Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: /hK/QFJCKwmYLCDxWj/imC7Iy7wcEkATTL3lPIZq0SA=
Subject key identifier: 3E:8E:31:D7:DE:DD:6A:C6:7E:32:6A:A3:AF:1A:17:00:51:66:4B:92
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 01A08BD65C154B52B34B1FD4A236D5A31A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 1A45
Signing time: Thu 10 Sep 2026 15:01:16 +0000
Manifest this update: Thu 10 Sep 2026 15:01:16 +0000
Manifest next update: Fri 11 Sep 2026 15:01:16 +0000
Files and hashes: 1: 8xpf1H5jnrklNTBoaVn0u85Fw00.roa (hash: xVZEKXXOjsh0YBdOeRbRNQ2rIeuGE/aopxCQhkfvBRc=)
2: k1f4H5R1t7ioWxpD9zQTzDGVw34.roa (hash: UazRYiujjVi7Q1FCel0edXG5MOLygjSQmvy3K0uCobk=)
3: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: kuhqM5fR9HFDP3zjA68c2AEUxmsHOWQaP0RPSwdbKhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:5c:15:4b:52:b3:4b:1f:d4:a2:36:d5:a3:1a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Sep 10 15:01:16 2026 GMT
Not After : Sep 11 15:01:16 2026 GMT
Subject: CN=3e8e31d7dedd6ac67e326aa3af1a170051664b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:b2:35:ad:43:27:29:2b:41:a0:69:e6:39:
fc:08:d2:97:9e:38:ce:53:ec:5a:23:d4:8a:b3:c2:
db:fd:c8:de:e2:59:58:b9:4a:2d:99:ae:32:42:1d:
4f:36:83:e0:d5:e8:0b:fc:eb:f3:43:3e:20:97:d6:
bf:3c:28:1d:54:23:62:6d:24:e8:4d:c1:00:37:17:
58:db:91:51:e1:92:26:d8:2a:74:c5:40:96:bf:6d:
45:b2:6f:25:e9:7a:6f:52:e8:4a:90:a7:b5:45:6d:
79:28:2d:1d:37:96:bd:7f:ed:3b:f0:4c:37:9b:64:
d5:52:11:db:1a:6a:10:57:36:3a:e9:20:b2:f0:42:
fc:dc:e5:c4:60:cb:ce:34:3f:f2:51:41:39:f2:7f:
45:7f:05:19:aa:93:42:ba:5e:a9:67:4b:64:a2:87:
05:ce:83:a4:9f:8e:e4:f9:f2:8c:44:55:65:09:18:
75:25:da:fa:ef:01:60:f4:a3:df:cd:80:f2:48:a3:
6a:9b:4c:90:16:f6:94:8e:5d:b7:bb:4f:6f:c3:ec:
d8:fd:02:53:0a:14:0d:dc:d8:55:5f:8e:29:79:e7:
bc:31:1c:38:a3:18:55:17:8e:c2:e7:77:3f:79:1b:
23:ea:23:9c:94:85:d0:e9:ea:f2:f9:c5:f2:9d:86:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8E:31:D7:DE:DD:6A:C6:7E:32:6A:A3:AF:1A:17:00:51:66:4B:92
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:23:f0:e4:fb:2a:e3:de:0f:21:dd:b4:78:53:27:75:88:cd:
70:c3:03:b1:3f:39:67:96:59:7e:70:03:11:a2:62:85:71:77:
f9:73:f0:31:e8:27:30:ec:34:da:00:50:93:42:a3:d5:78:05:
e1:d4:77:c2:4c:d5:a1:ce:31:8c:b5:59:70:c6:20:17:dc:4d:
ac:5b:20:44:0b:5e:ee:d7:e9:c1:64:64:13:1b:d6:b8:53:d0:
05:a4:ac:cd:5f:a5:34:4c:94:88:cd:ce:a7:7c:92:de:2a:4a:
2b:98:2a:5e:ed:d2:46:f1:91:b5:b6:5f:d7:c7:6a:4b:45:0e:
c8:fc:9f:6e:7d:42:52:d7:9a:b3:bd:3b:4c:cc:f2:c3:23:8a:
a7:f3:7f:0f:03:a4:e9:89:80:81:61:55:30:f8:53:77:d8:07:
9e:4e:5a:60:e3:1e:ac:3b:87:ec:a5:25:d0:52:d4:0f:c0:96:
db:39:58:a1:b9:54:d4:d7:b2:fa:fd:58:ff:ee:b7:3a:41:8d:
82:27:8d:5e:c2:33:d8:37:4e:d5:b7:a5:00:48:57:53:31:c8:
7b:89:a2:ec:70:35:f6:32:a8:b9:be:41:f5:24:35:5c:35:6c:
eb:6d:26:be:c9:ae:c6:1e:a8:10:e5:e4:2b:0b:5b:0e:5e:57:
54:08:b5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:31:54 2026 by rpki-client