject: CN=ed7f90ab1a1121b228c114b8a586b5d8f0ff64df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:75:47:f3:99:e7:65:fd:30:3c:ac:dc:81:
10:3e:7d:6b:0b:db:a9:9e:57:e6:7a:31:bd:7a:3c:
1a:c6:a8:0b:64:76:3a:e8:8b:9e:22:5f:55:f8:2c:
b4:4e:39:c1:ad:9c:a9:5e:4f:82:31:c6:84:c2:46:
82:30:92:cc:19:7e:4b:9f:5e:52:97:e8:95:98:22:
bd:7f:14:02:d4:1d:44:ef:2e:06:ee:c5:74:89:f5:
ce:98:fb:07:9d:db:f9:6a:48:40:e2:38:05:13:d6:
f8:8c:a5:aa:13:3b:d8:3b:87:b2:fe:52:d8:fb:c0:
cf:61:3e:7a:d9:58:0f:22:02:15:2e:df:ee:7f:55:
2c:4a:b1:cf:7d:77:9d:70:33:fb:2b:f8:a4:07:72:
2d:dd:06:12:29:7f:02:dc:dd:61:a8:52:ce:66:36:
cd:9e:c3:f2:74:a2:8d:08:ac:e8:1c:fe:a8:b5:c5:
d1:be:2c:47:b6:b8:3e:6b:0c:47:11:28:33:8a:c0:
c0:cf:dd:76:49:ab:2c:a7:4d:90:12:89:72:7a:a3:
f7:15:bb:0c:d2:6d:44:97:29:bb:81:08:e8:4d:de:
80:68:81:c7:2b:7d:5f:c0:62:f1:a6:6e:3a:3f:d4:
ba:3c:b3:26:b1:7f:b9:fd:14:ae:5f:e8:5e:d6:20:
19:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:90:AB:1A:11:21:B2:28:C1:14:B8:A5:86:B5:D8:F0:FF:64:DF
X509v3 Authority Key Identifier:
keyid:A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8b:bc:3a:1a:54:53:9e:13:ea:b2:b2:a2:6b:db:9c:ec:6f:
9e:9a:9c:33:56:62:28:a6:d1:c6:88:48:8d:90:ff:b0:26:a6:
44:07:bd:71:c1:ef:eb:16:c6:8e:f6:35:21:a0:6f:56:73:3e:
26:26:de:53:b2:fc:6e:65:a5:03:42:e6:8e:dd:d2:ad:57:8e:
f6:2c:6b:3e:11:56:0b:ee:4c:fa:8f:c2:1c:97:f7:93:b4:72:
cb:e9:3b:36:12:97:ce:b1:64:97:98:a1:d5:5d:e7:52:e6:da:
6e:75:bd:2f:90:bf:04:65:e7:a5:ff:39:79:04:83:2b:6f:fd:
4c:6c:38:bb:f8:e4:d3:e4:9f:8a:c5:8c:39:4a:66:83:1f:d4:
5d:11:c1:6d:aa:d9:32:e6:82:91:4f:05:05:b0:35:ff:ad:31:
52:b8:7b:e9:c0:54:f9:44:69:0a:f6:ce:8e:bc:89:c5:e6:7e:
a5:31:00:6d:fe:ee:c9:11:08:e8:d4:c6:23:fd:ce:e7:a8:f1:
ac:f5:0d:65:fc:ee:f2:b4:d6:1f:40:ba:1c:fa:c0:2a:a3:4d:
6e:c4:cb:67:f0:e3:6d:d7:48:08:90:4a:a6:35:12:d5:24:e1:
9c:fe:f2:ff:9a:54:51:ae:bc:73:8b:f6:78:af:3a:af:0d:a4:
38:2c:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:50:13 2026 by rpki-client