Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File: p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier: To/sIsp1A0PG/iGBK1PW9IUsSU4CLJ17mGYu48z+rnQ=
Subject key identifier: 01:4E:4C:7C:3E:98:C6:E0:15:71:A3:50:87:09:88:57:37:85:63:35
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial: 019E8DC9741BAF9051509A517F362508CBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number: 0A30
Signing time: Wed 03 Jun 2026 14:00:50 +0000
Manifest this update: Wed 03 Jun 2026 14:00:50 +0000
Manifest next update: Thu 04 Jun 2026 14:00:50 +0000
Files and hashes: 1: 9H2Cao4L9seLn80FxSiOGYvYmbE.roa (hash: 6fh3UPrvbfpSC3IgcyXg2AEmgPfBi1rjETuQ8TwnWs8=)
2: J616ho14DKGXrY52dTz4rECA6rg.roa (hash: Pr/K62ihwSA6YnMNqUbbcVQlKEbx5zr2tsgN3ot1lW4=)
3: JzRoxhNcR2kzwArFwmc0pS-ExCs.roa (hash: KJ1WUHpaALO4NgyLeM/jwu4bNeSWXf1o/mMEG/mPGY8=)
4: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: XTy+cdCNsF/+f3QQvg/SyaBXduzfUp+XzjtyWk0noPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:c9:74:1b:af:90:51:50:9a:51:7f:36:25:08:cb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Validity
Not Before: Jun 3 14:00:50 2026 GMT
Not After : Jun 4 14:00:50 2026 GMT
Subject: CN=014e4c7c3e98c6e01571a3508709885737856335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:06:2c:06:b7:2a:9c:04:d1:e4:4f:d3:dc:
db:03:3f:ca:c9:49:62:5b:ae:11:c2:0d:f2:36:c3:
95:82:58:1c:0d:fa:df:2d:b8:a3:7f:5c:98:48:1f:
96:ad:4b:1f:63:87:6a:d1:5d:0d:e0:5f:b5:93:d2:
47:0d:c8:18:d4:fa:c9:30:80:1e:fa:bd:ed:8f:0e:
14:2c:99:1c:8b:d4:71:bb:33:13:63:ed:b8:3b:4b:
6d:84:fb:c5:23:22:29:00:30:7d:90:08:80:a7:85:
d0:33:ed:a1:67:b2:ca:70:45:d6:6d:53:4c:05:36:
3e:0a:25:71:c8:df:03:c4:86:25:42:a4:d8:dd:67:
59:0d:76:7c:c1:57:a6:14:d7:97:cd:07:ce:ce:60:
b1:d0:bc:5a:20:32:c3:51:c0:1f:2d:f8:d0:f6:84:
42:e0:53:f6:d9:8f:5b:84:cb:c6:2f:38:c8:1e:df:
5f:1c:24:34:d6:64:58:81:d1:3d:33:9d:0e:85:57:
12:27:79:cb:4a:2e:03:d5:7d:67:4f:44:a8:3f:70:
bc:d9:c2:2e:79:64:3f:37:47:04:e8:a2:02:a2:4b:
ca:4a:6a:57:dd:fd:0e:9a:5d:19:18:fd:fc:41:a8:
81:b8:af:c5:03:c2:7a:e6:82:44:2d:48:15:1c:98:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4E:4C:7C:3E:98:C6:E0:15:71:A3:50:87:09:88:57:37:85:63:35
X509v3 Authority Key Identifier:
keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:86:a6:fc:ad:ae:27:75:6e:6e:33:28:f6:c3:5e:3a:34:20:
c9:cb:fb:13:98:d7:d0:5f:e8:b3:69:23:75:23:b7:70:11:84:
b1:62:a8:04:e5:50:9b:98:29:c5:f7:38:90:12:77:29:39:c7:
25:b7:7b:e9:8d:6b:1f:87:c0:94:93:ef:44:cc:34:77:11:95:
24:f2:ef:7e:c3:4e:86:a4:c1:c9:8c:4b:d5:e1:1a:48:ba:76:
61:2f:b1:94:69:e1:79:c0:50:30:5c:0e:32:55:75:46:14:a6:
a2:ce:e6:48:81:c1:93:27:6f:4d:4a:a9:08:14:3e:10:04:f2:
f5:e1:fc:3b:b3:3b:b4:66:52:82:72:3f:b4:3f:4c:30:0e:47:
3f:ae:9b:0d:98:8c:72:0b:b6:1a:57:4b:1c:2a:95:5b:8f:cd:
1a:89:a7:03:6d:cc:97:e4:50:d1:2c:2e:4f:13:a4:d5:b2:ee:
e6:f0:d4:b4:79:78:df:b6:75:24:6f:5b:52:c9:af:7d:95:1e:
75:47:4e:56:af:e1:44:f0:b6:36:77:ea:71:56:10:1e:f7:ba:
23:aa:56:d1:5e:43:3c:b0:fb:7b:b9:a0:81:e9:c3:17:ed:bc:
43:32:a2:61:76:c0:01:d8:37:44:2c:7d:8e:04:7b:91:52:d2:
ec:f2:84:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:58:34 2026 by rpki-client