Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: A8LMaFHK+oz9iOmQ7rZbFMLSMl1IbU35sfHcbwmnQKg=
Subject key identifier: A4:3E:FC:E8:3D:4F:42:62:A6:6E:C3:15:CE:2F:41:8C:1C:F0:C4:E4
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 019E2024601551AA38EFF1B980EAC77EED7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 0B94
Signing time: Wed 13 May 2026 07:01:55 +0000
Manifest this update: Wed 13 May 2026 07:01:55 +0000
Manifest next update: Thu 14 May 2026 07:01:55 +0000
Files and hashes: 1: XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa (hash: wAuwL6Iz2Pwm9WGIInMjcsxZMvhkc1vHutS+nMnQpa8=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: +mPw20hTCO9crfuJEhCuz2/Un2DFPQjo7myBVFu18hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:60:15:51:aa:38:ef:f1:b9:80:ea:c7:7e:ed:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: May 13 07:01:55 2026 GMT
Not After : May 14 07:01:55 2026 GMT
Subject: CN=a43efce83d4f4262a66ec315ce2f418c1cf0c4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:5c:0a:d0:c3:e9:ae:6b:02:50:15:f3:ee:
41:c6:08:6c:3e:61:ba:03:8c:7a:4e:fd:be:f2:13:
69:17:0f:cf:5e:dd:31:d0:a6:9e:a2:06:8a:48:58:
ca:db:82:6f:8d:13:aa:09:9c:c0:45:96:df:30:2e:
37:0d:62:9d:6e:30:95:80:31:6c:88:1b:0b:12:99:
28:07:b0:35:b3:74:37:18:18:fa:c2:1e:b7:ec:f4:
61:3b:d5:00:12:03:b4:1b:2e:12:4a:bf:96:c7:48:
e6:43:d7:89:3e:2d:b9:a9:bd:98:c6:c1:1d:87:2b:
46:17:ea:61:24:b1:89:80:14:f2:df:4d:9f:24:06:
95:53:3e:b6:50:fd:51:a5:99:a4:41:32:20:9e:b6:
51:65:cb:b1:dc:08:8d:7d:fc:3b:3d:d0:77:88:c1:
36:d9:ae:06:9a:30:ff:8d:09:32:22:bd:85:f2:fa:
3b:40:d3:24:51:56:48:72:e4:15:bd:e3:91:51:49:
36:b5:3d:0d:5c:d6:e0:0b:70:09:a0:e2:39:9b:c8:
68:d0:f2:84:4b:2c:5f:db:1c:b1:d9:5e:cc:f6:42:
17:fe:a9:d2:ed:85:96:ee:41:6e:41:5f:7d:94:7b:
14:95:be:d2:1c:f5:2e:0e:a8:b3:87:8b:84:a7:d0:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3E:FC:E8:3D:4F:42:62:A6:6E:C3:15:CE:2F:41:8C:1C:F0:C4:E4
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:05:ad:b6:b4:c0:11:3d:75:db:56:66:1e:10:05:40:e7:90:
1b:f7:75:d8:1e:a7:f1:c1:72:0e:4d:17:ac:8b:a0:34:9a:37:
14:0c:ce:ae:1a:56:ed:cc:c1:07:03:d3:6d:17:74:a0:33:31:
81:c0:ee:33:f0:0e:cd:dc:4d:50:65:8d:4d:73:af:a7:f7:b3:
68:00:4a:61:59:47:de:27:31:b3:81:f8:bb:5a:1f:d9:6f:17:
4a:06:19:2d:a1:e4:7d:07:0a:96:cb:08:ac:96:49:36:09:61:
24:8d:5b:c5:10:e5:3b:67:b9:5b:3e:74:a3:eb:ab:b3:1d:88:
f7:a0:71:e2:06:3b:35:6b:97:54:6f:19:25:b1:7c:0e:fe:d5:
6b:f9:ae:eb:17:8c:10:66:e5:a5:69:e5:4b:69:a2:98:c3:5d:
77:39:41:a0:cb:55:5f:19:e1:e6:e1:17:99:f6:95:e0:81:8e:
3e:f9:5f:a3:ee:73:65:47:03:32:89:7e:ad:c3:54:5e:e1:61:
9c:fc:09:50:8d:e6:8f:20:50:b2:ba:68:c3:37:68:63:f7:b5:
7e:62:7c:78:a2:d5:87:2d:5d:98:6e:42:b5:1f:1d:87:d7:39:
66:aa:73:a8:f7:c8:2f:d1:df:1d:9f:9a:ce:d2:48:2a:2c:a1:
7d:40:43:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:22:25 2026 by rpki-client