Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
File: pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft (raw, json)
Hash identifier: 3qT3/URLJ+St282S59YK1Y16saQaTjiIeugIxnwIsuk=
Subject key identifier: A2:7D:0C:3B:F5:C1:99:85:68:1B:E4:FA:05:BD:30:73:C7:43:A7:CB
Authority key identifier: A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
Certificate issuer: /CN=a4537cbedad356819cbc77ae3fca17d65431c280
Certificate serial: 01A02921FA98E97056465B7CDD1B9DCBFB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
Manifest number: 90
Signing time: Sat 22 Aug 2026 11:01:27 +0000
Manifest this update: Sat 22 Aug 2026 11:01:27 +0000
Manifest next update: Sun 23 Aug 2026 11:01:27 +0000
Files and hashes: 1: 5eCm7YiekLnQx2Yrufz0DKOe4t8.roa (hash: A4yzIFhcFavgDz/cnTf1E1mu+4JZXUZX4YW5ffY43Tw=)
2: AmJH-oKP8JDfCGjtvLBdScjcl94.roa (hash: JYSfH/iBbNzkn+YYYr8OyA3qLrDl+3bHlmfyOFI1Y70=)
3: BnfQ_AzrFoZh3KLGYso6JJ9GXdo.roa (hash: ENsW9JPhfPIhP5yk5NQtzakTi0pxm6wJtb9Q7w/b4ZM=)
4: FBnng7ak4AJweaj7mNiiDGPhP-A.roa (hash: 7O6BMYqqhyaPH6JejfjvmE43i9bE4Safke5zHGTaAxk=)
5: aZqL4PQIRKXk-Nf9g8MWjRBJYWY.roa (hash: oswi/PqLXiY69b2lF56784lBrhIisxDRepTm/CrpEY8=)
6: pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl (hash: rGxP1lUfLyHeyOXPrf17WJDiAkVWA3bgGH04r/Qm548=)
7: qThwM4VOPtwJ-fORifwyTLzk-FM.roa (hash: inwDpdNUtTVuD4hxozBiGnVD6vXL05h5rizEBbo4mSI=)
8: vlQgVNHMOMDCgexHalesjIDPMos.roa (hash: NKNm5ZfHR4kcXtf4m4rKT2uIMrcP5kuQXn9iZz+SX+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:21:fa:98:e9:70:56:46:5b:7c:dd:1b:9d:cb:fb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4537cbedad356819cbc77ae3fca17d65431c280
Validity
Not Before: Aug 22 11:01:27 2026 GMT
Not After : Aug 23 11:01:27 2026 GMT
Subject: CN=a27d0c3bf5c19985681be4fa05bd3073c743a7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:e2:c4:61:33:4f:bf:9e:b6:cd:f8:ae:52:
e1:a8:ed:0f:48:01:9f:18:d2:63:03:15:fa:17:21:
9f:b8:01:f6:34:9a:6b:5f:16:75:61:60:5b:2d:b3:
9d:8c:95:2d:43:0a:9d:fc:69:c0:71:d5:e8:17:26:
9b:d4:c9:b1:4a:85:c3:e6:46:64:e9:8a:af:4a:28:
6e:2b:1e:57:e5:fe:b2:8f:fc:5a:a4:80:e1:d6:96:
e4:75:5b:48:18:46:0a:8d:82:ff:a0:78:bb:16:38:
8e:50:7c:b6:52:b9:da:4e:98:a1:1e:36:10:24:5f:
4d:c2:db:df:d3:52:47:e3:1b:45:a6:fd:5b:d1:ed:
75:48:75:82:1a:7c:48:7a:63:d8:a8:8e:0b:55:32:
c9:da:e1:5a:30:0c:35:3b:6d:35:34:4d:61:87:96:
dc:a4:6f:97:e8:b4:70:6e:d9:b4:12:53:68:57:05:
e5:bb:44:4d:46:85:b4:1a:46:f5:4a:c4:3b:26:80:
ad:11:57:9f:7a:1c:d4:9e:2d:a1:58:31:ee:77:da:
0b:9f:8a:5b:68:9d:1e:79:b9:f5:44:e8:d9:69:b5:
be:a9:80:03:16:79:1c:0d:fa:e9:c8:04:fc:5a:b4:
52:d0:5a:e9:c9:44:df:22:00:e3:c3:64:88:4d:0f:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7D:0C:3B:F5:C1:99:85:68:1B:E4:FA:05:BD:30:73:C7:43:A7:CB
X509v3 Authority Key Identifier:
keyid:A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7b:4f:ff:e7:f8:63:17:7b:ef:c6:04:c5:f9:f7:c4:eb:ac:
ef:0e:42:7a:da:81:a9:0c:c9:53:7c:95:a1:6e:29:7e:ac:33:
71:7c:8c:45:ca:be:43:59:d7:2e:df:da:ec:96:d4:ca:9e:aa:
04:c9:bd:5d:f9:b3:e2:d2:b1:3b:29:37:04:66:f5:e8:49:fe:
db:1e:21:6c:a8:18:5c:29:b0:d6:fb:7a:7c:ec:3b:97:f8:bb:
bd:a9:92:d2:0d:77:8b:73:9d:0c:47:6f:7a:e8:23:74:9b:77:
10:80:ca:5c:e0:d6:51:e6:a4:5e:bb:4d:12:9b:66:ad:b3:7f:
f8:ec:e5:58:1f:be:02:77:80:83:01:65:4c:e9:f1:6b:de:30:
41:4d:7d:b6:b0:90:e7:f2:de:ab:37:f6:5f:ea:c2:36:ae:9a:
6f:63:ec:42:e1:94:7b:b1:71:f7:7c:7d:9b:10:ad:e9:d5:44:
51:46:f8:8c:5d:8c:b0:70:f7:b4:76:97:c5:54:c7:9a:ab:7a:
4c:39:77:d3:48:15:22:1d:7d:bb:b7:c9:c3:5c:1b:f9:21:a9:
59:47:a9:6d:2a:fe:a0:df:23:f6:c4:a8:0d:f0:b5:2e:88:08:
0b:83:44:35:f2:9f:7a:cd:8f:29:d9:39:bc:ef:42:58:43:9d:
c1:a6:8e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:12:17 2026 by rpki-client