Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File: d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier: Wj/UUXBWMcGgUciUuHS3JtuRbfOGTiO4z+NDdTE3ocs=
Subject key identifier: CA:55:57:47:21:36:30:5E:A0:2A:7A:BA:9E:3F:07:03:93:43:A7:17
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 019EB6FC39B1DFB68B70FD2D790300B3CE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number: 0DE6
Signing time: Thu 11 Jun 2026 14:00:43 +0000
Manifest this update: Thu 11 Jun 2026 14:00:43 +0000
Manifest next update: Fri 12 Jun 2026 14:00:43 +0000
Files and hashes: 1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: Jx1tfsVAcyuKHwVpaqMWygWDGUSAhACJGAbeYVEiGB0=)
2: p6qsa6svPJ0422i3SiO1EzgoFFQ.roa (hash: TXPP91hJYndsd1QK98Dq8mZrdcp6BkkwS6MxLqiQzbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:39:b1:df:b6:8b:70:fd:2d:79:03:00:b3:ce:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: Jun 11 14:00:43 2026 GMT
Not After : Jun 12 14:00:43 2026 GMT
Subject: CN=ca5557472136305ea02a7aba9e3f07039343a717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ad:b2:a5:da:1d:bd:4c:95:10:5b:75:62:78:
37:33:25:6c:e2:7a:53:d4:7a:ca:7c:a1:4d:dd:6a:
6c:c5:f3:ce:70:8a:08:a0:3c:e3:98:37:5c:b0:0e:
05:7b:ab:6f:fa:86:4a:ac:4d:ce:b6:ac:ae:48:e7:
42:b6:59:d3:51:10:d8:07:1c:26:1a:c6:a6:9d:da:
46:92:51:87:ed:33:a6:27:14:e0:43:83:96:61:d5:
bd:a7:46:17:fc:f2:6f:ae:ac:dd:15:94:8e:45:c5:
64:ed:fe:90:b5:e2:82:ab:92:65:fb:4c:75:da:9c:
5b:9d:84:8e:3a:f8:1d:61:fc:c5:28:24:9c:72:97:
46:28:c5:01:d6:21:31:fb:d1:5c:c4:e3:98:f6:ba:
06:e5:ac:e5:e5:80:71:fd:02:e7:92:a2:29:13:85:
c1:db:64:cc:04:4a:ba:d2:51:f1:70:65:4b:2e:6e:
a9:d0:e0:7b:b6:3a:f6:5b:8b:4d:ab:18:c9:81:12:
64:29:26:06:8f:64:c6:ef:c9:de:39:85:83:25:6f:
60:75:d7:77:9a:9b:f6:fd:a7:a4:83:ea:e5:40:c0:
74:61:6e:ef:5b:97:99:b6:06:4b:ff:e4:23:cd:b6:
79:86:be:fc:59:48:75:c6:6a:13:8c:5a:ab:82:78:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:55:57:47:21:36:30:5E:A0:2A:7A:BA:9E:3F:07:03:93:43:A7:17
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a9:15:1d:46:a3:a7:94:47:25:04:df:2d:f0:dd:24:45:6e:
66:f7:80:64:a9:8a:57:9b:b4:52:d2:21:75:b0:a1:03:2d:4b:
32:28:8d:ca:1a:1d:ca:36:94:c1:c1:fd:ed:36:c4:8c:ae:6a:
66:6c:3b:3d:d5:0a:62:b2:a0:d3:05:0b:1a:f5:87:6a:bf:f8:
46:39:16:64:e2:9b:73:3e:60:4d:09:75:16:f7:94:08:2d:ee:
67:8c:84:f2:4d:7f:80:9b:75:0f:34:0a:59:df:e2:c9:80:b8:
ea:1e:2f:8e:f1:43:e4:1c:f0:31:ad:c5:5e:fd:d1:eb:8a:35:
58:3e:b0:80:a7:47:a3:d4:8f:e2:85:f2:ba:72:99:bd:ff:dc:
01:59:72:45:12:b6:12:af:72:fa:6c:39:c2:93:0a:6e:d4:20:
a1:a1:3e:8d:35:56:71:76:c7:5d:01:25:ee:3b:42:26:6c:3f:
ab:4c:73:f1:e5:1d:bd:2e:34:fe:37:dc:86:16:4c:c1:a5:13:
16:a7:4f:62:59:81:01:55:e4:cc:fc:77:f4:49:a0:36:eb:77:
7d:14:68:78:fa:20:f8:e9:b6:4d:ca:14:1c:49:81:53:e7:9d:
71:4d:78:bf:d6:be:bf:da:57:f8:e4:12:b3:8c:8c:30:4f:21:
b4:c7:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:18 2026 by rpki-client