Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: kHsfUKa5Faz5q3LqURggOmDw3kGFeDbVz8UzZrgEoyM=
Subject key identifier: DD:83:71:E1:99:F1:25:68:F5:37:F6:53:60:69:82:60:54:1A:57:AB
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 01A1803DC0D0585FC0B1C77C0C79F33CA97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0F28
Signing time: Wed 28 Oct 2026 02:01:32 +0000
Manifest this update: Wed 28 Oct 2026 02:01:32 +0000
Manifest next update: Thu 29 Oct 2026 02:01:32 +0000
Files and hashes: 1: UycNDBh6XIKJ82eOMM9nsWm3RUU.roa (hash: j5CuV0Ecvfd3t9K7/xrfKK4OIBdyHHKPYNpzUJ5l9jc=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: 3NFRl6WWItgx/+VUpUhe3U0mR+YOAcb10I/QM64Wx/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:c0:d0:58:5f:c0:b1:c7:7c:0c:79:f3:3c:a9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Oct 28 02:01:32 2026 GMT
Not After : Oct 29 02:01:32 2026 GMT
Subject: CN=dd8371e199f12568f537f65360698260541a57ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:08:03:6b:cb:d2:94:db:02:5c:00:46:4c:
ee:9e:94:c6:9d:6c:67:51:c5:2b:b4:38:33:b5:fe:
b7:83:0e:22:dc:b1:69:94:b8:b1:a4:41:05:56:6b:
6f:3d:b6:5d:fa:c0:2d:f3:f4:34:70:fb:da:13:2d:
f4:d5:3b:77:84:59:a6:ad:ac:04:20:af:ff:88:aa:
4c:4b:9e:68:54:93:83:54:89:cf:08:b2:a5:38:e2:
be:5a:2f:87:63:30:7a:7a:09:81:ad:d5:d7:fd:ed:
7e:78:9d:16:08:a8:4c:80:ef:ff:be:cb:e8:a2:ac:
72:8f:01:eb:21:9f:ce:8c:11:e7:39:d3:45:36:33:
b4:b4:b9:25:4e:82:94:58:03:da:3b:a4:6c:a9:a5:
de:35:18:13:b2:bc:7f:37:84:4a:a1:f8:a1:59:4d:
71:c4:dc:81:26:b6:bb:fc:fe:0b:ee:fc:45:96:73:
3d:d7:18:f5:fe:02:69:60:a8:d4:f6:61:46:08:4e:
16:bc:9b:d4:78:f4:a7:ce:a0:55:98:16:bd:8a:81:
dd:76:4d:96:ca:51:62:c0:33:c4:c2:f6:11:95:ad:
5e:68:7b:b7:82:5b:c7:0b:22:92:76:dd:77:02:a1:
ec:c3:60:e8:a5:ce:63:5e:b9:b5:8a:be:77:ed:48:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:83:71:E1:99:F1:25:68:F5:37:F6:53:60:69:82:60:54:1A:57:AB
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:45:f7:d9:90:e1:17:f3:15:74:49:fb:26:9c:96:3b:e4:12:
a2:12:18:16:a5:39:82:41:4b:47:4d:72:43:5f:8b:86:60:59:
94:9d:c6:3a:53:6c:98:00:2c:6b:c2:50:1f:35:ad:12:c2:d4:
23:ab:65:f1:85:f2:aa:cb:1b:02:09:09:a1:82:50:d8:bc:62:
98:58:78:85:04:66:f3:d0:02:47:ff:2d:da:95:5f:18:25:af:
c6:50:b0:72:2d:1e:40:7e:96:41:e7:27:be:08:8e:b8:d0:1c:
89:0e:a6:70:3e:88:b0:db:d7:3c:b6:44:06:2e:54:fc:3a:73:
c6:2b:22:4b:0a:c2:e6:72:77:55:dd:18:93:10:48:13:21:85:
2a:45:80:18:0e:c4:8d:ae:a8:50:7d:da:41:f8:ed:97:97:ff:
05:d0:cc:b4:b0:f3:29:d5:a2:9e:77:fe:d4:72:46:ce:c9:9f:
44:89:bd:65:de:bd:ec:d8:f5:b3:a0:fa:9d:7c:53:11:8f:b2:
71:85:3d:d0:37:60:33:7e:af:5a:1a:75:a4:68:a5:e6:b4:f4:
0b:e5:80:78:7f:cd:2e:9b:f7:e1:b5:2d:2a:b6:68:df:51:05:
e2:1b:c8:c1:76:ef:20:50:48:e6:a0:8c:3a:d5:83:ab:23:8e:
40:64:32:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:24:42 2026 by rpki-client