Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json)
Hash identifier: MBxQxWwafe1Vrx8kO3XLYZKVERHTgZ+tzi3NLi4xiWk=
Subject key identifier: 87:08:85:5A:8B:D3:75:26:E4:FC:E5:46:30:67:1C:2B:A7:C9:30:82
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial: 019EB9223046BBF106CE6C433C213AF79CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
Manifest number: 0293
Signing time: Fri 12 Jun 2026 00:01:25 +0000
Manifest this update: Fri 12 Jun 2026 00:01:25 +0000
Manifest next update: Sat 13 Jun 2026 00:01:25 +0000
Files and hashes: 1: 52gTPJdQN2IyRsgf9iKgbNid4cI.roa (hash: 5lE63bjKcJ3503lnep/t29RA6BQhkuc041jpBZfJLfo=)
2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: Z2N+pFH5N8lTNu72mm+gOTVRlRSp+WcivuLjbOlS5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:30:46:bb:f1:06:ce:6c:43:3c:21:3a:f7:9c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Validity
Not Before: Jun 12 00:01:25 2026 GMT
Not After : Jun 13 00:01:25 2026 GMT
Subject: CN=8708855a8bd37526e4fce54630671c2ba7c93082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:79:53:55:d9:d9:a2:3d:a7:6a:54:62:93:
48:57:45:8c:aa:b5:56:78:8f:f5:83:5b:fa:08:76:
fe:95:3e:aa:54:01:79:88:85:60:53:37:8b:8d:3f:
83:f1:53:28:2e:b1:70:50:54:fe:4a:8c:03:d9:b6:
bb:59:88:01:d8:ed:9f:83:94:cd:1d:1a:eb:58:17:
67:3a:12:92:14:5a:fe:0f:ca:03:82:ac:82:c7:1a:
b5:a7:85:58:e3:73:3e:31:83:0b:9d:3a:49:79:1d:
27:1d:1b:27:84:54:b0:f9:91:02:82:51:06:fc:c9:
10:0b:7a:d8:a5:4b:a8:7c:7c:ff:61:5f:9d:81:7c:
18:a3:b4:b2:4b:00:e9:8c:a1:b3:a9:1d:56:9b:87:
e2:3b:b7:e6:02:ef:32:c5:3f:f7:6c:02:1d:ce:04:
b0:11:af:ed:71:b6:f5:36:1e:11:f1:ad:18:c8:21:
c5:9a:fa:02:f3:f6:cb:6c:a5:53:a6:ae:3f:32:fe:
b1:f3:a1:3c:62:aa:c2:d1:2b:bd:55:7b:35:f1:2a:
ab:ee:0e:0b:d1:c8:3b:70:56:4a:4e:51:3b:9a:48:
fa:bf:9a:05:11:7d:dc:5e:c7:4f:f7:87:2d:d6:c6:
d0:0a:93:3a:b3:59:67:0a:48:a9:78:fa:c4:34:cd:
62:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:08:85:5A:8B:D3:75:26:E4:FC:E5:46:30:67:1C:2B:A7:C9:30:82
X509v3 Authority Key Identifier:
keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:26:6a:ba:3e:14:f7:9e:c7:ad:48:f8:82:55:66:5d:4e:c1:
f9:7e:73:bc:7d:ca:1e:b3:99:48:d5:74:1e:2e:f2:26:ff:f0:
96:58:f8:7d:35:bc:cc:19:54:57:ef:98:59:34:42:b0:49:eb:
81:68:49:0a:f6:ea:6d:d5:60:fc:f0:a9:51:49:d3:26:82:a5:
90:5f:4f:d4:51:96:36:83:95:78:33:f8:17:43:df:3b:dc:e6:
db:b5:9d:ff:86:aa:92:96:c3:f0:ca:61:65:50:40:72:17:0f:
82:c1:fa:a9:a6:66:bd:0c:fd:ff:d8:79:df:56:46:fb:d1:b7:
36:4b:46:43:43:9e:c2:1b:f0:fe:ea:f9:bc:95:36:2e:12:4d:
d4:4c:c5:f6:ad:ce:7f:a0:ef:c7:d6:f8:e6:eb:1d:28:60:d3:
2e:66:05:02:34:da:57:cd:e1:2a:83:50:8b:18:b2:2b:57:69:
2e:c7:5f:27:2b:2f:5a:f2:71:c6:2f:3b:7e:ed:33:56:d5:77:
81:39:d5:7b:2a:15:fd:46:4f:e8:b5:f5:63:cb:9a:8e:1f:19:
91:fe:ec:3a:e2:e9:35:e0:d0:d2:57:fd:2d:40:91:3e:54:d7:
12:3f:bb:f5:d1:1a:ff:e3:8c:61:42:fc:67:05:d3:e8:4e:55:
b6:dd:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:22:08 2026 by rpki-client