Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier: QUf5SbDOC8FSaFEqSmq1uQ12C9mLorWAGB1wYuzlrjw=
Subject key identifier: 3F:9E:C2:35:64:F5:68:C0:B9:52:FA:BA:E4:DD:0C:E5:C1:80:C9:6A
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 01A07171ADEEB11819D1FBABE4C01F5BD68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number: 0FBD
Signing time: Sat 05 Sep 2026 12:01:10 +0000
Manifest this update: Sat 05 Sep 2026 12:01:10 +0000
Manifest next update: Sun 06 Sep 2026 12:01:10 +0000
Files and hashes: 1: Z8sIth2fuLtbZU5YZYofujl3N3Q.roa (hash: OuZ+DZI7vPFF2f+5cYLFAwbQ08o0C2E+Uzidod1oA7I=)
2: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: +QtiX2YdLBPiBnke03nGanP2+WswSDokzWyTj97lzvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:71:ad:ee:b1:18:19:d1:fb:ab:e4:c0:1f:5b:d6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Sep 5 12:01:10 2026 GMT
Not After : Sep 6 12:01:10 2026 GMT
Subject: CN=3f9ec23564f568c0b952fabae4dd0ce5c180c96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:fc:18:a3:2b:a4:f3:c8:25:5d:5b:fb:30:
93:64:34:91:7b:58:e5:2a:7b:af:7f:e6:ee:bf:e0:
e8:e3:d4:08:ff:16:60:ac:a9:a5:78:e3:9c:68:9d:
54:9b:8b:e3:93:5f:95:f6:3a:d3:93:6f:b8:e7:4f:
4b:c1:e1:6a:5b:a3:81:e3:24:02:48:30:73:4d:f7:
ff:29:29:08:ff:7b:91:65:49:eb:0e:bd:01:c3:8e:
0a:c3:a8:5a:96:f6:81:64:7f:b3:67:67:7f:27:3e:
94:79:d7:ee:14:f4:b4:97:40:b1:b9:2a:8e:61:d4:
fc:53:82:35:31:f6:75:e6:5f:36:62:9c:09:f3:d2:
e6:bf:2b:10:a3:f5:66:d7:c2:93:ee:79:6f:97:c4:
d3:2b:f2:2f:be:fc:be:be:9f:ca:cc:f9:95:eb:05:
c1:38:6a:12:c0:12:68:42:85:5d:3d:26:ba:cb:95:
b7:34:6f:d9:d8:7e:35:9a:a7:dd:88:b4:eb:79:80:
13:2c:25:f8:a3:a7:11:fb:c1:28:07:3d:c2:a1:54:
e5:15:ed:e4:0b:ec:b8:f7:e4:e8:52:7c:ac:db:f6:
ad:76:3c:81:d5:a6:e4:cc:35:15:02:68:b9:79:4d:
68:0e:95:85:c1:a8:80:2c:12:ae:3c:0c:31:3d:1c:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9E:C2:35:64:F5:68:C0:B9:52:FA:BA:E4:DD:0C:E5:C1:80:C9:6A
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:72:69:cc:ae:a8:7f:24:71:73:89:14:ac:74:50:37:eb:60:
44:ef:61:fe:84:09:93:8c:35:8d:d2:b5:27:85:2f:40:9c:5a:
b5:61:2c:bc:34:ad:e5:30:4f:37:43:03:3e:97:b5:7e:e8:cc:
44:da:11:58:8e:f9:61:52:36:7b:2d:35:0f:87:8c:11:6e:93:
ea:35:bd:32:cb:19:08:7a:f5:8a:db:d9:c8:f7:5d:aa:38:f0:
17:ab:27:f9:ad:57:b6:a5:f5:44:ba:70:b7:81:cf:82:d8:87:
4c:5d:45:c4:f1:18:88:af:04:b2:9d:4a:90:f8:8d:8e:08:a9:
3c:5f:80:b4:b6:45:0a:3d:af:36:2e:19:ac:01:75:fa:57:b7:
45:72:a3:b6:67:16:e3:b4:aa:e6:eb:3a:81:b4:f6:56:06:23:
ca:47:8d:8d:5d:f2:c4:38:9e:39:33:38:76:dd:4d:49:73:6e:
de:c7:06:95:df:e7:4a:b1:24:b2:26:4e:1a:41:70:29:51:bf:
45:9c:70:7e:21:97:ea:6f:d0:64:b0:b6:01:70:17:ab:a7:42:
b5:b8:e0:dd:21:dd:9c:2a:75:d8:ff:bf:c3:86:78:fa:40:27:
4f:d0:9c:86:53:a8:b4:b5:61:e8:99:1e:67:ff:b6:10:72:50:
ea:63:b6:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBxca3usRgZ0fur5MAfW9aNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MDhmYzkyNDYwNDI3NTExMTBkMmVjNTA2NWQwYzQ3ZDFk
NDNjZDAwHhcNMjYwOTA1MTIwMTEwWhcNMjYwOTA2MTIwMTEwWjAzMTEwLwYDVQQD
EygzZjllYzIzNTY0ZjU2OGMwYjk1MmZhYmFlNGRkMGNlNWMxODBjOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg/8GKMrpPPIJV1b+zCTZDSRe1jl
Knuvf+buv+Do49QI/xZgrKmleOOcaJ1Um4vjk1+V9jrTk2+4509LweFqW6OB4yQC
SDBzTff/KSkI/3uRZUnrDr0Bw44Kw6halvaBZH+zZ2d/Jz6UedfuFPS0l0CxuSqO
YdT8U4I1MfZ15l82YpwJ89LmvysQo/Vm18KT7nlvl8TTK/Ivvvy+vp/KzPmV6wXB
OGoSwBJoQoVdPSa6y5W3NG/Z2H41mqfdiLTreYATLCX4o6cR+8EoBz3CoVTlFe3k
C+y49+ToUnys2/atdjyB1abkzDUVAmi5eU1oDpWFwaiALBKuPAwxPRxldwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+ewjVk9WjAuVL6uuTdDOXBgMlqMB8GA1UdIwQY
MBaAFKQI/JJGBCdREQ0uxQZdDEfR1DzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNTk3YzUtM2VjNC00YjQ2LThjN2It
ZDkyMjQ4YWFiZTJkLzEvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hNTk3YzUtM2VjNC00YjQ2LThjN2ItZDkyMjQ4YWFiZTJk
LzEvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA33JpzK6o
fyRxc4kUrHRQN+tgRO9h/oQJk4w1jdK1J4UvQJxatWEsvDSt5TBPN0MDPpe1fujM
RNoRWI75YVI2ey01D4eMEW6T6jW9MssZCHr1itvZyPddqjjwF6sn+a1XtqX1RLpw
t4HPgtiHTF1FxPEYiK8Esp1KkPiNjgipPF+AtLZFCj2vNi4ZrAF1+le3RXKjtmcW
47Sq5us6gbT2VgYjykeNjV3yxDieOTM4dt1NSXNu3scGld/nSrEksiZOGkFwKVG/
RZxwfiGX6m/QZLC2AXAXq6dCtbjg3SHdnCp12P+/w4Z4+kAnT9CchlOotLVh6Jke
Z/+2EHJQ6mO2IQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 16:02:05 2026 by rpki-client