Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier: RMvwA20vHFVmfINIvcBHaeIYqOviazIVLpvgG39DN20=
Subject key identifier: 8A:B9:0D:8F:D2:C6:E3:91:96:2E:5E:C1:1F:81:B3:90:B4:88:C2:37
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial: 01A082D3D1AB33329EB05A528CFA51AD8D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number: 07B0
Signing time: Tue 08 Sep 2026 21:01:54 +0000
Manifest this update: Tue 08 Sep 2026 21:01:54 +0000
Manifest next update: Wed 09 Sep 2026 21:01:54 +0000
Files and hashes: 1: 3fJrjAYV-8WA5qmnNRu8vP1jkLs.roa (hash: UTNsuGJV1hBq6NhuyQF7exUAJYp789Ei8OqvCYeZo7o=)
2: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: AOw/b/1MESZnNCTtNR12vnmzbjCQx+KCFnEoQF0XU0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 21:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:d3:d1:ab:33:32:9e:b0:5a:52:8c:fa:51:ad:8d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
Validity
Not Before: Sep 8 21:01:54 2026 GMT
Not After : Sep 9 21:01:54 2026 GMT
Subject: CN=8ab90d8fd2c6e391962e5ec11f81b390b488c237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:76:a6:7c:13:e3:8f:2f:2a:94:f4:4c:12:
bb:ea:5e:4f:31:f1:9b:fb:dc:26:db:b6:33:54:67:
f1:be:3b:cb:84:a6:66:6f:2d:7b:1a:e0:3b:3a:37:
54:28:18:a2:1c:ea:e7:eb:e0:95:f9:11:9c:13:8c:
19:eb:bd:58:17:6e:20:ef:64:df:2f:48:23:cb:91:
af:80:b1:63:b9:df:dc:95:38:f7:22:29:17:b9:fc:
8c:d6:02:5c:f9:92:8e:32:85:f0:80:41:4d:9a:de:
ef:85:b9:5f:02:b1:36:a5:ce:89:eb:4f:d6:ef:72:
9c:d2:90:fb:b1:6d:fc:f5:57:da:8f:db:77:d4:af:
ef:60:78:d3:e4:53:5b:40:6a:c7:52:3f:33:0d:bf:
30:57:31:3d:cf:49:52:75:bc:e7:82:12:2d:d7:0f:
a8:13:f6:77:c1:9d:53:00:2f:76:a2:f1:1d:75:2c:
c9:aa:fb:54:fe:f7:96:87:22:69:62:3b:15:5b:b2:
ca:62:8e:8d:5b:78:00:00:ff:9a:54:2e:b3:dc:9e:
f3:be:b5:ab:79:2c:e7:44:04:6b:37:cb:5d:6a:7e:
27:7b:b4:b4:5e:6a:08:ca:39:13:c4:e8:6c:c0:43:
3e:be:58:9f:0e:92:0b:e0:de:fb:3c:82:89:ac:d3:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B9:0D:8F:D2:C6:E3:91:96:2E:5E:C1:1F:81:B3:90:B4:88:C2:37
X509v3 Authority Key Identifier:
keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ff:08:c4:b3:46:79:6a:b3:c6:bc:34:6e:a7:6a:83:0a:84:
e9:fb:4e:d1:73:36:9d:86:ed:e0:0e:22:ca:88:11:18:f0:e3:
c5:a8:71:2c:a5:d6:1d:68:14:29:dc:cf:24:28:f0:0c:f1:25:
45:89:a3:ad:16:0d:89:57:a2:89:61:d8:f4:46:3b:58:d1:ea:
2a:12:5b:95:3b:7c:0f:96:a8:23:55:5e:6d:80:67:33:8c:e6:
1d:c4:e6:5c:a0:f9:5d:54:15:e6:96:49:5e:82:12:c4:2c:fe:
ea:9c:52:59:f8:d9:14:15:64:63:51:de:1f:5d:23:d4:3b:a7:
74:60:e5:8f:b2:ae:b4:a3:b4:30:bc:dc:8b:ac:5c:82:03:28:
54:0a:b6:0b:af:9a:4c:06:d5:7e:08:47:0f:56:8d:1f:2f:50:
43:76:7e:51:3b:3d:84:b7:b1:d4:2a:f3:ab:82:c8:52:a7:45:
a3:51:00:ae:e9:bd:67:5d:49:4c:42:a9:f6:82:b0:b6:40:c2:
3b:bb:5c:ca:11:28:79:73:69:de:2f:ad:0d:39:81:6e:4a:dd:
a2:5f:3b:13:14:ce:23:52:f0:ce:b5:2f:9e:bd:fc:5e:b2:e0:
b7:43:88:b3:f3:bd:28:58:6c:69:b7:42:64:43:29:6b:39:bb:
f4:2e:14:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCC09GrMzKesFpSjPpRrY2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmQwYjgyNjY0NGExODM4N2NmODMyMmRiN2U2NDZhZjYz
ZDk4NmEwHhcNMjYwOTA4MjEwMTU0WhcNMjYwOTA5MjEwMTU0WjAzMTEwLwYDVQQD
Eyg4YWI5MGQ4ZmQyYzZlMzkxOTYyZTVlYzExZjgxYjM5MGI0ODhjMjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YZ2pnwT448vKpT0TBK76l5PMfGb
+9wm27YzVGfxvjvLhKZmby17GuA7OjdUKBiiHOrn6+CV+RGcE4wZ671YF24g72Tf
L0gjy5GvgLFjud/clTj3IikXufyM1gJc+ZKOMoXwgEFNmt7vhblfArE2pc6J60/W
73Kc0pD7sW389Vfaj9t31K/vYHjT5FNbQGrHUj8zDb8wVzE9z0lSdbznghIt1w+o
E/Z3wZ1TAC92ovEddSzJqvtU/veWhyJpYjsVW7LKYo6NW3gAAP+aVC6z3J7zvrWr
eSznRARrN8tdan4ne7S0XmoIyjkTxOhswEM+vlifDpIL4N77PIKJrNN7BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIq5DY/SxuORli5ewR+Bs5C0iMI3MB8GA1UdIwQY
MBaAFKQtC4JmRKGDh8+DItt+ZGr2PZhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0Mjgt
ZTgyZDVlZTRlNDBmLzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0MjgtZTgyZDVlZTRlNDBm
LzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/8IxLNG
eWqzxrw0bqdqgwqE6ftO0XM2nYbt4A4iyogRGPDjxahxLKXWHWgUKdzPJCjwDPEl
RYmjrRYNiVeiiWHY9EY7WNHqKhJblTt8D5aoI1VebYBnM4zmHcTmXKD5XVQV5pZJ
XoISxCz+6pxSWfjZFBVkY1HeH10j1DundGDlj7KutKO0MLzci6xcggMoVAq2C6+a
TAbVfghHD1aNHy9QQ3Z+UTs9hLex1Crzq4LIUqdFo1EArum9Z11JTEKp9oKwtkDC
O7tcyhEoeXNp3i+tDTmBbkrdol87ExTOI1LwzrUvnr38XrLgt0OIs/O9KFhsabdC
ZEMpazm79C4Utg==
-----END CERTIFICATE-----
Generated at Wed Sep 9 04:42:07 2026 by rpki-client