
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: 6Cn18qqjO+TfxS2J8cNrf1Pllwb4PMm/fLEaEunaXr0=
Subject key identifier: F6:5A:00:A2:12:02:75:AE:26:F4:01:50:8F:8D:CE:0B:29:EA:6C:3F
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 019E205A80C97964D847043A4941DDDF3243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 08B0
Signing time: Wed 13 May 2026 08:01:02 +0000
Manifest this update: Wed 13 May 2026 08:01:02 +0000
Manifest next update: Thu 14 May 2026 08:01:02 +0000
Files and hashes: 1: clGNCBZAUsZmUY2Yr9tTeA-xspg.roa (hash: 5vbfK5sSOuwTJdbsyPF/pmsdysNhxTsWqZlPG/oHPeQ=)
2: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: A5VsxlLXSXR4Q6HGyRgnfJ5EhhrNIcaC4JrICJilOtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:80:c9:79:64:d8:47:04:3a:49:41:dd:df:32:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: May 13 08:01:02 2026 GMT
Not After : May 14 08:01:02 2026 GMT
Subject: CN=f65a00a2120275ae26f401508f8dce0b29ea6c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:d9:da:b5:a7:e0:9c:9a:b8:3a:18:14:fd:
08:21:c8:fe:4b:5d:72:63:fc:3f:93:7f:1c:da:2a:
64:01:08:67:ee:b3:f1:e0:60:74:ec:c0:79:27:6f:
7b:7e:b6:54:6d:4b:43:0f:f9:49:1d:4f:b5:d5:a5:
70:eb:e1:76:1b:95:ca:a7:86:2c:ba:71:61:3d:4f:
71:99:20:6c:4b:05:4b:0e:eb:f8:35:dc:a6:96:51:
23:55:a9:12:ae:36:3c:65:f6:6d:cb:89:64:48:df:
80:bc:d1:88:f3:9f:87:22:f2:00:0f:3d:20:f7:63:
c6:a2:c4:cf:dc:92:9a:3f:9f:83:ee:47:7d:a8:d3:
db:e8:64:8a:66:1a:db:da:3d:7f:af:8d:af:71:0e:
d5:ff:68:0c:64:f4:f5:f0:57:28:c5:ce:f8:28:8d:
13:9d:c3:e1:9c:97:80:bb:c5:d4:99:55:c7:df:b8:
ef:19:39:c4:84:f4:8d:96:de:13:21:16:38:8a:47:
6b:00:f9:0f:e5:ef:54:1e:53:6b:93:f9:3f:12:7e:
c5:00:e4:3d:0c:6a:86:8f:85:31:43:a6:dd:48:99:
66:09:08:d9:f2:cb:56:7f:c7:2a:67:22:f6:90:87:
85:d2:60:e3:40:6c:86:76:6b:f3:e1:c2:95:42:64:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5A:00:A2:12:02:75:AE:26:F4:01:50:8F:8D:CE:0B:29:EA:6C:3F
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f3:b5:ec:dd:a3:5e:a8:b2:9e:d0:44:9f:b2:b4:05:9d:7c:
0b:f4:de:b1:a6:2b:16:8a:63:f9:a0:1c:3d:a4:8f:51:5e:e2:
f4:9b:66:71:0d:fe:06:20:b8:60:e7:5c:f4:e0:30:4b:35:c1:
82:3b:53:7c:65:e5:01:3b:a4:b6:0a:d3:67:60:d1:1b:de:59:
11:be:a4:78:e0:68:d8:23:4e:fb:eb:ff:e8:29:ee:16:1b:8b:
03:89:4d:03:07:1d:8e:74:4e:c0:a0:99:dd:c5:42:df:d2:c0:
57:2b:25:93:73:06:35:f9:40:17:1a:37:d8:dd:f8:cf:b5:00:
ee:fd:11:ed:b5:0c:11:37:a7:6d:2e:fd:3a:41:8e:9a:98:2d:
76:a3:de:24:f3:47:03:fa:52:f1:f9:75:45:7c:d9:ac:9f:b0:
95:14:90:3d:0c:d4:72:ff:ea:be:55:69:43:f3:53:c4:3f:46:
09:7f:e4:b9:e4:ae:7d:8c:fb:e3:b6:70:15:5e:40:65:7c:70:
72:04:04:cc:60:bc:66:55:6c:43:79:08:fd:c8:73:d2:9e:0c:
ca:7f:c4:e9:a5:72:a8:3f:24:ef:31:ed:95:0b:c3:08:a0:c8:
86:87:9d:7a:45:9f:73:26:f3:9b:e5:be:7d:27:f4:86:80:b2:
25:d2:b4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:25 2026 by rpki-client