Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier: HBoMYBF6CAf9IdlKnXua/be990BPBepyCsjDIanBIaA=
Subject key identifier: 66:8B:78:53:91:ED:2D:05:2F:91:B2:A0:F7:77:6C:B9:60:C3:F3:A7
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 01A102115F5424B614269CD6EE4EF9B01EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 14:00:55 +0000
Manifest this update: Sat 03 Oct 2026 14:00:55 +0000
Manifest next update: Sun 04 Oct 2026 14:00:55 +0000
Files and hashes: 1: ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa (hash: 9yOiqGJYeL5bi8PHF9fNeVVcmhOJdy6bDsiWR0m6Ve0=)
2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: ggijxqF4GyAAt28GQ5l1wp1R4jNzNBqhc3qZT7Gx/JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:11:5f:54:24:b6:14:26:9c:d6:ee:4e:f9:b0:1e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: Oct 3 14:00:55 2026 GMT
Not After : Oct 4 14:00:55 2026 GMT
Subject: CN=668b785391ed2d052f91b2a0f7776cb960c3f3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a7:3c:43:08:9f:a7:36:b5:71:06:45:42:d0:
32:bb:23:31:c4:ae:8c:48:75:da:80:67:2c:8d:a6:
fd:16:2d:e3:f5:c9:00:f5:51:c8:b5:0f:2a:15:83:
38:84:1d:c8:e9:f8:fc:4b:a4:55:56:66:3b:ee:12:
32:a0:3d:67:1f:d3:4a:71:c2:f3:3a:9d:60:1a:9e:
aa:4b:ec:37:4f:c6:a4:38:d1:05:26:54:92:6b:50:
ff:35:94:0b:d8:34:33:fa:40:74:d5:61:9a:57:12:
c7:24:40:33:40:1e:b3:d2:6d:36:c2:50:e5:c7:d3:
94:83:61:ce:b5:57:2d:45:05:f9:44:b2:3f:f2:57:
5a:75:b4:65:38:27:c7:d6:86:c9:06:df:e9:9b:70:
77:81:50:cf:7a:0c:4f:2c:58:df:bb:00:a9:03:57:
9a:da:47:d3:1c:b8:92:a8:b2:bc:83:ff:92:88:e2:
17:27:34:c0:d2:a1:eb:31:e2:ab:8e:64:56:f3:e5:
7b:8f:0a:77:f0:64:ee:e7:c9:de:cd:72:a2:08:d8:
fa:34:dc:90:58:6c:94:92:6e:ee:61:d4:b7:25:4e:
8c:b6:03:a4:23:15:64:1c:f8:4a:5c:7b:ed:3d:10:
fb:d5:eb:d7:68:1b:e2:b3:b3:cd:4f:67:4a:e5:04:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8B:78:53:91:ED:2D:05:2F:91:B2:A0:F7:77:6C:B9:60:C3:F3:A7
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1c:e1:2e:b0:1d:34:84:78:a0:42:67:fd:ed:fa:a9:9b:e1:
c8:7c:0c:92:e9:8d:d2:eb:5b:2f:5c:a7:db:cc:66:7b:2e:b9:
b6:ec:94:ec:8b:b9:c7:25:31:ef:fb:33:b4:39:33:0a:96:10:
17:a6:72:a7:44:c2:42:28:36:64:bc:36:f3:1d:26:34:17:9e:
e0:91:be:3e:fe:91:c9:5e:bb:db:0f:c3:12:f7:bd:bc:65:81:
b8:85:dc:6f:97:67:90:30:21:b0:1d:22:fb:45:bc:53:b4:ed:
ed:28:95:e5:d3:60:e1:96:96:10:09:23:aa:7b:30:7b:16:28:
ee:e0:f5:01:a4:b1:85:64:17:af:0f:1e:d5:96:31:50:b1:54:
46:e7:36:7f:b4:aa:06:78:c0:66:ff:c8:a0:be:ce:6b:66:67:
0c:04:fd:8c:ef:31:0c:79:2b:18:8d:d7:53:e1:37:1f:a8:10:
8c:98:9b:8e:a6:89:a1:34:f4:39:e5:9b:13:33:67:04:98:3b:
fd:b9:ac:69:2a:39:03:05:a3:ee:d7:94:47:a3:cf:d1:a7:fc:
4a:9d:87:98:75:92:16:f0:18:fa:86:85:9c:72:73:24:1a:ef:
e8:66:da:ba:01:a3:44:2f:b7:69:6c:2b:41:e6:8f:9c:16:59:
2b:e9:8b:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECEV9UJLYUJpzW7k75sB69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjUyM2Q5NDgzODdkOGM1ZmNkZjc1MmUwYTFjYzQwOGNm
ZTgzOTUwHhcNMjYxMDAzMTQwMDU1WhcNMjYxMDA0MTQwMDU1WjAzMTEwLwYDVQQD
Eyg2NjhiNzg1MzkxZWQyZDA1MmY5MWIyYTBmNzc3NmNiOTYwYzNmM2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26c8Qwifpza1cQZFQtAyuyMxxK6M
SHXagGcsjab9Fi3j9ckA9VHItQ8qFYM4hB3I6fj8S6RVVmY77hIyoD1nH9NKccLz
Op1gGp6qS+w3T8akONEFJlSSa1D/NZQL2DQz+kB01WGaVxLHJEAzQB6z0m02wlDl
x9OUg2HOtVctRQX5RLI/8ldadbRlOCfH1obJBt/pm3B3gVDPegxPLFjfuwCpA1ea
2kfTHLiSqLK8g/+SiOIXJzTA0qHrMeKrjmRW8+V7jwp38GTu58nezXKiCNj6NNyQ
WGyUkm7uYdS3JU6MtgOkIxVkHPhKXHvtPRD71evXaBvis7PNT2dK5QTNdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaLeFOR7S0FL5GyoPd3bLlgw/OnMB8GA1UdIwQY
MBaAFKT1I9lIOH2MX833UuChzECM/oOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEt
MjBhOTAwYmM3NzZhLzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEtMjBhOTAwYmM3NzZh
LzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBzhLrAd
NIR4oEJn/e36qZvhyHwMkumN0utbL1yn28xmey65tuyU7Iu5xyUx7/sztDkzCpYQ
F6Zyp0TCQig2ZLw28x0mNBee4JG+Pv6RyV672w/DEve9vGWBuIXcb5dnkDAhsB0i
+0W8U7Tt7SiV5dNg4ZaWEAkjqnswexYo7uD1AaSxhWQXrw8e1ZYxULFURuc2f7Sq
BnjAZv/IoL7Oa2ZnDAT9jO8xDHkrGI3XU+E3H6gQjJibjqaJoTT0OeWbEzNnBJg7
/bmsaSo5AwWj7teUR6PP0af8Sp2HmHWSFvAY+oaFnHJzJBrv6GbaugGjRC+3aWwr
QeaPnBZZK+mLNA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:15:48 2026 by rpki-client