Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier: rybpIh/jTj5uLFmQq5FnycR/m2aTjn4ij/QEml/YEj0=
Subject key identifier: 3B:20:0E:76:FF:3B:2E:2C:EF:55:70:D7:DA:61:8F:F6:56:8D:1F:6F
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 019E89EC5C39C708EB99DCF7A0E022E37534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number: 0E9D
Signing time: Tue 02 Jun 2026 20:00:29 +0000
Manifest this update: Tue 02 Jun 2026 20:00:29 +0000
Manifest next update: Wed 03 Jun 2026 20:00:29 +0000
Files and hashes: 1: VBRvFj1EOS8ywtDDLAz1AuJ-F3M.roa (hash: ZcSJ73xAFGVAh8eRMHYLBDppD5u63RXHyLpMLnO53qI=)
2: mnODa5wDvkGX4Jfpz4BI1Vtzz80.roa (hash: jyMMr46dns8Qs3JvGsMvWCbFmVoKBoUCnfmLlBoBHdM=)
3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: Pm79rdUW6MDmPqSXLZBVq6oqlefhaFmDlMK2mn6UUjI=)
4: vmahc-gH9xY8uloECYneObmRUwo.roa (hash: 6npTr2kUzSthDDmcUqv6TyudZTdNiJRtH1eH8fs3DyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:ec:5c:39:c7:08:eb:99:dc:f7:a0:e0:22:e3:75:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Jun 2 20:00:29 2026 GMT
Not After : Jun 3 20:00:29 2026 GMT
Subject: CN=3b200e76ff3b2e2cef5570d7da618ff6568d1f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:03:af:a8:bf:9e:4c:bf:2c:53:c4:f1:79:
96:b1:02:c0:26:c8:c7:98:83:c7:ec:f7:07:c1:63:
f7:5c:b4:3d:ce:87:5b:e0:40:ed:3e:a4:74:52:cb:
c8:bf:90:09:4f:7a:aa:3a:36:7e:30:45:36:e1:1f:
4f:a0:ef:87:48:9d:7a:d0:04:e7:2b:f2:97:6f:aa:
8d:73:2b:a7:68:76:9c:63:db:81:38:32:4f:3f:f7:
3f:bf:ce:97:05:83:cf:ca:7e:b8:1f:71:da:ab:58:
9d:cc:7f:29:81:a4:9b:fc:35:8b:02:19:df:20:3a:
d0:fc:74:de:21:4c:7e:8a:7f:c5:3c:18:99:5a:bc:
9a:5f:86:4b:81:21:d6:02:39:60:c6:7a:15:c2:1f:
a9:c1:81:7d:6c:b3:1f:3a:41:15:5b:74:87:1c:25:
00:16:7e:8e:e5:83:c4:a2:35:1d:b7:71:dc:35:74:
1c:b1:f7:a7:47:2a:12:cc:e9:4d:bd:d6:eb:9d:9a:
01:6d:9f:49:39:af:35:88:6e:b3:d4:ef:f4:30:65:
bd:74:53:d4:ed:f6:17:99:2f:1e:52:12:0d:3f:9e:
b8:15:b8:44:0f:2f:ca:bb:21:a1:ff:be:75:a3:05:
4e:7e:27:26:35:73:34:91:c4:97:44:9a:47:ed:6f:
52:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:20:0E:76:FF:3B:2E:2C:EF:55:70:D7:DA:61:8F:F6:56:8D:1F:6F
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2f:a7:00:78:ce:9d:09:fa:69:77:07:17:ed:ee:d7:43:80:
c9:5d:b6:9e:f3:47:fd:c3:93:14:4c:33:bc:2d:f5:30:95:69:
f1:4f:d6:18:3e:7c:a2:8c:cb:34:58:32:08:b3:83:01:b1:6d:
90:09:12:a6:82:4d:28:a1:1e:4a:8e:92:04:e5:d2:f1:50:eb:
de:7e:d7:24:5b:6f:e1:43:fd:49:d8:31:fc:dd:d5:5b:0b:1a:
46:92:87:dc:af:44:cc:30:b9:f1:36:90:a0:a0:27:61:e2:2c:
9f:b6:9c:5a:b3:f3:15:84:e5:01:f6:58:b5:3d:ed:32:76:8b:
b5:42:77:9d:84:2a:9c:59:3f:02:d2:4f:36:10:94:c1:ae:30:
83:d2:64:72:d7:6b:70:cc:f3:ce:64:cd:da:8d:1a:51:0f:09:
4c:2a:48:d8:93:e3:05:29:ec:cf:19:16:d3:ea:0f:9e:7e:f4:
1c:2e:73:ce:98:9f:0d:c2:68:4e:8b:f1:74:33:f7:9c:cd:2e:
40:72:11:d9:5e:a1:49:c2:09:d9:6d:43:8c:5e:d2:34:46:42:
2f:ce:41:a9:eb:d4:6b:dd:b1:68:c2:23:ce:53:6c:d0:a8:df:
c2:46:e7:c4:5d:da:2d:f0:eb:ac:b4:81:a4:2e:c1:c4:1c:60:
3e:08:81:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:13:59 2026 by rpki-client