Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: YbvlgDy7ybyMrC7RunxhIJ/a03Tdd549l0XZGNf9NfI=
Subject key identifier: F2:1B:4B:D1:60:89:C6:EA:65:64:C0:B5:3B:49:12:DC:A2:EE:D7:1E
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 019F95126735495B0BBBCB5BC5C6417776BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 0971
Signing time: Fri 24 Jul 2026 17:00:38 +0000
Manifest this update: Fri 24 Jul 2026 17:00:38 +0000
Manifest next update: Sat 25 Jul 2026 17:00:38 +0000
Files and hashes: 1: clGNCBZAUsZmUY2Yr9tTeA-xspg.roa (hash: 5vbfK5sSOuwTJdbsyPF/pmsdysNhxTsWqZlPG/oHPeQ=)
2: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: YbG08b15f4CGbYbSfri/MM1ohfiLHZHz2/MqCpM0fYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:67:35:49:5b:0b:bb:cb:5b:c5:c6:41:77:76:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Jul 24 17:00:38 2026 GMT
Not After : Jul 25 17:00:38 2026 GMT
Subject: CN=f21b4bd16089c6ea6564c0b53b4912dca2eed71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:92:89:02:cf:32:ad:ae:74:f5:c2:d6:fe:
d4:e7:a0:2f:3d:12:d2:34:24:b1:7c:cd:df:6a:e7:
56:c9:65:98:82:33:1c:b5:fd:94:0a:9d:b9:05:39:
91:4f:2c:ca:03:03:c0:86:ee:45:09:f7:64:10:da:
a3:98:c0:8e:0b:6a:ea:11:39:8b:d5:f6:08:d5:4d:
ca:ab:e8:dc:e1:c4:67:b5:4a:7c:3d:15:05:50:5b:
a8:23:2c:6b:2b:d3:a1:d0:09:d0:cf:9a:c7:08:0f:
da:86:ae:0f:df:6e:8c:cf:dd:8d:15:50:11:6b:71:
ab:20:4a:bb:86:a5:43:2a:7c:e7:79:2f:83:ab:05:
fa:06:57:a9:33:7f:ff:b6:e5:42:37:0f:6c:3c:8d:
2d:48:12:6e:30:67:21:81:64:ed:42:dd:82:23:ad:
c9:82:2c:db:10:1a:26:1c:48:a9:81:43:ec:27:cb:
54:13:a7:ee:d9:4d:df:6a:b0:94:63:85:dc:07:cb:
a9:cd:24:73:6e:0d:6e:9f:f3:06:be:b1:aa:b3:ab:
4a:27:12:74:f7:e1:db:7e:21:10:0b:72:61:3e:bf:
dd:4f:b1:df:68:e7:ad:ba:f5:a7:84:bc:78:d2:64:
28:3a:63:61:46:47:04:b4:10:d9:a5:c7:f0:fd:c2:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1B:4B:D1:60:89:C6:EA:65:64:C0:B5:3B:49:12:DC:A2:EE:D7:1E
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a5:60:98:bb:31:e8:1c:af:25:45:e2:b3:da:34:89:78:ec:
dc:97:7a:cc:30:8b:bf:c1:91:1c:b5:da:bc:f7:98:8b:2d:30:
80:ef:b3:73:ee:11:ae:7f:5f:f9:0e:a3:e3:47:9d:d6:29:c3:
28:26:8e:21:ea:bd:61:b1:fb:b5:85:0a:12:fe:f4:34:ca:9b:
e8:f9:09:c5:c8:23:8b:d8:e2:53:fb:f7:ef:36:e5:26:4c:66:
3c:bc:ee:f6:58:05:40:78:f7:da:7c:97:16:90:e7:60:60:cd:
c7:14:c1:50:12:64:20:54:dc:7a:fe:a6:41:40:76:45:12:d9:
f0:fd:3f:cf:5c:2a:2f:7a:fd:7b:55:24:86:86:04:10:5c:d6:
9d:66:59:a0:f2:03:04:e3:59:75:3e:e9:a2:f1:71:d5:b3:e9:
45:69:6d:61:f4:a4:56:03:fa:b1:bc:a7:76:e3:89:58:05:f0:
4b:f5:85:98:96:5d:f4:4f:dc:16:f2:c9:fe:17:c2:f8:ff:7d:
b3:bb:d4:75:53:8e:6d:aa:09:c4:33:75:e4:09:94:79:85:10:
1b:95:f0:bd:c6:25:c6:76:8b:50:92:e7:50:9d:e4:de:e2:98:
fd:e8:23:b8:90:59:03:4e:7b:6a:91:e0:e9:6b:8b:ed:8b:21:
4e:dd:3a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:43 2026 by rpki-client