Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
File: pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft (raw, json)
Hash identifier: ngf1O+krpCHb2bvrcp7XNmp6qTrjV4dKVOcOnU2+eJc=
Subject key identifier: 68:ED:29:F4:07:D7:6D:EA:71:F7:1B:86:19:93:F9:BF:D5:53:10:80
Authority key identifier: A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
Certificate issuer: /CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Certificate serial: 01A089E7B72348DC44E55EAD30984B58B88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
Manifest number: 132D
Signing time: Thu 10 Sep 2026 06:00:59 +0000
Manifest this update: Thu 10 Sep 2026 06:00:59 +0000
Manifest next update: Fri 11 Sep 2026 06:00:59 +0000
Files and hashes: 1: LlCo-cr1TvaGSEsvi_aeztFDrsY.roa (hash: ONGlxNxuG7wwvZScxkyZsCMFDhxVuAnR+LQnLfg7tcI=)
2: pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl (hash: VMVx4mbNhlEaazFC4eWJsHFkJ7CFAyR2VvVm8wlp32c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:b7:23:48:dc:44:e5:5e:ad:30:98:4b:58:b8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Validity
Not Before: Sep 10 06:00:59 2026 GMT
Not After : Sep 11 06:00:59 2026 GMT
Subject: CN=68ed29f407d76dea71f71b861993f9bfd5531080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:c0:52:c8:f9:cc:63:ba:e7:fb:f3:41:79:
03:a3:8f:de:b2:1f:21:38:1e:3e:18:64:74:0d:36:
8f:a7:20:26:99:c5:f6:78:5a:32:a7:e3:8a:bc:80:
6c:82:8d:3c:5f:cd:77:25:98:31:ca:29:3b:3b:68:
24:59:c4:75:ec:dc:b8:dd:79:42:11:7a:62:92:02:
78:97:cf:fe:a9:a4:bc:31:63:66:5c:e9:ef:9a:63:
01:0a:da:3e:ad:89:93:36:48:db:39:ae:0f:77:e1:
66:40:2e:92:47:ee:36:1e:20:8f:6b:e4:e6:09:88:
6f:f5:34:3a:76:f9:8e:af:67:ef:e0:0b:e0:15:ea:
42:5e:00:9a:3d:90:9f:2a:8e:01:c6:fc:d4:50:23:
7e:7c:c7:b1:9e:a7:f0:19:44:2d:4a:20:ad:f7:82:
d1:27:3f:09:77:32:ed:11:0b:5b:00:c3:d8:ba:f0:
8c:b7:1c:cf:6f:a8:4f:f0:96:cd:82:4f:24:d1:4b:
2e:5d:99:65:a8:ed:73:96:b0:aa:54:79:e0:49:b5:
9a:66:ae:22:e3:a3:d3:61:2b:1a:42:c9:fd:a5:17:
94:57:20:04:de:c0:7a:49:a5:03:08:3f:6c:0f:57:
99:b0:cf:f8:93:ea:83:e3:34:a3:60:c5:fe:b5:8b:
9b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:ED:29:F4:07:D7:6D:EA:71:F7:1B:86:19:93:F9:BF:D5:53:10:80
X509v3 Authority Key Identifier:
keyid:A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ab:d3:e2:30:61:25:9f:39:50:39:34:bf:66:30:37:8b:a2:
cd:a5:3a:64:cd:0d:e3:8e:bf:65:35:f8:fa:f7:3e:c8:7f:d7:
dd:ee:c1:65:95:bb:e8:ab:ca:ab:7f:24:e9:f6:aa:3f:14:71:
7c:3a:6b:aa:15:99:60:de:d1:0c:f9:a1:6b:a4:4f:82:69:b3:
ac:36:16:c1:89:25:99:b4:7f:7f:af:77:e7:e0:d7:a4:04:51:
81:87:b1:1b:b2:fe:39:0f:ae:78:e0:fe:4a:65:82:93:9d:b1:
ae:2d:1c:f8:1e:22:31:50:69:7f:e9:9a:77:d8:1b:94:29:07:
f2:3c:c1:c4:21:69:64:5d:79:6b:b2:23:21:37:32:fb:82:49:
58:33:51:2c:76:c1:d9:b7:b8:60:ff:30:a7:2f:8f:9e:4e:ce:
c5:2c:7c:80:c2:9f:f7:a9:38:85:f6:9c:17:2f:8c:e9:bf:1d:
4a:00:25:13:c2:b2:48:4d:bd:3c:c3:47:52:08:5a:bb:55:00:
a1:c2:e2:99:4d:9f:1d:42:93:d4:41:13:2c:ff:b1:a9:7b:e7:
d8:64:7e:c9:d1:86:41:eb:52:c5:b6:7c:7a:af:da:98:fc:c0:
57:3d:a7:54:0b:52:9a:2d:b0:1a:d2:2f:b7:96:8e:16:23:ec:
4e:03:38:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:14 2026 by rpki-client