Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
File: pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft (raw, json)
Hash identifier: 8oG+1rdQhz5Djdob2LZ2JbC2GAlBMMBitK8NjyxymOY=
Subject key identifier: 79:C1:5B:F7:82:9E:2D:DD:CA:35:61:77:63:27:38:44:9D:DC:B3:D7
Authority key identifier: A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
Certificate issuer: /CN=a4537cbedad356819cbc77ae3fca17d65431c280
Certificate serial: 01A156664F797DA2D64B27551C72F1283CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
Manifest number: 012C
Signing time: Mon 19 Oct 2026 23:01:47 +0000
Manifest this update: Mon 19 Oct 2026 23:01:47 +0000
Manifest next update: Tue 20 Oct 2026 23:01:47 +0000
Files and hashes: 1: 5eCm7YiekLnQx2Yrufz0DKOe4t8.roa (hash: A4yzIFhcFavgDz/cnTf1E1mu+4JZXUZX4YW5ffY43Tw=)
2: AmJH-oKP8JDfCGjtvLBdScjcl94.roa (hash: JYSfH/iBbNzkn+YYYr8OyA3qLrDl+3bHlmfyOFI1Y70=)
3: BnfQ_AzrFoZh3KLGYso6JJ9GXdo.roa (hash: ENsW9JPhfPIhP5yk5NQtzakTi0pxm6wJtb9Q7w/b4ZM=)
4: FBnng7ak4AJweaj7mNiiDGPhP-A.roa (hash: 7O6BMYqqhyaPH6JejfjvmE43i9bE4Safke5zHGTaAxk=)
5: aZqL4PQIRKXk-Nf9g8MWjRBJYWY.roa (hash: oswi/PqLXiY69b2lF56784lBrhIisxDRepTm/CrpEY8=)
6: pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl (hash: Y0y/eUR7YGz7IvsHYkh8e57rkj/0jM4BItyIAhUyDCI=)
7: qThwM4VOPtwJ-fORifwyTLzk-FM.roa (hash: inwDpdNUtTVuD4hxozBiGnVD6vXL05h5rizEBbo4mSI=)
8: vlQgVNHMOMDCgexHalesjIDPMos.roa (hash: NKNm5ZfHR4kcXtf4m4rKT2uIMrcP5kuQXn9iZz+SX+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:66:4f:79:7d:a2:d6:4b:27:55:1c:72:f1:28:3c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4537cbedad356819cbc77ae3fca17d65431c280
Validity
Not Before: Oct 19 23:01:47 2026 GMT
Not After : Oct 20 23:01:47 2026 GMT
Subject: CN=79c15bf7829e2dddca356177632738449ddcb3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:b4:d3:6a:d1:51:ea:96:0b:0f:fd:d4:0c:
77:1f:24:10:ea:3d:70:3a:81:3b:35:0d:ee:af:d4:
fb:6f:82:68:1b:ec:1e:0d:e3:cc:1c:da:85:4b:a4:
7c:f6:e4:5e:1e:e4:1e:79:79:05:18:bb:b4:ec:06:
40:7d:4e:99:f4:1a:c7:ce:01:69:0a:5a:a6:44:7b:
dd:d3:be:8e:0c:7a:8e:d9:77:df:61:bb:c5:92:6a:
c9:0e:80:6a:14:cf:ee:f9:ae:dd:ae:65:a1:a5:d1:
74:b8:d3:09:84:d6:4a:9a:0b:f3:5c:b4:46:d8:56:
74:7a:da:76:62:d2:4a:08:e7:ef:b5:98:0b:09:a9:
e1:bb:af:4e:9a:87:e2:6b:17:85:bf:a1:11:cd:0e:
9b:82:ba:a6:76:f8:ef:4f:a1:9d:54:49:d0:a2:16:
6c:a4:30:d1:bb:94:2e:80:3e:4e:00:c3:f5:ed:8c:
f8:ae:7a:a5:46:4b:ff:51:07:84:14:6d:d6:cb:86:
34:f7:ab:0f:8b:78:0f:a4:87:c0:97:53:63:68:b2:
58:e3:4c:b0:8e:ee:3f:be:75:d2:83:57:e2:e8:16:
20:ad:ec:b7:fe:a7:36:26:1f:c4:7b:d3:bc:cf:ab:
c0:f5:ad:67:9d:2e:14:55:ce:a3:26:28:be:d8:16:
69:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C1:5B:F7:82:9E:2D:DD:CA:35:61:77:63:27:38:44:9D:DC:B3:D7
X509v3 Authority Key Identifier:
keyid:A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7f:7f:df:a1:6c:0c:15:64:e7:ea:f7:69:82:b3:03:28:ed:
d1:03:35:b0:f9:75:9c:67:76:30:52:27:11:58:dd:23:bb:4f:
d2:82:6b:c1:00:3a:38:7c:7e:ee:e9:8b:df:06:a4:ff:4c:57:
73:e8:0a:04:c8:45:31:23:26:e5:5c:05:cd:2b:55:00:be:52:
47:36:b7:a5:f6:39:f3:27:fe:96:8b:0d:f4:21:8d:cc:04:54:
fb:41:37:0f:72:e9:09:55:5a:79:45:1f:72:c7:8c:02:90:38:
0e:51:a8:fa:85:0f:34:28:0e:27:d9:f5:5a:d2:42:53:0d:c3:
ca:43:30:d5:f0:d8:d6:e9:d6:86:6a:b5:da:02:55:ce:e4:ec:
64:c5:08:83:9f:7c:5c:99:16:df:9e:84:94:11:5d:07:77:5c:
cd:94:d4:4c:f1:2d:b7:a1:a1:9b:f5:50:e6:30:3e:b6:10:5a:
8f:6e:93:79:4a:9c:07:08:62:64:e0:e7:4f:26:c8:e1:59:79:
ad:b7:e0:85:f9:2e:dd:c8:df:4f:71:a3:8c:01:fa:81:0b:1d:
85:fd:17:ee:75:a7:94:58:e1:e0:c0:e8:40:a5:ce:07:37:70:
cd:55:81:73:12:08:78:66:2a:16:37:d9:5d:c3:8d:54:6f:67:
ba:f7:fd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:02:09 2026 by rpki-client