Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: i+uen+xIvH3W/OGf7nhJG8/9i4eznZHtvt56cW8/1RY=
Subject key identifier: 82:3D:60:6D:33:69:6C:01:3E:6B:99:1C:A0:83:FB:CD:C9:23:A1:39
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 01A181194B7318A1A955B68BA4E818B05434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 0FA9
Signing time: Wed 28 Oct 2026 06:01:20 +0000
Manifest this update: Wed 28 Oct 2026 06:01:20 +0000
Manifest next update: Thu 29 Oct 2026 06:01:20 +0000
Files and hashes: 1: IyFwnbWnoKfZVMOw4siaFLOw0dM.roa (hash: I/fImPBHiDykSEzgNGq+cfAayabaV17LU6Onzjp6x+A=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: SvLLVa4aVBoTOmPv+h4DbjjRsyoW0Hwy+r5Qp7Ed9GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:4b:73:18:a1:a9:55:b6:8b:a4:e8:18:b0:54:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Oct 28 06:01:20 2026 GMT
Not After : Oct 29 06:01:20 2026 GMT
Subject: CN=823d606d33696c013e6b991ca083fbcdc923a139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:48:82:8e:7d:92:cb:28:97:32:fc:f1:2f:
79:81:70:39:8b:4d:76:14:05:63:34:e3:a5:be:9f:
98:26:ee:5c:0b:95:d7:9b:9a:1d:98:c7:3f:b0:50:
a6:ce:2a:be:13:3e:af:3d:2e:ea:f9:2e:24:8e:d4:
c4:ae:93:35:e2:58:14:5a:29:55:2c:81:7b:93:68:
8a:40:d3:e7:6a:b1:44:a4:91:9f:9e:5c:4b:c5:10:
0c:d1:53:88:49:cc:84:14:ce:38:3e:1a:5c:90:fd:
38:e1:d6:ce:54:22:88:8c:20:f3:25:d7:a4:ad:14:
52:dd:4b:a9:dc:1d:57:9f:7a:ae:d0:59:ee:61:a2:
14:65:66:ff:1f:78:14:5a:09:40:64:af:ca:20:96:
00:2a:a1:e0:3b:37:a3:72:d6:d8:57:d5:f8:a8:1b:
ac:da:15:e5:96:f5:57:2b:30:34:5c:64:c9:81:04:
5f:20:79:3a:00:a1:4b:2e:0b:01:8e:d7:76:5c:f4:
bf:c1:27:f2:ba:14:d2:45:36:15:7d:cc:ca:4e:3b:
83:bd:2f:09:ab:3b:53:84:25:70:c0:96:f7:32:99:
5e:f2:65:a2:8b:5c:7e:16:c8:72:31:03:67:08:87:
8c:e1:bf:16:9c:02:4c:be:95:7d:de:b9:05:90:86:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3D:60:6D:33:69:6C:01:3E:6B:99:1C:A0:83:FB:CD:C9:23:A1:39
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b4:bc:22:6d:76:13:ad:69:dc:3c:22:70:dd:46:56:88:25:
45:61:64:8b:ee:77:de:cf:dc:0a:5c:bf:3b:a8:d4:d0:21:60:
ac:f6:04:08:a5:09:ad:54:cc:af:94:df:26:36:fc:e3:88:c5:
a3:da:e3:26:d8:96:db:7e:40:65:05:05:5e:c4:f6:8b:31:ba:
b6:ba:46:64:a8:2d:4f:82:a8:1d:34:01:3d:13:52:a3:99:b9:
91:ca:75:1d:e2:24:25:00:b9:af:10:31:d6:b7:f8:1e:02:95:
bf:e0:f5:be:07:c5:a0:79:cc:d3:72:08:70:73:86:14:f1:f9:
4f:57:e6:8d:26:f0:19:b5:0d:ea:32:32:75:a9:9d:da:59:d3:
ae:26:84:48:a9:2f:24:ca:75:ec:64:5a:af:c5:99:5b:4d:08:
54:be:8c:fe:ca:63:77:ee:a5:f1:35:3c:7b:eb:b2:55:50:20:
37:cf:19:df:a2:c0:54:59:a5:55:50:d5:d4:ca:c3:db:43:5d:
76:21:d8:f8:00:b2:e8:bb:0f:4b:8f:03:91:3b:d5:a0:25:89:
83:c5:9d:e8:81:5b:07:67:c6:6f:fd:fa:a3:c1:1f:c3:69:0e:
1a:93:8c:36:4d:89:36:53:38:08:d2:ce:27:38:59:d7:d8:2d:
2d:f0:ab:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:12:48 2026 by rpki-client