Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.mft
File: PmifxCLwpi1rXa7hqmuHnGBbZVc.mft (raw, json)
Hash identifier: wrSicWhzKMaDtDIjpQ8Jw/s7dCoRWLI100zZPr2VJDk=
Subject key identifier: BA:0D:3A:16:48:52:84:E1:FC:34:C6:AA:C9:F6:BE:02:57:D3:08:39
Authority key identifier: 3E:68:9F:C4:22:F0:A6:2D:6B:5D:AE:E1:AA:6B:87:9C:60:5B:65:57
Certificate issuer: /CN=3e689fc422f0a62d6b5daee1aa6b879c605b6557
Certificate serial: 01A174394A5A5C7D56AEBD20C471CA0F87C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmifxCLwpi1rXa7hqmuHnGBbZVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.mft
Manifest number: 013A
Signing time: Sun 25 Oct 2026 18:01:13 +0000
Manifest this update: Sun 25 Oct 2026 18:01:13 +0000
Manifest next update: Mon 26 Oct 2026 18:01:13 +0000
Files and hashes: 1: 7ollTNSFSY1I3Oksob2f8HRCUnA.roa (hash: aG8toklA3hCbimSvopqnfapWwydOj77jkZAjRvt9sqI=)
2: PmifxCLwpi1rXa7hqmuHnGBbZVc.crl (hash: DWN+TLeyENYlVppPy2CwcmBJk1j3PnhnzuWQrP7jMUY=)
3: RZQMyy5Mzg5d9uibtuU5J2s3ExY.roa (hash: cNhKdW/jIBlVmgalNBzdMb1dmA2lXN3oMfaoDZgTu1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmifxCLwpi1rXa7hqmuHnGBbZVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:39:4a:5a:5c:7d:56:ae:bd:20:c4:71:ca:0f:87:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e689fc422f0a62d6b5daee1aa6b879c605b6557
Validity
Not Before: Oct 25 18:01:13 2026 GMT
Not After : Oct 26 18:01:13 2026 GMT
Subject: CN=ba0d3a16485284e1fc34c6aac9f6be0257d30839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:92:7d:33:b7:d7:82:a6:35:bd:5f:df:28:
8d:58:35:2b:a6:4e:f2:8c:38:1c:bf:db:21:b0:fa:
41:e8:73:a6:33:f2:ef:24:74:8d:e6:69:51:06:58:
56:37:63:dc:fa:7b:09:6f:26:05:d5:d0:05:65:59:
50:c8:1d:cd:51:2c:ad:fa:4a:82:8e:66:ea:8b:f7:
51:d4:7e:4e:06:d9:54:fa:74:d3:4f:68:80:6d:36:
77:3d:1d:76:8e:50:b5:d3:db:be:cf:de:cd:5d:a9:
53:9b:ab:ac:d1:b9:9a:b1:03:38:85:d6:ae:bf:98:
7f:3a:5f:9c:d6:13:14:86:3a:94:4c:b3:72:4b:c9:
a7:eb:6f:ba:8c:9f:26:04:48:70:58:41:5f:24:fd:
bd:ba:5a:ab:88:88:b9:c0:6f:19:71:bd:f7:32:f5:
63:2f:5e:0e:77:e1:bf:88:b4:0b:8b:92:10:9d:c8:
24:ad:7a:b1:09:4c:7a:54:4a:04:86:c8:1f:46:97:
16:70:38:8c:60:7c:2b:5b:a7:91:7b:10:04:36:89:
8a:4a:32:35:7d:a7:bf:d6:f9:22:f1:11:18:aa:ab:
0c:bc:ab:07:11:85:2b:71:2f:26:86:c0:cd:ed:47:
e2:fd:0e:07:7c:91:df:6d:19:f8:bc:c3:bc:48:3d:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0D:3A:16:48:52:84:E1:FC:34:C6:AA:C9:F6:BE:02:57:D3:08:39
X509v3 Authority Key Identifier:
keyid:3E:68:9F:C4:22:F0:A6:2D:6B:5D:AE:E1:AA:6B:87:9C:60:5B:65:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmifxCLwpi1rXa7hqmuHnGBbZVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:52:b8:eb:82:93:6b:da:5f:a6:32:0c:c5:9a:3a:58:3e:3b:
01:6b:79:6d:63:77:e5:a2:a1:7a:41:d5:f9:55:94:0f:e4:48:
78:36:c2:d9:93:5c:ab:02:ee:12:e2:4a:af:3c:47:93:11:37:
fe:7b:2b:63:15:a8:6c:e6:3f:8c:f1:c7:3b:6e:e8:41:b5:89:
87:b5:f3:e2:5c:b6:af:0c:e3:da:cb:c4:2c:9b:1c:e8:8d:70:
4d:1c:d7:97:a8:bc:a3:74:6f:da:bb:b4:6d:5c:3d:67:d3:68:
45:9a:d7:52:ee:b2:66:98:8e:bc:22:6e:d2:79:fa:0c:8a:87:
a0:4b:e6:29:d7:70:d8:32:4b:e4:21:46:14:8d:90:5b:7d:41:
ea:3a:46:78:92:7d:e9:bc:d6:6b:12:11:96:8d:87:6c:e9:0d:
2b:c5:6a:66:5a:b9:d6:1b:40:e4:37:c3:b7:3e:78:8a:68:57:
61:9f:c5:7e:a7:61:bb:f5:cb:44:c8:5c:7c:13:b0:58:e2:4e:
24:54:65:4d:3d:a4:bc:e7:21:fa:2a:6b:c0:e9:a4:70:84:78:
56:1e:56:96:93:96:ef:0c:62:73:44:46:9f:e3:49:90:1e:36:
12:76:3e:e9:a7:d9:2f:df:e1:1c:63:fa:29:98:fb:59:a7:5d:
ff:2f:48:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:53:31 2026 by rpki-client