Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: YtwnKOQrdeDADtQFbrA0X+hIOGWHmvlje1xVARCc8Ik=
Subject key identifier: 84:CF:0D:1F:C3:39:28:1D:2C:BE:48:EF:7E:ED:40:AC:6A:C4:6D:8D
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 019E20915197D29C2732F289EA41822E1E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 0B8A
Signing time: Wed 13 May 2026 09:00:54 +0000
Manifest this update: Wed 13 May 2026 09:00:54 +0000
Manifest next update: Thu 14 May 2026 09:00:54 +0000
Files and hashes: 1: 6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa (hash: wpsN0tsYTVD9eZ1wIkFPmbb5yPxiazJ0MhFoB9FJQW4=)
2: DR9MoQCYtXaLoml4Dm1_5qJwPs4.roa (hash: nXlN3VKxLNyqdBBXWDPV2SzM6R5K4D1KJpMD50qdg/A=)
3: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: vD7zL1bdku2AJbSfCxTrHfCrfQPLFfvooqbGUPUaJ4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:51:97:d2:9c:27:32:f2:89:ea:41:82:2e:1e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: May 13 09:00:54 2026 GMT
Not After : May 14 09:00:54 2026 GMT
Subject: CN=84cf0d1fc339281d2cbe48ef7eed40ac6ac46d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:ab:0c:e9:c0:de:9e:2f:7c:cb:86:09:09:
e3:69:6f:1e:df:0f:de:76:6a:38:a6:6f:46:88:98:
bd:4a:68:ac:d6:91:9f:0e:eb:dc:ba:48:96:8b:db:
f9:1e:6e:5d:72:21:d2:aa:0f:cf:d6:8b:42:3e:f5:
3f:6c:44:5f:fc:9a:8b:37:07:39:6b:b2:12:09:3e:
15:31:7d:b1:aa:ef:f3:6c:90:1e:8e:44:99:27:63:
c3:af:37:fb:47:27:42:ed:cb:cf:27:3c:be:d6:5e:
bf:b1:b2:39:07:61:c7:1f:da:49:9c:d4:e8:d0:01:
f7:1a:80:d2:5f:fe:b1:06:6d:4b:75:d3:09:a2:27:
21:1c:c8:be:ad:94:67:d0:3a:26:23:d6:43:cd:3b:
b5:fd:f9:f7:d7:6c:ed:ab:f2:cf:f9:96:4a:8c:49:
63:e2:8d:87:02:bd:d8:97:a8:07:ff:4a:4b:44:70:
c5:5f:f9:22:14:87:ca:3e:70:75:2f:c9:06:cb:68:
44:6c:3f:86:9e:41:a1:7f:ee:c2:e7:28:f4:3d:79:
28:c1:3b:1b:1f:42:04:b5:2c:6c:03:89:75:a3:7e:
3b:51:9a:12:5b:07:ad:ff:34:34:cf:1d:a3:af:3c:
82:d5:9d:d1:7f:fc:db:d2:c7:92:7a:64:33:d7:7a:
b6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CF:0D:1F:C3:39:28:1D:2C:BE:48:EF:7E:ED:40:AC:6A:C4:6D:8D
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:48:91:b0:a1:07:a1:44:4e:8b:81:9d:9b:aa:c3:59:d5:07:
b5:f0:e6:cb:35:6b:23:d3:a1:50:d1:3b:d5:34:61:90:3c:a4:
1f:7c:c1:ad:eb:84:72:85:49:c1:05:32:84:b8:0b:c0:3e:09:
ea:72:4b:2f:e7:32:e7:dd:fe:c5:10:5e:0e:8e:cb:f9:17:3e:
34:5e:81:ee:1b:29:0d:5f:26:20:13:b3:a0:77:63:e2:61:1c:
c5:b7:38:ab:1d:ee:10:0a:f9:25:99:bc:e3:79:30:c5:81:c1:
05:8d:5b:61:14:04:53:4d:e7:65:4b:72:c6:37:00:47:45:85:
f8:2d:b1:10:0f:ac:44:af:5d:70:8b:45:56:5d:38:37:f1:9d:
d0:f0:1a:e3:af:cb:9b:b9:2d:d4:76:d7:80:52:c8:cd:8f:90:
98:e2:b3:e0:ec:c5:4a:e6:b7:ad:43:15:cd:e3:3f:40:34:d2:
95:7b:6c:44:5d:49:81:13:34:67:86:85:8a:a3:98:a7:b9:e7:
7f:1d:2a:7e:9f:f5:d8:f3:5c:97:d5:92:88:0a:fe:ba:a8:f1:
d9:af:ae:12:22:8b:38:9d:9b:96:07:3c:31:88:e4:aa:41:0e:
8c:09:16:8b:ad:69:ce:e1:51:b1:f6:e9:69:45:bc:5b:7d:60:
da:6a:d2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:48 2026 by rpki-client