Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: 3lBPzdUlyZG3YmJjZc58w4AOLXYdbwAUZFSBg5XImQI=
Subject key identifier: 21:E0:C5:F3:CB:D1:C5:0E:6C:45:29:25:AD:8C:7F:36:8C:D5:A8:3A
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 019E9A042978E3E0B2F002CE24AD3AECC1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 0FE3
Signing time: Fri 05 Jun 2026 23:00:24 +0000
Manifest this update: Fri 05 Jun 2026 23:00:24 +0000
Manifest next update: Sat 06 Jun 2026 23:00:24 +0000
Files and hashes: 1: 5t5_5MqWJNollBMPqdFua97XfMM.roa (hash: KTz9ZppQRmMMx9XPLOR36od8YyLkBIE5elG5FeL6i2Y=)
2: FSHrqYhJli1tSVyjlj_58RREeXk.roa (hash: uSCHyOKTAFU7tgMnLJvTfArI/447X68lLDwgFscWtJQ=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: brurcm9TYrySVlaOzZQ4N+0FdtYEOe1lEweMoYCeNqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:04:29:78:e3:e0:b2:f0:02:ce:24:ad:3a:ec:c1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Jun 5 23:00:24 2026 GMT
Not After : Jun 6 23:00:24 2026 GMT
Subject: CN=21e0c5f3cbd1c50e6c452925ad8c7f368cd5a83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fb:ca:c7:70:74:71:d1:ca:cd:92:b9:08:03:
44:63:50:f1:3c:1c:85:15:c0:74:bf:4c:79:6a:4a:
9e:97:bc:7f:e6:95:fa:e1:11:53:aa:1a:4e:c2:f6:
7a:b2:64:75:b0:20:bb:a7:8e:91:71:e9:0d:43:27:
69:05:4b:fc:76:e9:76:9a:4a:79:31:53:dd:68:77:
67:b0:94:a4:b4:c2:7d:09:1a:76:f4:ef:a1:3f:92:
c3:67:17:8f:96:60:77:97:29:f8:43:18:58:19:8f:
96:af:ff:d6:37:06:c5:d6:65:c8:8e:40:bd:2c:2c:
f7:c5:ab:c2:24:da:60:72:a1:37:42:aa:da:02:fe:
44:29:46:e2:8a:f2:8e:11:ce:9f:4a:4b:b6:9d:cb:
0b:7a:36:01:b6:6c:fd:9f:2e:14:9b:c9:b5:9d:1a:
47:ea:4a:64:07:44:8b:81:72:cb:41:16:5b:f8:10:
a7:33:75:94:c0:f5:f5:7d:b1:9e:ca:fb:f8:c9:36:
80:12:a5:f8:f0:e0:cf:46:ea:22:e0:ec:83:24:fe:
b9:e4:c5:1e:f2:fa:9b:f7:ab:74:34:4f:b1:8b:35:
44:3d:8c:f1:b4:5b:36:6f:1c:a6:eb:06:bf:1b:d5:
c6:10:03:ce:6c:ce:b0:73:17:34:27:08:79:cd:7a:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E0:C5:F3:CB:D1:C5:0E:6C:45:29:25:AD:8C:7F:36:8C:D5:A8:3A
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:40:c6:94:e7:c7:21:8e:1f:d7:61:18:1b:d6:32:c2:4c:56:
1f:c2:3a:f6:25:3a:f3:42:04:94:de:bb:78:10:ed:7a:30:19:
9c:82:9d:12:cd:62:1a:90:64:e7:5b:d0:cb:02:23:26:53:8f:
22:92:04:74:ef:90:59:e7:2c:fa:b4:69:1c:4e:c6:20:88:59:
90:d8:05:21:e0:8a:88:da:18:61:bc:03:45:cf:c0:e7:bc:94:
0a:6e:df:9e:97:25:08:27:f6:ea:85:69:f7:7d:ca:e9:9a:a7:
ad:20:38:94:ac:e7:a9:7c:5a:ec:46:ae:0f:b4:46:84:1f:13:
b9:70:2a:78:9e:11:94:39:bf:d7:2a:36:cb:08:a6:f9:5a:dd:
1d:0b:83:b5:83:49:9e:d4:98:78:89:61:10:6f:ce:f6:f8:dc:
09:5b:e5:89:2c:4e:26:6a:d7:36:b7:f5:d9:e1:97:b5:ca:99:
ed:9d:67:39:50:1d:85:c6:c9:17:7e:ec:82:e9:16:24:a7:7d:
1c:2d:95:93:15:cd:c5:ec:6f:94:97:1d:d7:6c:2c:26:42:21:
44:51:8b:6f:18:f9:46:40:f0:1c:d4:fc:be:43:59:5e:52:4e:
d7:5a:77:f5:11:2f:0d:c8:6b:1a:0e:a6:59:5e:d6:c4:2e:06:
29:8d:e0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:59:06 2026 by rpki-client