Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: qkWze+mqafQuWM4PvUVA5X1PYo1u0A1rtPJ6y4pPUyM=
Subject key identifier: C8:A7:A1:EC:7C:97:F0:83:94:A5:3F:CA:E6:29:99:A3:9D:37:4F:DF
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 01A17F2AF0BB42AB856248A0AA430C9B47FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 1AC3
Signing time: Tue 27 Oct 2026 21:01:22 +0000
Manifest this update: Tue 27 Oct 2026 21:01:22 +0000
Manifest next update: Wed 28 Oct 2026 21:01:22 +0000
Files and hashes: 1: 8xpf1H5jnrklNTBoaVn0u85Fw00.roa (hash: xVZEKXXOjsh0YBdOeRbRNQ2rIeuGE/aopxCQhkfvBRc=)
2: k1f4H5R1t7ioWxpD9zQTzDGVw34.roa (hash: UazRYiujjVi7Q1FCel0edXG5MOLygjSQmvy3K0uCobk=)
3: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: whF7xOWTK6aEfQUr7lL3zd2FFeVps+3NeYkeqV83E0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:f0:bb:42:ab:85:62:48:a0:aa:43:0c:9b:47:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Oct 27 21:01:22 2026 GMT
Not After : Oct 28 21:01:22 2026 GMT
Subject: CN=c8a7a1ec7c97f08394a53fcae62999a39d374fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:e5:bf:99:fe:17:d9:c3:48:e6:36:c3:af:
3d:12:ae:84:a6:5b:fd:c8:b0:03:08:dc:2d:27:98:
ff:31:65:a7:4a:ad:f1:1c:60:28:bb:60:4a:61:37:
d4:aa:36:6c:8d:26:0a:95:57:43:c2:25:0e:36:f2:
ee:75:32:84:a8:82:07:0b:65:b6:36:28:51:15:01:
cd:c9:fb:e4:eb:53:91:a7:26:c1:63:4c:e9:ad:5a:
e9:8c:a5:4f:51:8b:e7:71:b5:9a:de:e6:40:27:d6:
5f:28:14:56:e3:6e:d4:a2:02:10:c7:40:d6:b7:7e:
4c:8b:69:dc:a1:32:d4:bc:a0:ed:2f:5a:4a:09:b3:
0e:a1:af:98:4e:05:12:97:0f:5e:88:57:3c:b9:a0:
41:c8:e6:1a:9c:dc:12:c4:5a:0c:9b:0d:b0:db:f6:
a6:85:92:41:6c:8b:73:f2:bb:89:73:55:71:46:28:
ca:41:5f:a1:fc:bd:95:da:71:e0:64:e0:98:02:8d:
9e:66:92:01:69:49:c4:cf:4f:44:69:05:d3:a8:32:
ad:cc:ac:d2:96:6a:4b:ec:19:a3:b3:47:ee:fc:3b:
bb:2b:17:aa:cc:c8:f8:39:d2:80:3e:2d:13:7e:b9:
06:53:76:43:54:89:3f:a1:61:2e:e5:e9:e5:d9:79:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A7:A1:EC:7C:97:F0:83:94:A5:3F:CA:E6:29:99:A3:9D:37:4F:DF
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:96:77:5d:e8:96:d8:be:aa:a2:d9:50:a5:fa:a4:63:86:25:
7d:68:46:49:50:94:cf:8b:c1:8a:85:bb:53:da:e1:3a:ec:69:
71:21:3b:d9:a6:56:73:17:e7:d1:bb:15:69:44:ea:dd:9a:47:
04:dd:fc:bf:2f:e9:29:e5:84:d0:24:49:2a:c3:fe:f6:a0:33:
56:36:52:f9:b6:67:fd:45:5d:60:70:dd:8f:57:2a:97:8a:fe:
68:e2:33:99:54:ab:be:83:05:bf:1b:dd:17:17:47:9a:de:fb:
03:31:36:25:76:2c:3d:90:65:2d:66:f0:df:e5:36:95:ea:0d:
43:20:7f:26:c1:75:1a:55:2e:62:00:48:79:88:46:60:38:1a:
50:73:14:43:af:b9:f0:83:c2:56:14:c3:35:b4:5f:7b:3f:ea:
f1:75:8b:e6:9d:ae:20:5c:83:c0:5a:63:de:79:fb:dd:4b:a8:
6c:ef:91:23:53:f9:11:bf:61:fe:11:5b:02:d3:63:4a:d2:04:
81:a8:ea:a8:60:b0:ff:7f:39:04:cf:69:69:ce:11:12:f1:21:
9a:ca:36:9a:1b:02:52:7a:0b:6b:de:86:50:9c:d5:8b:7c:79:
7a:c5:e5:a5:b7:8c:56:94:92:5d:32:a3:91:f8:88:b3:71:40:
38:42:79:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:16:17 2026 by rpki-client