Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File: pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier: qwgF/5AWNmg2C2yyrdcZ63PPrNEIhuR8uB8bhMlrFhw=
Subject key identifier: 91:78:20:A6:DA:3C:10:57:4D:CF:33:C7:B8:E2:85:4F:A9:0D:75:68
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer: /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial: 01A03BCC91036B151604D660F15E75ED307B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number: 1A1F
Signing time: Wed 26 Aug 2026 02:00:57 +0000
Manifest this update: Wed 26 Aug 2026 02:00:57 +0000
Manifest next update: Thu 27 Aug 2026 02:00:57 +0000
Files and hashes: 1: 08erSysabwz5oeBdP8PLy755AHA.asa (hash: RIOLOsPK24oYYh42JNS8I14+Rr+oEV6iLUu+Usr4/PY=)
2: Ug2vF1vgPHmEqRhi6uOzDzFa8k4.roa (hash: J3X4+yL+W+OJhZWrAFHs4AhqGxikLkSzill4Qp4q87Q=)
3: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: CkBTSswy97jy2bOcVWMoKqvOu0nIVJC3v4A6tSSPwM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:cc:91:03:6b:15:16:04:d6:60:f1:5e:75:ed:30:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
Validity
Not Before: Aug 26 02:00:57 2026 GMT
Not After : Aug 27 02:00:57 2026 GMT
Subject: CN=917820a6da3c10574dcf33c7b8e2854fa90d7568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:e6:f4:3c:2c:73:f1:b5:9f:b1:e8:ad:a4:
96:cb:d3:0a:fc:b8:e4:26:a8:29:dd:b8:55:ea:e2:
60:8b:3e:9b:ba:76:c0:4a:0a:b2:7e:3e:85:28:84:
9a:49:b7:f8:99:a5:8d:e6:e7:10:4c:a7:6f:a0:11:
4b:09:24:57:f4:38:21:68:e7:9d:fa:7b:8d:3c:dd:
44:68:26:57:22:82:b7:c7:8c:ad:88:60:9c:40:17:
f6:68:6a:61:f4:36:6d:b6:e0:b8:ff:64:61:b7:15:
c7:7d:bb:f7:cf:36:88:83:99:d7:41:4a:31:7a:0d:
58:6a:c7:9f:18:d9:bc:ca:d4:e5:bd:ca:85:e5:cb:
ca:fb:77:66:6d:e5:2b:2a:63:b3:89:0f:7e:56:81:
fc:c2:50:7d:54:4a:fd:7f:fb:4f:d6:60:74:87:36:
bd:22:e4:04:62:17:33:e0:b3:51:40:88:db:e9:83:
18:05:f6:a2:98:5f:7a:85:c8:85:63:87:a9:2f:4a:
16:f9:4d:c5:2a:48:33:7f:66:82:b4:f4:4e:9a:4e:
ae:e0:21:0c:51:32:1b:78:b7:7c:15:a6:44:a5:c4:
78:72:67:1d:18:09:21:3a:01:f1:2d:f9:31:e5:b2:
76:8f:1f:ad:20:5a:5f:21:26:81:1e:9a:e0:ab:00:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:78:20:A6:DA:3C:10:57:4D:CF:33:C7:B8:E2:85:4F:A9:0D:75:68
X509v3 Authority Key Identifier:
keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:89:e4:f1:d9:d8:97:ea:e3:b9:f8:32:b2:e0:7e:37:46:ec:
0f:b6:a8:2f:6b:e4:6f:a1:32:8e:a1:aa:3d:b1:f3:58:bc:18:
26:dc:42:b3:8f:8b:34:ac:bf:e3:49:97:1c:44:ea:19:80:8e:
59:a9:48:a8:ab:1f:84:80:e4:14:bd:0f:a1:03:c8:15:e1:25:
a2:7e:23:0c:cf:3d:97:8b:b9:d2:66:37:4e:dd:30:7d:20:09:
cb:b6:fe:4a:db:8a:23:5f:74:f3:2e:53:1f:2e:b4:06:ef:4f:
bf:22:c9:7c:db:5b:97:d1:49:11:90:07:fa:af:7b:a6:71:e8:
01:27:d4:de:0d:da:1c:e6:44:c7:b0:2b:0d:2a:bb:75:b7:a5:
05:a3:2c:a6:94:b3:fb:96:a4:de:f4:77:71:da:f3:ce:3a:7b:
4e:62:51:5f:55:c7:82:70:85:f0:f6:23:23:17:15:d9:b2:10:
41:a4:12:db:49:89:dc:fa:c5:81:4d:87:c4:bd:80:e2:e1:00:
93:f6:f7:fa:33:0a:72:00:bf:7b:f8:92:d1:88:d5:da:52:05:
34:5a:c1:6d:d7:b3:52:a4:20:cd:05:e0:78:44:2d:98:5a:27:
74:f8:82:57:94:06:a4:7e:6b:9c:ee:92:15:a9:87:45:7f:87:
9a:7d:6f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 05:46:07 2026 by rpki-client