Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
File: pPTBZVXW8DttbI0KjMvhrx6uxDo.mft (raw, json)
Hash identifier: HiNejLCB+82VhlwKU+GwAm8YvxYuTzWZoFs+A5jsUhs=
Subject key identifier: FF:B9:08:9C:4E:46:8A:36:79:C6:0A:DE:98:9D:58:B4:33:CD:0E:46
Authority key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
Certificate issuer: /CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Certificate serial: 01A178BA31B6EEFB3EA49173C23F9A763C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
Manifest number: 04A9
Signing time: Mon 26 Oct 2026 15:00:30 +0000
Manifest this update: Mon 26 Oct 2026 15:00:30 +0000
Manifest next update: Tue 27 Oct 2026 15:00:30 +0000
Files and hashes: 1: lha0ZmedDVL5ojeX6XufkbgdzDc.roa (hash: aql9eZoUUBsK6RGXxorryRAzls71w3x+Yu3C3M/JeMA=)
2: pPTBZVXW8DttbI0KjMvhrx6uxDo.crl (hash: tWBivzCJrgiFXO4ClpS/V4IaSnnQWR+Uv2C+VATfXjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:ba:31:b6:ee:fb:3e:a4:91:73:c2:3f:9a:76:3c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Validity
Not Before: Oct 26 15:00:30 2026 GMT
Not After : Oct 27 15:00:30 2026 GMT
Subject: CN=ffb9089c4e468a3679c60ade989d58b433cd0e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:25:d9:3c:18:40:05:68:69:00:58:3d:77:
45:6f:1b:31:b7:25:5e:db:60:4d:e5:df:15:98:4a:
e3:71:e9:d9:42:0c:79:2b:35:7a:fc:6e:99:22:89:
be:4c:3c:68:f9:9c:76:06:68:c8:98:5c:10:d7:ec:
df:d1:0a:02:b4:1c:36:9f:cf:cb:1c:20:e2:c5:f6:
9e:e5:d5:ed:f2:c3:17:92:35:12:10:82:07:5e:1c:
6b:59:20:95:d9:38:83:3d:d3:bd:b3:df:49:67:44:
18:f7:eb:b8:9e:56:f4:98:56:bc:75:89:7d:a7:c9:
b9:d0:d5:2e:6d:fd:4a:46:00:48:43:28:d6:de:be:
7e:d5:46:7b:db:e5:c1:2d:b9:ef:c8:62:4a:e5:59:
72:9b:df:39:e0:d7:97:f6:e4:13:05:58:fc:11:0f:
cf:72:01:89:25:53:2c:b5:2c:a6:90:7c:13:a8:53:
91:ce:84:b2:a2:34:89:00:e8:7b:1a:03:5a:1d:96:
86:41:fe:95:20:0e:22:01:28:7a:50:35:a3:cd:38:
3e:ad:b1:f8:7e:4b:c9:fe:d8:00:20:a5:54:4c:d5:
23:87:a9:e9:75:f9:23:f5:0d:48:39:26:ef:3d:5f:
9b:46:6d:bc:bd:b7:34:af:75:e9:d0:5a:85:f7:99:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:08:9C:4E:46:8A:36:79:C6:0A:DE:98:9D:58:B4:33:CD:0E:46
X509v3 Authority Key Identifier:
keyid:A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2f:cb:da:60:0f:c4:ab:b3:4d:20:3d:d4:c7:84:7a:16:35:
5a:d0:31:ae:d7:db:97:19:0a:6a:b5:a2:86:ff:e1:19:c6:26:
f5:33:f2:5a:49:00:16:97:b2:0a:33:a9:49:07:e4:19:d8:52:
22:81:16:b0:98:a5:6b:e0:6b:3e:54:05:dc:83:ec:54:30:ff:
0f:7a:e5:5b:59:32:5b:5d:51:41:b6:9c:c5:43:8d:ae:d9:f3:
5d:fb:9a:c4:ae:09:73:c1:d2:7c:65:83:a6:13:ed:93:20:05:
ca:bb:a3:eb:4b:10:40:32:f2:bd:e0:cf:49:9b:82:a8:e4:66:
4e:c6:ab:44:e1:af:e5:7b:13:d3:01:0f:ff:ca:7f:cc:b3:41:
0e:0e:af:4f:e6:0e:bf:eb:90:d6:b6:7c:8b:a3:16:18:12:70:
98:6a:24:a8:3e:82:dc:80:f5:ed:9e:d5:7f:b0:3e:df:fb:41:
3c:25:2a:da:b8:ab:18:10:e1:9d:a1:23:9b:ec:dd:4b:0c:af:
74:61:a6:02:70:dd:3e:31:5c:69:73:92:51:3b:98:99:e1:04:
41:99:84:63:62:ef:8a:a4:3e:8a:5a:32:d7:09:05:0f:8a:d3:
65:30:5d:24:a9:3b:5e:36:7a:c7:33:29:cc:21:ce:62:97:29:
09:a3:4b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:59:51 2026 by rpki-client