Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: 7cox36+phfXKicow3hjYY98fKPHPET9qgUpVaiPOKdo=
Subject key identifier: D6:D1:2A:6A:9C:40:D1:ED:ED:A6:25:57:90:4A:EA:A4:84:51:71:F4
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 019E1F1085A43DC669A54A81F38C95B75831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0D68
Signing time: Wed 13 May 2026 02:00:36 +0000
Manifest this update: Wed 13 May 2026 02:00:36 +0000
Manifest next update: Thu 14 May 2026 02:00:36 +0000
Files and hashes: 1: UycNDBh6XIKJ82eOMM9nsWm3RUU.roa (hash: j5CuV0Ecvfd3t9K7/xrfKK4OIBdyHHKPYNpzUJ5l9jc=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: lAlDgOlBqLRWSct20qBH8dun8JIoplyjpEuM5B/DsDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:85:a4:3d:c6:69:a5:4a:81:f3:8c:95:b7:58:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: May 13 02:00:36 2026 GMT
Not After : May 14 02:00:36 2026 GMT
Subject: CN=d6d12a6a9c40d1ededa62557904aeaa4845171f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:de:d2:71:65:49:1d:97:c0:36:6d:48:e4:
4f:e4:75:33:26:a6:bd:d8:e1:71:bb:64:91:5a:b2:
a0:eb:2d:49:53:fd:03:89:f2:9c:06:6b:29:71:7e:
3e:dd:ef:cb:34:16:31:5b:4b:7a:62:43:d8:c2:e8:
0f:c9:a9:ba:6f:65:cb:f5:f8:91:48:d0:c5:38:11:
21:ab:a3:66:94:27:57:16:d4:09:2b:32:dd:b8:ed:
45:20:4c:90:5c:ad:5d:fd:06:3e:5c:4a:3f:88:dd:
d6:61:86:59:88:6d:f4:1e:bb:f8:35:94:84:20:b0:
b3:8a:d9:1b:bc:07:3e:bf:41:6a:b7:61:90:c3:b7:
66:3b:aa:39:94:61:a2:e5:d2:37:93:04:27:31:87:
1a:00:0f:0a:35:d2:1a:af:51:93:35:8a:51:a9:6c:
2c:6e:e0:5e:5c:94:37:72:04:06:48:93:81:69:7b:
d5:fb:dc:0b:ed:6b:6f:0d:ab:71:03:18:5d:d5:5e:
a2:0f:e3:3a:fe:77:cf:a0:e3:fb:5a:92:bf:df:27:
57:90:1d:35:86:c4:19:9b:66:ab:15:86:2e:d0:72:
5f:ee:19:db:5f:03:c8:e2:9c:b0:ad:09:ad:5f:d1:
87:52:6a:5e:83:a7:f8:fd:5d:c9:31:38:35:30:9a:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D1:2A:6A:9C:40:D1:ED:ED:A6:25:57:90:4A:EA:A4:84:51:71:F4
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7b:a7:2a:d0:64:21:02:04:bf:4f:5b:d6:23:0d:aa:c5:f9:
70:e5:08:dd:5b:33:7b:e5:d6:c0:98:7f:7b:bb:cf:fa:3e:e8:
39:e7:95:53:d6:ed:99:2e:5d:98:ad:ab:e2:3c:c5:6e:85:b9:
1e:25:f6:56:54:58:10:86:e5:9b:88:e7:22:08:2e:a0:ea:c2:
48:21:ca:23:73:98:2f:03:05:1e:ee:0c:50:d0:b0:16:0e:50:
e0:84:fd:7b:96:bc:a3:7d:b0:01:0f:0e:3e:6d:9f:c2:9f:04:
f9:4b:27:13:b8:38:18:dd:db:d8:33:f7:e6:6b:35:41:61:a9:
35:a7:0d:6f:ef:ab:aa:b8:52:2a:db:82:a1:bb:09:61:dd:2c:
b6:b4:10:1e:38:b2:a8:3b:cc:06:fb:17:67:13:4d:b9:92:a2:
dc:5b:79:63:ea:85:e4:78:d5:bb:35:91:d5:d6:c9:40:b0:3d:
0f:29:cd:cf:39:43:b4:5d:19:f5:0e:41:ae:ca:49:63:6b:ab:
1b:c1:03:25:7b:2f:73:ea:89:20:84:63:c6:34:a6:c8:34:43:
8f:b0:ba:00:21:aa:70:89:8a:d8:32:58:57:11:6d:3d:fd:a8:
e9:dc:f9:9e:63:5a:1b:89:c1:21:f2:f2:57:9e:33:bd:66:2d:
9b:35:77:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:31:44 2026 by rpki-client