Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: yBwEpuJhNaGuVhHszhfy8pnFkig1v+wc8E7DExeAV0E=
Subject key identifier: F8:DE:33:4F:4D:FC:9C:F8:36:B1:6E:79:81:B1:8A:CF:0D:FB:E5:1A
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 01A1284327111428CB7879F40BA95C757533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 00:00:51 +0000
Manifest this update: Sun 11 Oct 2026 00:00:51 +0000
Manifest next update: Mon 12 Oct 2026 00:00:51 +0000
Files and hashes: 1: JPBii3Hqcq30q25CjK9-h-C44rw.roa (hash: 0nYkKiEoyllpIK9/qO7+AH5OvjbE8XnCXRin+xPio6U=)
2: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: +COFaEKFESNvfnWAMjrZyKJOXamQBDkQLF5746d0VQA=)
3: qVXn2mio2xGIpazTfAYClCM2JZM.roa (hash: utP7O671cytqXjasGTBwll6HaIxFO1XJW1EluiUhDqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:43:27:11:14:28:cb:78:79:f4:0b:a9:5c:75:75:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Oct 11 00:00:51 2026 GMT
Not After : Oct 12 00:00:51 2026 GMT
Subject: CN=f8de334f4dfc9cf836b16e7981b18acf0dfbe51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0e:71:71:08:9c:d2:0a:90:1a:a3:1b:bf:11:
df:cf:57:51:ca:1c:4c:1b:df:5c:d5:ef:44:2d:fc:
c3:98:ba:25:b2:57:04:0e:62:ad:13:2e:8b:a9:ea:
ab:f2:b1:b5:fa:8c:44:98:2e:cd:cd:ff:53:ef:62:
07:1f:d9:e1:a9:86:f7:7b:8f:f3:34:0e:4c:a8:be:
aa:e9:8b:fd:66:9b:6a:72:7d:20:33:d3:f9:49:6c:
a1:b3:82:7a:e4:02:5f:19:5b:cb:84:45:18:21:ce:
80:f2:99:c6:ca:35:03:7e:9a:da:ab:95:40:13:85:
dd:0c:27:64:48:c3:dd:f8:87:5d:9b:01:ba:08:f6:
1e:f9:ff:90:88:d0:c1:43:19:65:e4:1e:36:c3:77:
8b:2a:9f:4d:65:2c:f8:06:b6:cd:ca:b0:ed:22:e5:
f7:34:62:67:79:19:5b:62:a8:25:2b:bc:21:78:3a:
4d:12:b1:a7:78:4e:75:9c:ce:ba:21:d9:f4:dd:bc:
be:19:48:2e:05:f6:5c:a5:57:54:20:9e:fa:57:88:
08:dc:14:d9:91:6a:ae:79:f3:65:f8:8e:e4:02:53:
91:f2:64:45:b3:6e:5e:5d:1d:3b:ae:47:4c:55:51:
9e:8c:ac:e9:c5:25:15:8e:b5:37:06:f3:23:87:14:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DE:33:4F:4D:FC:9C:F8:36:B1:6E:79:81:B1:8A:CF:0D:FB:E5:1A
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d6:c8:04:c7:8a:4c:60:19:38:48:20:3e:84:8e:40:3d:26:
32:c6:1a:5e:a7:f3:f4:8a:0b:ce:2f:fd:ba:ae:4a:8c:bb:51:
25:26:7c:cc:29:fa:70:da:b7:f4:16:34:32:45:f3:9e:65:be:
c4:a3:78:78:0e:02:f4:1a:4d:a0:28:4c:e1:33:96:5f:c3:42:
ee:80:ff:26:ed:5e:b7:74:9f:b6:07:23:7e:6e:41:af:31:fb:
e3:a3:c8:f1:88:34:4b:e0:ba:ba:03:2c:02:8a:67:ac:6c:39:
32:6b:06:1b:91:60:f7:06:f6:11:5f:4f:c4:de:07:93:4a:af:
78:ba:46:ea:1f:4b:55:16:4d:51:0d:d9:88:b8:f3:4b:e7:6a:
fc:9f:22:50:a7:7b:cd:94:31:20:7a:e5:bc:3e:28:9e:0b:52:
12:83:59:31:e6:6a:03:75:6a:33:4b:c1:41:f6:7d:8e:e9:73:
c3:29:a4:9a:b7:50:e6:b5:71:ba:41:36:87:d1:11:0c:21:8a:
25:c9:99:6d:d1:f7:eb:6f:cf:5c:99:99:a5:9d:d1:db:78:12:
34:4d:77:61:98:f6:5b:8d:ed:43:a5:0b:b1:ca:8f:a1:ce:7e:
a9:f0:c5:c2:4e:dd:35:cd:62:c3:bf:26:f2:a4:2f:bc:03:56:
f8:db:64:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:51:59 2026 by rpki-client