Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier: VRbRsVhjkqjdgjp7ow3yDhiBoIcbQ/kwaw5jRz2bXsc=
Subject key identifier: 89:EB:29:E4:90:18:E4:1E:D6:4C:B6:16:DE:AB:DC:90:A1:0B:7F:78
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 01A183ACDCAFA72B49FADA89A1464CBC9ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number: 104B
Signing time: Wed 28 Oct 2026 18:01:46 +0000
Manifest this update: Wed 28 Oct 2026 18:01:46 +0000
Manifest next update: Thu 29 Oct 2026 18:01:46 +0000
Files and hashes: 1: Z8sIth2fuLtbZU5YZYofujl3N3Q.roa (hash: OuZ+DZI7vPFF2f+5cYLFAwbQ08o0C2E+Uzidod1oA7I=)
2: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: 2er1V6FwUHU0DC7jjthgAgo7RVvB8XKT/DHcyh1+szw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:dc:af:a7:2b:49:fa:da:89:a1:46:4c:bc:9a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Oct 28 18:01:46 2026 GMT
Not After : Oct 29 18:01:46 2026 GMT
Subject: CN=89eb29e49018e41ed64cb616deabdc90a10b7f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:c6:84:9c:26:20:1d:d2:de:ae:b8:08:3c:
c4:75:94:9f:5e:ed:f7:8a:f7:9b:7c:15:bd:0b:04:
6d:2b:28:65:73:8f:7e:eb:5c:98:7b:79:c8:23:e7:
53:29:65:55:cd:6d:74:7f:ba:85:ec:52:d3:16:4c:
a8:d6:93:9a:0f:06:c7:ad:ce:1b:ac:70:59:dd:d2:
05:77:df:be:02:d9:5a:42:fc:28:cd:98:86:fd:a2:
0f:76:a7:3c:c2:2f:f7:ad:b0:b8:e6:13:f2:0a:23:
47:9b:a3:c3:82:d4:54:e2:66:d6:22:b6:3c:62:25:
ae:e9:8d:17:5d:b7:d0:4c:50:6d:e6:6f:b1:80:d0:
8c:b7:8b:08:13:1e:1e:31:b5:52:f7:b2:09:ab:ed:
64:2b:50:97:3f:37:53:e8:c7:51:14:35:e7:3a:92:
0a:a9:f3:ee:c4:fb:48:ab:4c:12:6a:3c:29:22:0e:
70:28:18:76:32:3a:eb:b1:90:61:e9:b0:76:6a:2f:
1e:7a:14:75:3f:3a:e4:2c:0d:29:ba:6f:cd:15:81:
19:33:3f:5b:64:61:e6:1e:79:3a:fc:6d:be:47:25:
be:1b:54:eb:94:30:9c:66:fe:ac:d4:5c:81:93:33:
d2:54:c4:06:08:b2:9c:91:30:6e:9f:5e:69:b1:d1:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EB:29:E4:90:18:E4:1E:D6:4C:B6:16:DE:AB:DC:90:A1:0B:7F:78
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:0d:90:19:f1:41:f6:88:58:b6:ec:11:ef:0a:00:d7:8c:96:
3c:0c:8d:7c:b2:09:9c:79:11:f4:2f:56:da:c8:fc:25:2c:27:
83:bb:e8:ee:10:c4:61:d1:5b:c6:fc:16:04:1a:9b:20:24:98:
bc:c5:b8:7e:aa:2b:52:84:fe:48:74:6c:03:90:cb:19:44:44:
c9:6d:42:93:e3:4e:59:fe:36:3d:76:f9:ca:9f:e6:cc:54:0b:
ba:1c:2e:75:c4:bb:6b:c8:7b:1c:2e:a9:b3:33:bb:5d:a2:39:
30:1e:3e:2e:40:f4:20:d7:34:68:5b:5e:7e:2b:5d:b2:ba:7c:
00:e4:72:37:c2:a9:98:96:0e:8b:ba:cb:81:32:39:b6:58:f2:
45:37:a9:0d:c6:24:78:50:9a:e0:09:98:57:83:29:03:bd:de:
9b:25:b8:0c:ab:36:7a:fc:a5:f5:bc:34:0c:67:14:e7:b6:37:
c2:1b:32:26:44:d5:f0:40:7b:14:64:79:ae:d0:74:1e:1e:ad:
48:94:cc:a5:80:85:8a:54:9f:f0:a5:df:41:23:a7:56:80:9e:
dc:ff:5e:07:3f:63:da:43:f7:98:86:1a:d2:4a:87:b7:67:c7:
01:53:3d:17:c9:51:3b:13:af:41:ef:17:43:13:4d:62:c3:49:
c5:b3:06:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:49:07 2026 by rpki-client