Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier: uA0BXthwvZSW2LEO5V4zWFTa5R8uqhI2Td3x9mkxra0=
Subject key identifier: B5:FE:2C:36:90:4D:81:A0:F8:3C:50:93:E2:A4:8D:24:1A:1F:1E:15
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial: 01A17BF30DF3815A0C944976208746B9FA44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number: 0831
Signing time: Tue 27 Oct 2026 06:01:28 +0000
Manifest this update: Tue 27 Oct 2026 06:01:28 +0000
Manifest next update: Wed 28 Oct 2026 06:01:28 +0000
Files and hashes: 1: 3fJrjAYV-8WA5qmnNRu8vP1jkLs.roa (hash: UTNsuGJV1hBq6NhuyQF7exUAJYp789Ei8OqvCYeZo7o=)
2: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: z0VV17/n1jarNfWUKCZ45VFvRh60xGtQ1XFzoG+JOhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f3:0d:f3:81:5a:0c:94:49:76:20:87:46:b9:fa:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
Validity
Not Before: Oct 27 06:01:28 2026 GMT
Not After : Oct 28 06:01:28 2026 GMT
Subject: CN=b5fe2c36904d81a0f83c5093e2a48d241a1f1e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:cb:11:5b:6b:54:cb:0a:76:f1:d0:81:1e:
ba:cf:a3:09:ff:26:9a:40:31:45:2e:98:49:b3:67:
4d:99:89:b4:8b:ca:5d:13:99:9c:98:d5:cf:ef:f5:
d0:b2:96:81:4a:52:32:10:dc:e3:71:24:a4:20:68:
f3:5f:5e:dd:06:3b:16:02:ee:b4:16:14:b1:d6:f9:
df:a0:03:ee:09:fa:f2:1d:aa:f7:bb:04:9d:aa:7d:
74:60:1f:5c:3d:89:5d:25:d2:23:43:5a:ce:63:95:
dd:cf:8e:84:2c:5a:81:01:03:97:65:31:33:29:38:
d3:c5:ac:2d:aa:d0:3a:e2:22:bc:45:94:0e:24:10:
bd:50:c4:c5:a6:e7:34:20:78:93:bd:83:17:98:c6:
ff:2d:a8:ca:c6:55:46:0e:0e:f4:15:66:91:32:16:
55:1d:ef:b1:a3:f1:56:fe:2d:17:30:d5:70:a3:a7:
1a:9e:64:a0:39:1e:0e:e1:a0:2e:be:67:5c:0d:50:
ff:26:63:9f:55:d8:c4:93:cc:01:11:fe:26:aa:7a:
37:0c:05:51:b8:fa:40:e1:be:a9:2b:2c:4d:bc:59:
88:c5:12:89:60:87:93:a8:d3:df:f6:b8:d0:f3:39:
96:dc:d9:6d:78:23:21:c3:7f:50:56:f5:3a:24:22:
bf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FE:2C:36:90:4D:81:A0:F8:3C:50:93:E2:A4:8D:24:1A:1F:1E:15
X509v3 Authority Key Identifier:
keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3e:a3:57:53:6e:0f:48:0d:09:c2:42:d4:51:32:ca:ba:5c:
23:f0:18:56:82:c7:af:6a:10:e2:86:cc:7c:e0:51:03:b0:65:
c1:a9:5d:b0:68:28:04:6f:0f:b2:95:26:72:f1:84:f4:b1:14:
cc:1c:e9:ed:73:fb:fe:29:ea:a3:8e:90:c3:f3:92:93:8d:5c:
49:0a:7c:4d:b3:2b:1a:85:ae:87:a6:53:06:97:9f:52:43:af:
4e:9c:95:0a:66:30:8d:f6:78:3b:33:5a:85:36:cd:1b:e0:c7:
21:ee:9a:1a:37:2a:b6:53:59:d9:9a:8c:18:63:f4:c0:8b:5c:
b8:c8:f3:82:12:32:79:c9:7e:de:51:40:97:fb:3e:fa:4b:1c:
b9:09:ee:17:86:79:87:78:36:55:dd:62:5d:34:d5:ea:96:10:
86:0d:d6:e5:17:c3:b7:d3:ba:01:d5:f1:1d:a8:fd:cd:5b:ea:
7e:84:0f:61:72:66:80:bc:d6:f4:a5:9c:eb:6d:29:8d:92:69:
06:7f:ff:25:a3:71:13:1d:25:c2:c9:83:ff:70:0b:7c:c4:48:
a8:54:06:5e:73:5c:6b:7f:8e:e8:c4:f1:02:e6:55:8c:d1:d2:
8a:69:99:bc:6a:18:be:ac:ba:2b:62:c6:41:7c:6c:00:90:66:
60:e5:dc:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78w3zgVoMlEl2IIdGufpEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmQwYjgyNjY0NGExODM4N2NmODMyMmRiN2U2NDZhZjYz
ZDk4NmEwHhcNMjYxMDI3MDYwMTI4WhcNMjYxMDI4MDYwMTI4WjAzMTEwLwYDVQQD
EyhiNWZlMmMzNjkwNGQ4MWEwZjgzYzUwOTNlMmE0OGQyNDFhMWYxZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1knLEVtrVMsKdvHQgR66z6MJ/yaa
QDFFLphJs2dNmYm0i8pdE5mcmNXP7/XQspaBSlIyENzjcSSkIGjzX17dBjsWAu60
FhSx1vnfoAPuCfryHar3uwSdqn10YB9cPYldJdIjQ1rOY5Xdz46ELFqBAQOXZTEz
KTjTxawtqtA64iK8RZQOJBC9UMTFpuc0IHiTvYMXmMb/LajKxlVGDg70FWaRMhZV
He+xo/FW/i0XMNVwo6canmSgOR4O4aAuvmdcDVD/JmOfVdjEk8wBEf4mqno3DAVR
uPpA4b6pKyxNvFmIxRKJYIeTqNPf9rjQ8zmW3NlteCMhw39QVvU6JCK/uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLX+LDaQTYGg+DxQk+KkjSQaHx4VMB8GA1UdIwQY
MBaAFKQtC4JmRKGDh8+DItt+ZGr2PZhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0Mjgt
ZTgyZDVlZTRlNDBmLzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0MjgtZTgyZDVlZTRlNDBm
LzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANT6jV1Nu
D0gNCcJC1FEyyrpcI/AYVoLHr2oQ4obMfOBRA7BlwaldsGgoBG8PspUmcvGE9LEU
zBzp7XP7/inqo46Qw/OSk41cSQp8TbMrGoWuh6ZTBpefUkOvTpyVCmYwjfZ4OzNa
hTbNG+DHIe6aGjcqtlNZ2ZqMGGP0wItcuMjzghIyecl+3lFAl/s++kscuQnuF4Z5
h3g2Vd1iXTTV6pYQhg3W5RfDt9O6AdXxHaj9zVvqfoQPYXJmgLzW9KWc620pjZJp
Bn//JaNxEx0lwsmD/3ALfMRIqFQGXnNca3+O6MTxAuZVjNHSimmZvGoYvqy6K2LG
QXxsAJBmYOXc1g==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:52:10 2026 by rpki-client