Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
File: pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft (raw, json)
Hash identifier: Z8eyjdCVLlNOwQ4dto+3QRXG7PBwm8EQZiagAh0KB0g=
Subject key identifier: 8E:FA:2E:42:BD:BD:3F:0C:40:6E:9E:A5:1B:54:6B:15:80:2B:43:AC
Authority key identifier: A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79
Certificate issuer: /CN=a4396ac14b77b1f033d9e459210c873b012e0a79
Certificate serial: 01A12767C21D0AFDA58DBD712B874F585367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
Manifest number: 0136
Signing time: Sat 10 Oct 2026 20:01:13 +0000
Manifest this update: Sat 10 Oct 2026 20:01:13 +0000
Manifest next update: Sun 11 Oct 2026 20:01:13 +0000
Files and hashes: 1: 2GYhbWHtfBWPF1UEk4OY2FR4BlE.roa (hash: w4kZnQsbsuOxKFHTlD0TVfi8ciQmtnzyEXnJDLUlaZo=)
2: pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl (hash: dPpqVYSgly+TM1rC32OwhbFfwSKAaTglOX28wgxDRKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:c2:1d:0a:fd:a5:8d:bd:71:2b:87:4f:58:53:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4396ac14b77b1f033d9e459210c873b012e0a79
Validity
Not Before: Oct 10 20:01:13 2026 GMT
Not After : Oct 11 20:01:13 2026 GMT
Subject: CN=8efa2e42bdbd3f0c406e9ea51b546b15802b43ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:e2:44:65:2d:b6:4a:f1:83:a7:96:79:bd:
23:38:e7:75:49:6a:67:5e:bb:72:5c:5c:24:72:4d:
1d:4e:32:d2:2d:e5:5d:c5:2a:9b:bb:7b:b7:43:67:
80:a1:cf:f4:16:9b:25:69:42:b6:17:7c:fb:8a:7a:
0e:3f:30:fa:c9:50:23:6a:52:d0:88:f5:b3:79:b1:
9a:d2:6b:75:88:af:90:9f:cb:de:e8:8a:5e:87:e1:
91:b9:b3:f9:9f:f7:53:bf:b2:b4:3e:4c:b0:d8:c4:
20:4c:5b:f2:a9:5e:23:03:b4:25:35:34:25:b4:16:
80:78:3d:29:59:02:b6:c9:ca:b2:71:b1:da:b0:4a:
91:7d:cb:6b:24:f8:7c:d1:60:f7:46:ea:87:e5:03:
6d:ec:09:ba:2a:6e:f1:41:47:0d:d0:c3:48:1d:d5:
0a:22:a7:9d:a6:db:64:5f:21:3a:f9:b6:93:96:bc:
bc:a8:9a:6d:9b:96:2b:4b:a8:1a:91:5b:52:85:3a:
92:ca:11:50:77:a4:f4:b7:0f:2d:d4:7d:11:8b:33:
a8:e9:a9:54:24:ed:5f:e6:22:04:0b:fe:56:3a:a6:
c1:94:11:c6:ee:9d:91:d1:af:05:72:1a:ec:c7:f1:
95:3a:72:12:b1:f2:21:ae:c7:0a:28:ab:06:e2:d1:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FA:2E:42:BD:BD:3F:0C:40:6E:9E:A5:1B:54:6B:15:80:2B:43:AC
X509v3 Authority Key Identifier:
keyid:A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:87:66:d0:49:2a:e4:10:b5:2c:db:9e:fd:ae:b1:a6:ba:47:
fd:5e:e7:73:01:40:ea:16:a1:e4:f2:5a:37:c7:84:5c:65:36:
5d:d9:be:41:2f:de:ca:07:28:f7:ac:8e:62:70:84:4f:3a:05:
c5:d8:14:bb:8f:02:22:9f:87:8c:47:b5:48:fd:a1:90:a2:be:
ae:1b:0e:1c:3e:07:33:42:5a:8e:ad:3b:57:ad:1e:e3:0e:ad:
04:58:ab:26:75:4b:bc:0b:a4:6e:cf:0b:fe:f1:ca:66:de:96:
98:f6:f1:84:b9:b1:87:58:ea:37:5f:c7:4b:a8:fd:5c:a8:a3:
84:90:a7:16:3a:9a:4e:2f:7b:b6:34:83:30:69:e2:52:c5:b0:
aa:1f:58:3c:1d:17:9f:7a:b0:a3:fe:b0:8e:e1:a5:95:10:5f:
c1:88:ca:b0:73:27:43:36:18:c0:7b:bf:ec:9e:cd:f2:9e:52:
65:35:05:a7:ec:f1:e7:59:ef:81:4f:9e:7e:3c:d5:52:8b:2d:
89:91:ad:58:53:53:fc:cc:f8:50:46:66:fc:1c:80:68:64:03:
1d:8b:af:a8:13:4f:5b:a1:36:a4:fc:c4:8b:56:83:7f:43:c2:
68:c7:cc:e8:89:41:45:af:54:8a:78:88:c4:90:50:18:1e:0f:
ae:f5:21:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:13:00 2026 by rpki-client