Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json)
Hash identifier: MBUAxKSnQHonY7F7sbPOrWSXrKFIJyuRZ5bKnl1M4RY=
Subject key identifier: A1:CA:98:57:DF:C7:59:FB:3A:15:F6:A9:03:B8:56:C1:96:97:00:E3
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial: 01A12AD63D4A7C1A3A363A83D6EF198B945E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
Manifest number: 072E
Signing time: Sun 11 Oct 2026 12:00:45 +0000
Manifest this update: Sun 11 Oct 2026 12:00:45 +0000
Manifest next update: Mon 12 Oct 2026 12:00:45 +0000
Files and hashes: 1: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: bQWmL9wpxBQnpAVbCKEGO580lnAPElZI5pbowXnL19U=)
2: t83QwmnsF94N1e2quVeWFqxv3Q4.roa (hash: S00r80MkvAcmYicBdHFKql/0j/7ix5B+Lwxl0Q6uMXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:3d:4a:7c:1a:3a:36:3a:83:d6:ef:19:8b:94:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Validity
Not Before: Oct 11 12:00:45 2026 GMT
Not After : Oct 12 12:00:45 2026 GMT
Subject: CN=a1ca9857dfc759fb3a15f6a903b856c1969700e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:e6:b4:2e:73:e2:cb:0e:a9:5a:87:c4:5e:
04:3f:3b:1f:7c:f5:c6:f0:ca:d5:29:5b:dd:c5:49:
4f:69:ab:00:37:cf:8f:83:0f:ca:45:83:f1:1a:15:
0f:e5:51:ee:a9:0b:22:b9:26:5c:af:2c:b2:f6:a8:
53:c7:2d:07:a9:15:c4:ab:21:75:8c:56:c7:79:51:
80:7c:42:a1:a5:b2:32:be:e2:24:37:1a:c4:97:82:
59:12:99:b1:30:22:24:e1:16:8c:be:6a:fc:e5:8b:
5d:40:f6:da:75:18:66:9d:90:26:bd:45:68:32:90:
b5:f5:ff:1c:83:80:24:85:f0:0b:a7:93:16:27:90:
a0:35:79:b0:02:4b:e1:f4:55:f7:db:26:2c:a5:3c:
9a:62:ff:22:38:12:c3:33:66:a7:6e:95:8c:7d:b3:
5b:97:19:b7:4f:c4:11:ad:17:ee:d7:53:a8:65:1a:
e0:11:05:fd:58:4c:b5:ef:3f:83:b1:d6:df:34:27:
ee:df:1a:73:c3:ec:cc:6e:b4:7f:8e:08:a6:a6:73:
04:88:4f:9c:0a:95:b3:8d:b0:fe:e1:f3:b1:62:d8:
a4:d0:7a:f6:8d:3f:a5:30:e1:ba:19:0d:10:d2:58:
2a:1c:d3:47:ad:fd:79:1a:a2:31:04:06:21:22:d1:
e3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CA:98:57:DF:C7:59:FB:3A:15:F6:A9:03:B8:56:C1:96:97:00:E3
X509v3 Authority Key Identifier:
keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a7:b0:6c:8b:a9:47:40:e3:62:98:93:f5:3e:61:a7:40:59:
36:82:a2:41:86:4f:69:07:cc:a6:7d:29:7c:f8:2d:4f:ff:0d:
e5:74:c1:3f:dc:a7:3a:ae:49:96:e2:94:fd:bd:3a:6f:bd:6b:
48:78:7f:6b:e4:f3:c6:3d:85:2e:b6:70:b2:ee:46:16:18:fd:
be:f2:80:e4:99:fe:f6:d0:53:c5:e7:29:dd:14:05:ff:b8:57:
76:39:34:12:45:cf:d0:ed:fc:bd:ee:b3:6b:f7:2d:44:d2:6c:
c8:cb:f9:a6:d8:72:a5:2c:9d:a8:e6:8c:9c:96:6b:d3:f4:ba:
8e:9a:99:69:75:0d:32:ff:98:1f:58:99:b8:1d:0c:4c:72:1d:
10:28:3e:c0:c7:95:c5:1a:6d:2e:4b:dc:bf:12:27:97:2e:11:
17:59:e3:b2:43:38:2f:17:92:a7:db:87:b6:fb:ea:9d:3f:44:
1f:27:68:b8:e9:59:dc:57:7d:dd:11:f5:da:06:b6:ab:8a:b9:
b8:c9:e3:10:78:68:82:a2:07:d9:3d:fe:2e:0f:bc:48:ec:61:
94:65:4c:fa:20:cc:40:af:46:2d:95:ac:38:d5:f8:6f:c3:e1:
67:03:e9:85:56:62:2b:e4:43:2a:25:c2:2d:f8:7d:49:96:35:
4b:f6:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:32:57 2026 by rpki-client