Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
File: p4kEQNrxw6w4dz6FIVES90twYjI.mft (raw, json)
Hash identifier: xM1pMUYKvic5ntYUf4P3tA6YeFvxKAHM40UyFDolAhA=
Subject key identifier: 7D:CF:41:3A:F2:DB:EB:35:3F:CF:50:3A:B2:A0:72:3B:8C:03:C8:A1
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 019EB80EE3EB7FAE90129D79A6A4752BC3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
Manifest number: 010D
Signing time: Thu 11 Jun 2026 19:00:44 +0000
Manifest this update: Thu 11 Jun 2026 19:00:44 +0000
Manifest next update: Fri 12 Jun 2026 19:00:44 +0000
Files and hashes: 1: U3lhosWDCWkOpFdsH0InZo3L2So.roa (hash: cA9YSxfYf8puSlmrAh+xgnlh5hfoxYmLxjTNe6lxvv0=)
2: p4kEQNrxw6w4dz6FIVES90twYjI.crl (hash: VH3zquzlCaFvXg1GJ5RANJRr7Nt7H6vnNzX3ge+L+/I=)
3: rbySto4bwasyCSyfLG3tTaOVj_s.roa (hash: wd1Ap/uduw/P7yoJlzMsKGRJqc4D/dsTIBcvCHP1qZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:e3:eb:7f:ae:90:12:9d:79:a6:a4:75:2b:c3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Jun 11 19:00:44 2026 GMT
Not After : Jun 12 19:00:44 2026 GMT
Subject: CN=7dcf413af2dbeb353fcf503ab2a0723b8c03c8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:71:1e:7e:21:78:8b:4e:a7:f7:f5:f3:c9:df:
c2:d9:12:55:1a:14:a7:32:ee:14:77:71:9f:f8:d0:
2b:c7:b6:4f:8f:6b:b9:eb:75:b6:80:d8:e7:8a:0f:
e5:fc:df:65:5b:2f:ab:38:b8:f1:5d:95:4c:ed:98:
b5:04:f0:c0:51:ef:00:6a:36:eb:ae:dd:60:b7:b1:
5d:51:71:64:7a:90:00:b1:81:f6:f7:ee:c1:e5:d8:
9e:68:49:46:48:97:56:42:4e:8f:c7:8f:02:52:09:
11:0c:f3:76:71:0a:ab:4d:1b:75:35:4d:3d:4e:f1:
09:90:34:a5:b9:8e:54:ae:5b:64:d1:5a:c5:38:e7:
8e:d7:1f:c0:a2:9e:cb:3a:fb:b9:99:59:8c:7c:67:
6b:f3:23:ea:ef:7f:53:da:96:bb:70:5d:7c:84:0c:
29:cb:d5:f7:50:9b:43:7a:09:bd:8f:55:f2:6c:33:
a3:f0:bc:0a:83:02:a8:29:40:5f:7c:8a:71:2c:42:
96:bd:9a:13:7d:83:41:f7:3a:43:1a:91:50:79:3c:
b1:ff:41:f6:c5:d5:5a:1b:50:3f:1b:24:21:30:9d:
ba:54:73:30:3e:f6:64:98:95:67:e9:6c:eb:2b:67:
6f:b9:ef:0c:22:a7:c4:a2:23:ca:ce:28:41:70:f5:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CF:41:3A:F2:DB:EB:35:3F:CF:50:3A:B2:A0:72:3B:8C:03:C8:A1
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:03:93:ec:56:94:aa:1c:00:0c:b3:1d:68:ef:10:58:d0:93:
46:7b:fe:23:14:ba:2f:34:33:88:cb:10:fc:77:3f:65:28:54:
e5:93:05:29:27:d2:ed:50:bd:52:19:0a:af:da:ff:e1:4c:8a:
66:40:b6:77:8c:1f:d4:a8:86:06:58:73:24:26:50:a4:e8:e6:
30:3a:de:76:77:67:90:30:53:a3:b7:c1:57:d5:e3:aa:7d:6a:
46:b3:6c:ae:ee:be:e6:dc:6c:5e:3b:e5:a5:bc:d1:65:36:3b:
6e:1b:f3:d8:63:23:f6:8c:df:9b:97:9c:e6:a1:27:16:a9:92:
b5:88:e3:60:48:b8:42:3e:ac:f7:9d:86:0d:d8:2f:07:44:20:
51:08:3b:3e:35:bd:16:1f:12:fe:ae:c4:46:1f:05:f7:4d:99:
8f:b3:ee:e1:4a:9e:0d:18:05:f9:fe:1f:f8:01:6b:6d:4e:6b:
94:e3:fb:bc:1f:4d:f8:6d:5e:d2:7d:2e:e8:3b:12:4b:be:3a:
b0:de:5f:d6:71:b6:a2:d2:97:5c:3f:e9:86:76:a4:0b:c9:b0:
95:7b:70:02:c9:bc:c9:c4:5d:23:4c:86:f2:96:c0:5b:82:37:
96:ed:32:14:69:78:ba:d6:b2:73:dc:08:05:ed:0d:bd:0f:49:
cf:52:91:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:38:31 2026 by rpki-client