Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier: mljluh5Xag+w/Omdvb0y3WaraKZsjCwPOvvfVtENoJc=
Subject key identifier: 36:F1:21:11:0D:63:7C:5E:A9:C8:79:C7:80:00:67:D1:80:5A:E0:A8
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 01A17C97CE7586F233E405D10B7E3BEB8C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 09:01:25 +0000
Manifest this update: Tue 27 Oct 2026 09:01:25 +0000
Manifest next update: Wed 28 Oct 2026 09:01:25 +0000
Files and hashes: 1: 5Gr2q7ZQUry_6juJo6TbPmIZ_GI.roa (hash: CLid1uYJD/tWmQGqtEiBJvjm9/bPdenK+e3VYv871Vk=)
2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: aAoeq1mLI7W9JrvqhtPGw9uU0YddAX7xLxJIIRW5zeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:ce:75:86:f2:33:e4:05:d1:0b:7e:3b:eb:8c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: Oct 27 09:01:25 2026 GMT
Not After : Oct 28 09:01:25 2026 GMT
Subject: CN=36f121110d637c5ea9c879c7800067d1805ae0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:93:1f:a5:18:f0:6b:4e:3d:a5:01:04:40:
a8:db:28:f9:94:69:f7:0c:d4:d2:08:8e:e6:c0:d7:
f1:04:57:2d:f8:51:a8:32:78:47:e9:9c:82:6c:ef:
55:29:e7:70:76:33:fa:3e:3b:eb:48:89:47:1f:dc:
60:94:49:ae:f9:a3:c8:f1:85:a3:ee:09:8d:c0:bb:
89:a1:43:62:60:47:cf:f3:56:fd:e8:77:2b:27:c4:
48:1d:5a:66:3e:4f:21:4e:cc:2b:34:67:87:a7:ba:
ce:f0:98:c5:a1:57:16:e6:b7:3d:d7:fa:ed:9c:0b:
fa:98:c6:ad:50:f5:98:8f:5a:63:bc:12:39:d1:4a:
9e:81:20:e0:d0:da:42:7e:d5:8e:b4:07:80:92:be:
58:1c:0e:9d:d3:58:71:2c:c8:14:de:c9:f3:a5:04:
89:8c:70:91:ce:b5:b7:37:2e:dd:b7:8b:cb:3f:63:
e5:71:9d:a5:4e:61:8e:36:9b:31:4b:aa:87:c9:5e:
3b:de:56:67:95:97:fa:d2:99:e9:0a:bc:bd:52:ce:
f9:b0:9c:7f:47:d4:69:40:6f:df:80:53:e3:ff:9c:
c5:e7:8b:3b:8e:58:c2:51:04:e6:f4:84:27:32:fd:
d4:6a:79:ce:31:23:f5:ee:e8:33:a5:48:11:62:fe:
0a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F1:21:11:0D:63:7C:5E:A9:C8:79:C7:80:00:67:D1:80:5A:E0:A8
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0b:62:a3:86:e8:0d:de:4e:f9:14:6e:0e:cd:ce:4b:d0:79:
ef:c4:00:a2:42:0f:de:1f:5c:1a:43:cc:50:3b:73:bc:16:bc:
ce:85:81:0a:3d:8e:59:10:89:11:ee:a6:f3:75:9f:6e:0e:49:
b8:13:4b:cb:8e:45:0f:43:3f:40:22:b1:fe:58:04:02:7b:f6:
fa:02:a7:57:12:da:f9:b3:a2:e0:e5:cf:06:8c:9b:ca:a0:e1:
9f:12:44:2e:20:49:df:d2:5b:0b:aa:cb:58:da:3a:40:73:b9:
19:10:5e:14:ad:97:4c:29:ff:c6:90:df:7f:4d:30:76:ae:90:
dc:e4:04:fe:50:71:c2:bb:26:35:0d:7c:0e:68:cb:1d:4d:18:
02:05:c9:9a:56:32:c5:6c:6a:d5:16:79:0f:85:36:d4:c2:9f:
e1:da:5d:dc:b5:cb:da:fa:84:f9:4a:91:17:7c:27:d9:0a:b3:
5e:1c:58:0d:4e:7e:78:bd:cc:d2:c7:af:c9:42:72:47:9d:41:
2e:6b:19:c9:7e:1f:82:4c:bf:7d:cd:17:26:dc:10:a7:57:79:
f7:5b:92:65:da:c7:78:40:fc:02:22:91:b0:d6:66:a0:42:20:
ff:af:c7:d4:94:ab:5c:23:5a:fe:f5:63:c0:88:1d:64:e8:0c:
0b:6e:4c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:36:01 2026 by rpki-client