Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: QR2d4fsmjBktWzcARH6c2rqXesSH1LdNUzbHWb+PUrM=
Subject key identifier: 44:3E:55:86:E0:99:FA:07:DA:FC:B1:06:05:D3:43:82:EC:AF:08:56
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 01A08AFAA0B68436A813FA935D040FDF2410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0EA9
Signing time: Thu 10 Sep 2026 11:01:15 +0000
Manifest this update: Thu 10 Sep 2026 11:01:15 +0000
Manifest next update: Fri 11 Sep 2026 11:01:15 +0000
Files and hashes: 1: UycNDBh6XIKJ82eOMM9nsWm3RUU.roa (hash: j5CuV0Ecvfd3t9K7/xrfKK4OIBdyHHKPYNpzUJ5l9jc=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: 62ELvvC1XKIETkKey66Ve7NM8Ps/EPjUlpfyckk33ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:a0:b6:84:36:a8:13:fa:93:5d:04:0f:df:24:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Sep 10 11:01:15 2026 GMT
Not After : Sep 11 11:01:15 2026 GMT
Subject: CN=443e5586e099fa07dafcb10605d34382ecaf0856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:13:fe:a8:57:bc:bd:62:e0:af:c8:52:54:
63:a4:6d:56:59:fe:84:50:48:ab:15:85:8b:d1:74:
d1:60:fd:b4:a6:72:4c:a1:de:74:d1:92:7b:9c:40:
14:fb:e2:16:89:09:9f:c8:f8:fa:5a:56:bc:68:43:
00:04:86:3e:44:82:6a:da:db:4b:94:fc:a3:45:d3:
ed:18:f5:ec:64:49:3b:7e:66:ac:f5:b6:65:e1:11:
d3:24:0c:7d:28:17:f9:13:1e:12:57:c7:e8:9c:12:
97:79:92:28:e1:a4:96:94:2c:cf:47:db:46:57:f9:
c1:8d:ce:09:35:d8:bc:e2:fe:db:27:74:1e:2a:28:
61:c3:1b:b4:3b:80:89:98:87:c7:31:ea:f1:3c:6b:
20:58:ae:0f:ea:6f:7c:be:75:6a:2c:bd:7b:19:f5:
5c:e6:2e:5a:d6:8e:39:4b:f0:e2:47:41:11:ec:2d:
d6:c8:a0:91:51:4d:81:6c:ff:ec:32:84:96:70:a8:
0d:36:c9:10:4f:32:de:90:e2:be:5c:b6:28:c3:50:
3c:89:6c:fc:36:fd:24:76:6c:81:6f:ac:08:ed:fb:
e5:44:31:9c:ea:0e:e7:5a:29:fd:0e:df:26:26:26:
ce:a6:94:14:b5:62:59:60:d5:da:13:e0:98:7b:cc:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3E:55:86:E0:99:FA:07:DA:FC:B1:06:05:D3:43:82:EC:AF:08:56
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9c:51:d6:05:7f:82:25:5b:ce:fc:b5:81:eb:27:74:1a:e0:
03:38:37:b0:f9:13:fa:ac:a0:f9:86:92:09:69:c1:4d:1a:b0:
4f:45:07:9c:44:84:47:db:ab:3e:f4:09:aa:94:6e:26:9d:9a:
09:e1:0d:50:9a:7e:d2:08:e9:dd:c3:d7:f9:af:81:46:51:db:
ff:da:7b:c6:ba:71:b0:8f:22:18:df:40:de:84:c6:ad:4d:26:
c8:3e:c2:fc:cc:a0:92:d3:da:60:50:a1:a6:a4:3b:67:a7:d6:
4f:a7:45:30:9b:9e:06:5c:03:88:91:9b:e7:08:d9:2f:9b:e0:
9e:dd:6b:7f:c1:2c:10:0a:29:37:fc:05:af:2c:03:b2:94:3a:
7f:66:9a:a0:1a:d5:2b:40:1e:39:eb:60:18:95:e4:29:fc:0b:
30:3e:5a:fd:18:9a:1f:0b:4c:fb:5f:17:aa:bb:39:a1:a7:06:
70:77:17:be:e4:ce:9e:bc:19:a1:fb:92:48:88:2b:be:41:f2:
3d:23:d2:31:df:03:e7:ed:56:8f:5f:7c:6f:0e:fe:0a:de:cb:
06:06:c6:68:34:c8:ea:d9:fd:f4:44:c1:0d:11:da:a2:98:a0:
82:4c:bc:32:7a:5d:de:bf:af:99:2f:a4:b2:6a:e0:14:59:ff:
29:06:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:21:12 2026 by rpki-client