Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: P0IsNYN5HR4taSY6D0PVREAUeeBDiqH3+gl95QLR8W0=
Subject key identifier: 26:88:E9:4F:42:F7:08:99:EB:53:0E:73:88:93:CC:CD:A7:1E:A1:66
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 01A08DC483543E725C423B7877CC43CD309F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 0F2B
Signing time: Fri 11 Sep 2026 00:01:01 +0000
Manifest this update: Fri 11 Sep 2026 00:01:01 +0000
Manifest next update: Sat 12 Sep 2026 00:01:01 +0000
Files and hashes: 1: IyFwnbWnoKfZVMOw4siaFLOw0dM.roa (hash: I/fImPBHiDykSEzgNGq+cfAayabaV17LU6Onzjp6x+A=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: u2KOJyUjuE0olEk+voLT6BFbVYxZzgQUvYE3uWgOoqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:83:54:3e:72:5c:42:3b:78:77:cc:43:cd:30:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Sep 11 00:01:01 2026 GMT
Not After : Sep 12 00:01:01 2026 GMT
Subject: CN=2688e94f42f70899eb530e738893cccda71ea166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:dc:48:4e:c4:31:81:e5:aa:56:c3:71:d3:
22:2b:88:a2:e0:29:89:16:8b:0f:29:13:ec:cd:bc:
b7:7d:f7:59:3e:5c:b6:c0:f8:a0:a0:39:e9:a0:7b:
d3:b3:19:03:a2:58:da:15:eb:b0:3f:3d:f8:71:91:
60:f5:49:65:09:3e:3e:74:09:df:f3:ac:49:91:37:
72:b9:31:2b:6b:fa:08:e4:48:86:56:06:c9:9d:25:
72:03:06:76:4f:a4:c1:20:6a:63:40:ab:6b:d2:06:
e3:cc:1b:19:29:6b:55:22:c0:be:15:4b:82:76:6e:
f6:b1:3b:2b:24:69:35:a9:37:0e:a1:54:81:85:de:
47:3f:da:1a:a0:54:34:b4:3f:f1:36:af:70:c1:75:
02:d5:27:93:d0:8e:5d:7c:26:9d:5e:03:64:fa:07:
19:6e:2a:7c:78:98:11:58:8b:22:e3:c5:23:4e:83:
44:1d:5b:c8:0d:31:7b:cc:e7:89:2e:00:72:64:00:
97:1f:92:aa:96:d8:cb:7f:ec:22:1e:ae:e7:c7:5c:
51:a3:5f:6d:c3:2c:e6:64:b5:92:6d:d1:22:a5:3b:
54:e5:db:fd:0d:f9:fc:f7:3b:d0:33:6d:50:29:24:
7b:9d:af:de:59:19:9c:78:ab:d6:37:93:ec:35:99:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:88:E9:4F:42:F7:08:99:EB:53:0E:73:88:93:CC:CD:A7:1E:A1:66
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:51:8c:f4:72:fd:4c:33:75:9a:1d:80:21:bd:bb:21:17:60:
b9:2a:88:9f:3a:51:1b:58:61:dd:89:49:40:47:1c:c7:5e:29:
23:2f:da:4d:f0:95:c0:05:f7:1a:a5:cf:15:87:89:db:23:eb:
8c:dd:04:c1:4c:20:0e:ff:63:9c:44:29:4b:4f:2e:37:b4:cf:
5d:3b:59:a1:22:80:ce:c0:3e:83:36:87:d2:d0:ac:a4:df:62:
8f:aa:e2:e4:25:eb:9c:1b:81:e2:4d:48:cb:88:0d:8c:a6:3c:
aa:7b:d0:1d:3a:73:41:c6:76:3b:23:04:ed:ec:4b:88:8f:f3:
a1:8d:80:61:31:71:44:d0:aa:11:7d:01:65:3e:e6:35:50:ce:
44:60:c5:94:1b:b2:e2:30:db:fd:2f:c9:01:2f:02:76:b6:45:
b6:01:92:ea:23:64:e5:28:e8:93:0b:50:1f:ab:b3:81:a7:d1:
30:3e:1b:9a:e2:f8:ae:0d:9d:bb:34:a2:4c:9b:09:c8:7a:47:
17:ac:87:d6:a2:30:8d:e5:00:4f:bb:00:2a:cc:b4:2b:0a:4e:
bd:2d:90:dd:ed:a1:4a:6c:e0:8e:76:24:0f:77:b5:82:0e:6b:
69:b4:d4:23:ff:40:c5:5e:d2:8b:dd:b0:16:a8:0b:77:dd:a8:
27:ed:6a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:08:34 2026 by rpki-client