Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: g+bn/aJ9xACWtyv6pTBRjVcIhmU+FYpQPnU0ikwvM4A=
Subject key identifier: E6:37:63:27:7B:8E:5C:DC:5D:E3:1B:10:14:08:3E:B1:F6:17:2D:B3
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 01A0D45DD7AFD1DBCEEE6BDB889D67E69678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 0E61
Signing time: Thu 24 Sep 2026 17:01:54 +0000
Manifest this update: Thu 24 Sep 2026 17:01:54 +0000
Manifest next update: Fri 25 Sep 2026 17:01:54 +0000
Files and hashes: 1: jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa (hash: heA9ElftnVcEx/Z56cUQXfy2JpdBhi/Gw5ToPa737lc=)
2: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: WxnOm3LB/668nd8LcQIdkbOxuqY0WHX+peaL20dVIDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:d7:af:d1:db:ce:ee:6b:db:88:9d:67:e6:96:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Sep 24 17:01:54 2026 GMT
Not After : Sep 25 17:01:54 2026 GMT
Subject: CN=e63763277b8e5cdc5de31b1014083eb1f6172db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:1d:0e:89:b6:0e:dc:2b:72:c6:de:5b:90:
b6:20:52:57:52:7e:2a:7d:ff:2d:6a:93:11:03:dc:
9c:e6:2e:ee:65:4a:1f:4c:7a:cd:f0:88:85:7f:af:
d9:b3:76:30:35:ef:7d:2d:d9:77:2f:21:0d:84:5c:
fd:3a:12:f3:c3:0d:f2:d9:3f:33:9b:48:03:33:c6:
29:1c:cc:70:60:da:fc:ec:d2:63:b4:86:f0:bf:15:
51:d2:be:d8:94:8c:57:8f:d3:a9:4a:05:31:01:f5:
f1:16:49:03:c1:da:9e:b8:d7:13:87:16:fe:2b:2a:
28:40:e0:0d:cc:74:cf:06:98:71:a8:d4:fb:1f:99:
d5:b1:ea:70:1f:98:e9:27:fa:b8:fc:07:86:77:bb:
a4:c2:e0:00:22:da:3f:5e:39:da:30:81:d6:ba:f8:
64:dc:96:c8:38:c4:d1:3e:84:c3:41:d1:e1:77:16:
bc:1f:ae:02:dc:ef:c6:63:3a:83:2f:d9:25:42:74:
22:b8:a9:c2:27:e2:5b:5e:cb:11:6d:54:49:a6:84:
19:96:d5:3c:f8:11:8f:59:52:62:ec:5c:c8:2b:e7:
03:bd:4e:9d:47:61:8d:21:c2:b3:04:81:59:a5:60:
76:1c:a5:46:70:6d:b5:c5:a5:2f:28:ae:b4:b3:b2:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:37:63:27:7B:8E:5C:DC:5D:E3:1B:10:14:08:3E:B1:F6:17:2D:B3
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:84:37:a4:86:ed:47:d5:9b:f3:84:4f:69:8b:22:9e:ec:0a:
63:1a:86:56:9a:ee:36:59:e3:af:74:2c:4d:71:03:48:8d:bc:
34:0c:50:29:47:d0:da:de:76:9c:20:11:14:e9:2d:cb:e0:67:
ed:b7:4d:a1:41:a0:9d:d5:2b:c9:22:00:02:10:b4:a3:3d:61:
8a:6c:80:82:95:66:e2:f8:cc:c0:55:71:b5:2b:45:10:79:4f:
fd:35:25:3c:1f:2f:e7:c2:67:07:8e:59:92:6a:ff:13:8c:c7:
bb:8e:40:3d:f6:3f:19:0f:6c:3f:c4:17:cd:6a:7b:41:f3:f1:
e3:f5:b9:35:64:03:5b:d0:63:30:41:59:fc:6f:14:bb:4e:96:
b0:81:c6:78:2c:3a:ba:1d:1e:6d:6f:33:4e:10:c3:ee:7e:24:
dd:26:fb:ee:65:07:de:f6:24:6c:33:56:8a:0f:59:3b:16:eb:
91:38:15:a7:af:68:e9:fc:2d:f5:00:23:bb:a4:c8:4a:8c:53:
cb:de:1e:c8:a8:a8:f9:52:7f:45:6a:48:99:b3:c7:a5:ee:9d:
ba:ef:ec:f8:c0:6e:34:ea:99:14:f0:63:34:ea:fa:2c:f2:f0:
24:9a:38:f8:1d:d8:a8:13:8b:1c:07:18:c8:69:43:80:af:37:
33:68:cb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:05:34 2026 by rpki-client