Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: tmhbLRxibmphx4CAaWoBMGnhu0j3LB/apHcAEKCvhwA=
Subject key identifier: 2B:FB:24:25:A2:A0:B1:81:EF:CE:61:5E:B4:87:8C:2B:33:53:B7:8E
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 01A14D621F393E82C859E9FD3A7BC592EF79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 0A55
Signing time: Sun 18 Oct 2026 05:00:38 +0000
Manifest this update: Sun 18 Oct 2026 05:00:38 +0000
Manifest next update: Mon 19 Oct 2026 05:00:38 +0000
Files and hashes: 1: clGNCBZAUsZmUY2Yr9tTeA-xspg.roa (hash: 5vbfK5sSOuwTJdbsyPF/pmsdysNhxTsWqZlPG/oHPeQ=)
2: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: dfxxeEXIukuAPIfWDf+cEaTrpGKd4OB/S6shKpzsxg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:62:1f:39:3e:82:c8:59:e9:fd:3a:7b:c5:92:ef:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Oct 18 05:00:38 2026 GMT
Not After : Oct 19 05:00:38 2026 GMT
Subject: CN=2bfb2425a2a0b181efce615eb4878c2b3353b78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:48:5a:fa:e1:09:6a:11:9e:60:10:f2:67:
05:df:64:70:c8:75:90:54:64:fa:1d:ac:0c:9b:cf:
3f:62:d8:6a:34:29:17:6e:86:83:ff:b9:42:51:cb:
8f:23:de:c5:3f:bc:fc:c8:05:c9:19:ec:f1:50:e1:
ee:c1:c9:7d:35:3a:ab:d5:9b:dd:04:9a:0b:b2:ae:
1f:07:9f:87:e2:a5:72:cd:0c:69:12:39:26:2d:ee:
36:74:ea:d2:43:bd:86:7f:c7:b8:ba:9a:3e:9f:29:
76:ac:1e:a2:e4:96:20:a8:b2:56:d4:30:85:91:9b:
d6:87:fa:43:09:fb:61:0c:8c:d0:21:af:de:11:a7:
1d:76:69:41:75:37:6f:aa:a5:7d:d0:0f:05:45:34:
08:da:a7:a2:e5:44:bc:af:02:c7:60:49:7f:a8:60:
16:d6:b8:54:b1:77:b3:98:a1:41:d7:ba:2c:d2:ee:
d7:cf:08:20:70:f9:89:43:b9:d3:8c:7d:5f:97:54:
92:e6:db:17:4e:b3:0f:6d:f9:37:25:17:a9:9f:6f:
c8:4e:27:f5:e5:12:5b:17:36:5b:fe:0e:62:5c:8e:
2a:49:c2:50:ac:17:d4:5d:1b:da:28:7f:ed:d8:12:
29:dc:16:08:67:ae:ad:7e:4f:09:1b:c9:1b:18:2c:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FB:24:25:A2:A0:B1:81:EF:CE:61:5E:B4:87:8C:2B:33:53:B7:8E
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:00:66:75:9c:01:85:48:f3:a8:73:0f:00:f4:7d:35:4b:07:
f7:db:bc:09:c5:c6:b1:6c:ca:bd:52:f6:94:e0:8d:32:e4:6d:
c3:36:ab:7a:e8:69:52:29:9d:37:d3:12:91:02:3c:a6:9d:31:
4d:75:46:79:43:54:4f:6a:58:aa:77:27:23:5f:28:7c:15:ff:
03:1c:b2:37:9d:b5:f9:72:bb:a7:f7:1e:cd:65:d9:fd:31:24:
b8:d5:06:0f:52:29:e4:f3:16:bb:46:d0:c5:97:ea:0b:ff:0f:
ad:15:4c:3b:1b:ca:3f:24:0d:a3:3c:62:87:22:44:d5:95:df:
a0:7b:99:d8:46:ad:0a:a5:39:c9:0d:72:cf:81:8d:b3:4f:f2:
fe:22:af:21:91:c4:3b:ea:ab:2b:60:2f:6a:81:9e:8e:e1:f0:
99:4a:be:ec:d8:0e:08:97:9c:b1:fb:8b:ca:5c:0d:15:13:3b:
5d:f8:72:09:d3:51:de:b8:a2:7f:88:7c:ab:a6:a8:61:4a:6a:
35:b7:d9:be:fa:f4:92:a0:dc:38:ff:16:dc:cc:25:5b:d2:7f:
2e:60:56:5a:ec:29:af:5e:4c:0e:21:44:da:91:38:de:99:d7:
d6:7b:ef:aa:9c:f0:22:a0:b9:82:60:3f:99:f3:af:3f:cb:62:
5d:9e:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 16:15:34 2026 by rpki-client