Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json)
Hash identifier: r558QlMYov8NZKqv93MvFXT2NECI1rGCkpvsbWsubYw=
Subject key identifier: 2D:04:BB:79:5D:A2:66:D1:A7:C0:B3:49:BD:F8:86:7A:C1:D1:88:E3
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial: 01A026200D2950416713635325DAB255B6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
Manifest number: 06A7
Signing time: Fri 21 Aug 2026 21:00:29 +0000
Manifest this update: Fri 21 Aug 2026 21:00:29 +0000
Manifest next update: Sat 22 Aug 2026 21:00:29 +0000
Files and hashes: 1: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: Mo6tcOmHnerc0MjnAZ21RKqCaaNkCY18XaT+FFoa77E=)
2: t83QwmnsF94N1e2quVeWFqxv3Q4.roa (hash: S00r80MkvAcmYicBdHFKql/0j/7ix5B+Lwxl0Q6uMXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:20:0d:29:50:41:67:13:63:53:25:da:b2:55:b6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Validity
Not Before: Aug 21 21:00:29 2026 GMT
Not After : Aug 22 21:00:29 2026 GMT
Subject: CN=2d04bb795da266d1a7c0b349bdf8867ac1d188e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:4d:7d:b8:ec:1a:49:a2:54:83:8e:58:bf:
3d:45:b9:50:4f:9d:58:17:a1:f7:7a:ee:af:69:d6:
4d:d6:02:26:14:b1:25:17:47:11:b7:ed:94:62:d1:
08:2c:81:ea:dc:c7:ae:19:c8:1a:0d:84:7e:29:6a:
9c:a7:cb:1a:01:a6:b6:c4:03:bb:05:76:b7:fc:99:
cc:e3:01:e4:fa:c3:ea:82:6e:f9:d3:69:0c:43:5c:
fe:b3:37:5e:56:30:98:09:ba:df:59:b3:0d:1d:1b:
91:e0:78:e0:28:13:27:fa:8a:00:b8:8d:c9:44:e6:
ce:bc:5d:b1:01:08:6b:ea:27:2d:bc:e7:b5:b2:f5:
d2:3c:ec:48:05:79:ec:fb:dd:33:e1:5b:fd:48:53:
01:92:3a:97:86:c7:86:00:8f:49:b3:d2:95:ec:9c:
5f:93:7e:5f:5c:65:26:fb:d0:a4:05:e7:7d:7c:d9:
db:37:d9:83:80:47:eb:cf:e3:96:f8:1f:16:31:76:
13:91:0c:42:57:7a:5c:20:8b:e4:6a:56:c3:44:64:
db:cd:69:1e:0c:68:f3:e8:41:71:76:54:1d:ec:a3:
52:ab:00:7d:e1:c7:7b:90:1a:f0:61:dd:7b:45:ea:
83:13:0c:5f:f8:14:69:ec:33:a3:06:c2:3c:42:d9:
5f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:04:BB:79:5D:A2:66:D1:A7:C0:B3:49:BD:F8:86:7A:C1:D1:88:E3
X509v3 Authority Key Identifier:
keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c5:f5:8c:a1:d3:c9:cd:b0:58:2e:11:1e:ce:1f:e5:44:bb:
75:3b:9b:ac:9a:54:30:a3:22:46:36:79:96:2d:9f:5c:0e:39:
b5:68:f0:51:47:cb:c5:50:37:99:ad:b5:3b:4a:ed:71:7f:f6:
4d:99:9d:03:df:b9:f1:25:5e:c6:a5:3a:2e:ec:1e:6e:92:70:
29:7a:fe:4b:4a:e9:0e:41:f6:f5:07:57:bd:8e:95:fc:9a:90:
6e:cf:f7:0b:db:8d:d0:de:16:d3:48:27:f5:48:47:2c:99:7e:
42:aa:05:77:0b:61:7f:ca:9e:6b:0b:21:b1:a9:dd:b4:ce:1e:
96:32:09:4d:de:6c:34:b0:2e:b8:71:8c:b1:a9:31:f8:5c:74:
95:92:98:b2:69:3f:57:bb:51:5b:21:99:9c:56:66:27:ec:ce:
a8:ed:1e:51:5a:d8:94:f8:0c:88:1f:80:7e:24:9e:c7:06:c6:
27:d7:f1:69:8f:be:f2:31:e9:ad:b2:7d:df:8c:eb:c3:0c:27:
42:86:5a:3f:7a:7d:43:af:ed:57:18:57:f8:67:51:4d:f7:92:
f7:ea:2c:73:4d:97:7e:62:23:b9:3e:bc:01:76:75:41:7a:87:
59:a1:9d:af:1e:53:a5:e1:e1:e4:26:57:64:36:4c:00:64:ae:
59:8b:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:33 2026 by rpki-client