Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: sl4dEni9o8MnNN1RhON+IXi0EblEjsRZKHjiBnAsnEk=
Subject key identifier: CB:36:58:36:12:AF:AA:6C:56:9A:23:C3:5C:F6:E6:6F:73:FA:C5:44
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 019F90FE6F0A09FBAE8797B1E14BB07A556E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 0C53
Signing time: Thu 23 Jul 2026 22:00:21 +0000
Manifest this update: Thu 23 Jul 2026 22:00:21 +0000
Manifest next update: Fri 24 Jul 2026 22:00:21 +0000
Files and hashes: 1: XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa (hash: wAuwL6Iz2Pwm9WGIInMjcsxZMvhkc1vHutS+nMnQpa8=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: mmx5edwCTfD5omrpGSD80gGC6VGYVDdW8UeGnRCEHiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:6f:0a:09:fb:ae:87:97:b1:e1:4b:b0:7a:55:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: Jul 23 22:00:21 2026 GMT
Not After : Jul 24 22:00:21 2026 GMT
Subject: CN=cb36583612afaa6c569a23c35cf6e66f73fac544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:1b:69:87:6f:cb:b1:a9:3e:a7:4d:54:08:
f3:bc:75:30:70:7b:11:24:f1:b5:d2:1d:b6:69:f2:
cb:d5:e7:c5:64:94:e8:ee:f0:9e:74:9e:16:9f:07:
20:6e:03:91:3d:f2:c6:2c:df:51:9b:3d:7a:cd:cc:
4a:91:a0:1a:23:78:62:fa:21:92:de:50:df:0a:f1:
59:54:7e:4c:e3:7a:3d:49:42:8e:d3:c9:07:01:75:
ff:62:9c:93:09:bd:1d:5e:8e:77:d0:65:7e:e5:fa:
c5:75:3e:89:c3:10:05:e8:46:bc:8c:13:65:c8:92:
3c:6b:c3:ae:1d:04:34:20:ee:c9:ab:f7:2e:97:a2:
2e:ba:03:5a:66:cd:00:b9:51:9d:ec:a9:64:08:5a:
ff:c5:88:b7:56:86:ca:69:79:2a:3c:37:a0:19:42:
07:0d:dd:71:2b:9e:7a:2a:03:9a:ea:70:54:97:20:
4f:30:91:d2:10:eb:87:d3:09:54:16:61:82:97:5d:
0d:7b:43:77:a2:42:33:98:83:32:85:1b:9d:a7:44:
02:59:fd:e7:f7:a1:e8:74:4d:88:da:f9:57:ad:7f:
c8:3b:c4:bd:f8:6e:62:0d:b1:3d:9d:ee:38:b1:52:
20:28:fe:da:fa:5f:10:fd:93:15:98:cb:9b:b3:d5:
b1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:36:58:36:12:AF:AA:6C:56:9A:23:C3:5C:F6:E6:6F:73:FA:C5:44
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:66:b1:50:ee:f6:91:1e:51:e2:5b:6c:20:88:13:0c:d7:2d:
ae:1b:b3:8b:3f:d5:83:ad:bf:1c:f0:ab:8e:41:9d:bd:31:fd:
6b:f4:c9:20:56:34:d2:4c:fd:2c:19:db:ee:c6:4f:64:43:71:
2d:dd:e4:91:10:f0:21:60:ef:e7:04:65:25:d5:77:c8:0b:aa:
a4:b7:51:73:21:81:4c:a4:0f:8c:13:21:98:cd:01:69:ff:1f:
a9:3d:0a:89:02:f2:e4:3c:1d:df:19:0a:70:86:89:1e:1d:b8:
13:41:20:0f:c7:51:b1:9f:af:c5:c9:53:3c:f7:57:2e:d8:7c:
b3:b1:a9:47:f5:32:13:a4:ee:f3:a6:eb:44:77:4b:d0:71:89:
ae:e6:d5:fb:49:12:eb:bb:ef:3c:bd:28:26:1f:3f:b5:14:78:
67:46:96:65:90:6b:7c:ea:9d:c5:e2:8d:63:2c:90:95:75:ba:
c8:93:a0:4a:0c:ea:bb:eb:c7:2f:32:ae:66:21:40:16:27:3b:
84:51:ba:ce:a5:f3:8e:86:28:c2:a2:3c:df:13:98:d9:21:ee:
aa:db:c2:7a:06:9c:8a:11:ce:c1:be:02:18:7d:d5:6f:9a:d5:
88:cb:91:7c:25:8d:47:c4:09:80:d1:4e:7e:6e:0a:e6:f4:e6:
b5:62:06:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:46 2026 by rpki-client