Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
File: pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft (raw, json)
Hash identifier: FFlVsqm4CLXCyIWbFymXYnajx6VhbFroEsael4gyasI=
Subject key identifier: DD:68:D0:79:5D:00:73:40:53:C5:73:47:F2:C6:78:03:5A:D8:18:14
Authority key identifier: A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA
Certificate issuer: /CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
Certificate serial: 01A0404E531E47672048528648C1E0DE28FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
Manifest number: 1A20
Signing time: Wed 26 Aug 2026 23:01:09 +0000
Manifest this update: Wed 26 Aug 2026 23:01:09 +0000
Manifest next update: Thu 27 Aug 2026 23:01:09 +0000
Files and hashes: 1: pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl (hash: TyCe9wNFHhZTD9wl/1wfp1O/rySEzp3t/VImu+hlQe8=)
2: vagnBvJ7GZHzOrybHsBa0u1gBGs.roa (hash: AHj1V+feefzLimbaTSC6tcBNqcISih6luVdAk+cmYzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:53:1e:47:67:20:48:52:86:48:c1:e0:de:28:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
Validity
Not Before: Aug 26 23:01:09 2026 GMT
Not After : Aug 27 23:01:09 2026 GMT
Subject: CN=dd68d0795d00734053c57347f2c678035ad81814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:4e:6c:a8:69:5b:f3:74:d2:f0:3d:74:d4:
d6:e6:4b:c4:7f:aa:c8:b9:af:c3:2d:8f:ab:76:cb:
ae:50:87:16:9f:2a:3c:d2:dd:d6:f1:72:47:10:0b:
65:a6:41:65:7e:14:3c:46:4a:96:9b:32:34:45:98:
6f:f9:8d:0d:e6:21:80:4b:b6:a8:92:d0:44:4a:0e:
dc:a0:3f:02:bd:92:c7:b9:0b:c1:dd:7a:84:37:40:
32:d1:9d:99:cf:e0:9c:bb:1b:13:c0:01:ae:5b:e3:
aa:aa:ba:cc:d5:e0:9c:f6:0b:44:19:66:c3:08:f4:
b1:90:7c:27:19:15:22:ce:2f:64:0e:67:58:05:57:
a3:a3:2e:56:c8:11:2d:ad:59:ce:66:a8:de:93:70:
3c:75:76:61:79:84:b0:ed:b5:05:c5:b3:c7:fd:fd:
ac:a9:c1:e5:6a:29:e5:fc:b1:aa:82:f7:27:79:0b:
20:61:60:f2:8b:df:8d:02:09:e8:84:04:b6:21:dc:
19:26:17:93:1a:4a:9d:22:aa:ab:98:97:17:25:19:
ec:5d:ae:34:a5:99:1d:d8:da:1a:fb:c8:01:40:3c:
6f:c7:bc:7d:9c:55:98:ab:21:b2:08:79:81:90:07:
57:fb:14:a8:34:5e:22:d1:09:91:1f:66:c4:78:4f:
a2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:68:D0:79:5D:00:73:40:53:C5:73:47:F2:C6:78:03:5A:D8:18:14
X509v3 Authority Key Identifier:
keyid:A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:73:e5:ba:45:27:0b:7d:7d:2b:28:37:2a:52:98:68:b7:45:
eb:e7:67:a5:a8:ce:2b:2c:33:68:ff:b7:70:3b:ed:d3:9a:de:
0e:d0:ca:17:13:49:ad:4f:44:be:38:08:e1:74:fb:a5:62:33:
80:07:c9:d6:33:0f:ca:71:fc:08:0b:0f:2f:14:2a:a2:10:ff:
4e:42:6c:bf:e8:d5:2d:ef:1f:92:88:0a:4b:1e:9b:1a:5b:76:
20:ca:90:9e:5b:9d:5c:d5:60:1d:9e:85:49:d3:8e:ba:db:45:
70:1d:81:5e:03:fc:ad:1c:f7:dd:0e:79:f7:dc:05:ff:5d:ed:
cc:7c:34:0a:ad:09:57:40:eb:df:ee:dc:4c:6f:d5:f1:db:7d:
42:c3:f3:c0:24:5f:a6:09:24:1a:e8:5e:61:ec:40:43:da:2b:
da:46:fe:82:66:79:e6:1f:71:46:e7:1b:c1:24:1b:8e:64:6d:
01:5f:63:23:91:0a:3e:c1:94:e0:ce:1d:f8:2f:b5:b8:c5:76:
3c:35:ce:c4:f5:b3:69:f0:09:f4:5d:99:45:d4:11:81:42:ba:
93:29:b1:0c:61:e5:29:f6:d9:0a:86:b7:b5:95:7a:c7:49:57:
2d:76:54:40:a4:49:6e:8a:30:f2:76:7f:40:d7:ef:87:eb:12:
7a:ec:11:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:44:46 2026 by rpki-client