Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier: WTeCA3mml06Ckbc9PCnizmjst1GwccuaZvLS1Fo4KTI=
Subject key identifier: 89:6E:D0:15:94:05:9C:47:42:41:07:B0:8B:A0:58:42:73:F2:AF:33
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 01A004028EFDA426D2E1FB09DF5BCB6B4504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number: 1A03
Signing time: Sat 15 Aug 2026 06:01:11 +0000
Manifest this update: Sat 15 Aug 2026 06:01:11 +0000
Manifest next update: Sun 16 Aug 2026 06:01:11 +0000
Files and hashes: 1: 5Gr2q7ZQUry_6juJo6TbPmIZ_GI.roa (hash: CLid1uYJD/tWmQGqtEiBJvjm9/bPdenK+e3VYv871Vk=)
2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: HEyG+pIqGslQxyTrTdhKfzFGBC/vcO6tLej6j13vBGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:8e:fd:a4:26:d2:e1:fb:09:df:5b:cb:6b:45:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: Aug 15 06:01:11 2026 GMT
Not After : Aug 16 06:01:11 2026 GMT
Subject: CN=896ed01594059c47424107b08ba0584273f2af33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:74:31:db:d8:29:72:29:5a:f2:ac:87:e9:
ef:92:a6:f5:51:60:8a:17:85:53:cf:95:4c:d2:0e:
5a:f6:40:57:41:81:9c:f6:6d:e7:50:a2:50:28:2c:
b8:b3:45:d1:39:5c:dc:34:42:44:ea:93:79:8b:c6:
35:de:fd:49:e6:d2:fa:79:17:d1:c6:a3:8d:a1:38:
7f:44:9a:53:7e:8c:ff:b2:d3:b7:42:2a:48:94:88:
49:11:a5:33:d9:2e:e3:d5:23:3d:f4:61:e1:ea:71:
62:dd:cb:01:b3:20:7a:ad:aa:9a:8e:b8:f7:9b:bf:
5a:ab:b7:6f:33:34:e9:fe:22:86:59:c7:d3:92:f5:
c0:13:33:91:90:53:c6:43:a5:31:44:d0:ad:d5:4b:
c8:96:8a:ca:85:17:d9:c2:6b:a0:de:70:43:6b:3c:
a4:97:88:18:56:9b:8b:a7:3b:66:a4:0c:54:5c:a1:
2a:58:00:16:26:93:b3:86:77:94:4c:63:71:20:b4:
55:29:c2:40:21:cd:85:be:69:24:83:e8:95:c7:47:
77:bf:58:29:a0:ed:e8:ba:4a:15:b3:07:1e:2f:c9:
27:9b:54:17:11:55:3e:27:ef:d0:b5:5b:d4:73:b2:
53:a2:35:40:f0:29:12:0a:4a:ec:60:70:7e:0c:54:
1d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6E:D0:15:94:05:9C:47:42:41:07:B0:8B:A0:58:42:73:F2:AF:33
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e3:48:10:3f:15:19:a5:22:64:01:5c:89:ab:51:20:2f:25:
48:37:dd:91:d8:a1:34:e4:15:8b:bb:28:ef:49:9c:17:5d:6e:
5b:f9:1d:d8:c6:0c:eb:c7:b7:1e:82:4b:df:30:14:86:79:ea:
23:c2:33:95:2b:e4:57:93:86:91:1e:38:98:4e:4e:45:a3:28:
db:4b:ad:f5:95:3e:f0:61:14:40:d4:5c:5f:e2:85:c7:48:90:
e0:11:fd:07:0e:f2:05:15:84:3f:9b:60:da:a8:7f:42:0c:96:
94:2c:2c:cd:9d:5a:e5:95:6f:aa:35:62:27:ae:96:20:a8:64:
37:53:fd:ae:61:9b:8d:9b:be:29:6a:cb:7f:b5:07:5a:d2:7d:
01:a6:a6:61:e0:4f:ad:88:1a:23:47:a4:95:65:83:2e:3d:59:
6f:b0:70:3a:06:c4:3e:65:a8:9c:58:b3:e8:9d:3b:b8:41:5f:
ea:27:d6:75:49:2d:4d:5c:e7:1d:8b:4c:94:a0:b5:ee:9a:e6:
c8:22:99:e6:22:ed:71:a2:97:c3:00:7a:ce:a2:80:e3:f8:ed:
e4:3d:cf:e3:63:79:91:81:5e:65:35:7c:1d:41:2f:da:6c:d0:
35:23:2c:15:da:23:85:f4:17:2c:08:0b:1f:b7:67:fa:1d:d0:
a2:64:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:08:10 2026 by rpki-client