Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: p+RE0AwyyZNC3olUWfIYexG2v3ATHu1aTxV9/qb3QLk=
Subject key identifier: FC:28:5B:81:33:6C:41:53:41:00:12:B6:0D:EF:40:C4:03:39:F3:12
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019EB50DA13C5FF4E93C2BC88C666D6627F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 1395
Signing time: Thu 11 Jun 2026 05:00:29 +0000
Manifest this update: Thu 11 Jun 2026 05:00:29 +0000
Manifest next update: Fri 12 Jun 2026 05:00:29 +0000
Files and hashes: 1: Owu-o7JvEybmXtpQNjtKXjhH9ug.roa (hash: 89sGeUxvhpVypElkHwSDvmrZnRJHBtaKeL9yMz7nC6U=)
2: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: X2NT6Ed1An3mn/BIDHDmOV8jEG5fuZX46zLwd8cfoSw=)
3: _b_jh41DtvYlyJbVt2vmUxy_03c.roa (hash: Y4f7kKKKelGhsZykUm6x2Et6p6M+4yMQNJ8fkfC21Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:0d:a1:3c:5f:f4:e9:3c:2b:c8:8c:66:6d:66:27:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Jun 11 05:00:29 2026 GMT
Not After : Jun 12 05:00:29 2026 GMT
Subject: CN=fc285b81336c4153410012b60def40c40339f312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:03:37:9e:ed:5d:a0:d3:09:b9:cd:61:32:4a:
c0:5f:3f:8e:2d:6f:0d:2d:f5:b2:b8:52:c2:d6:6d:
d0:40:74:5e:da:06:d5:f7:7e:51:b7:68:9c:f1:3a:
66:d6:ea:d5:36:38:88:d2:32:42:5d:11:58:4d:b8:
ee:0e:7d:2e:6d:26:0d:ee:7c:0d:d3:0d:0b:85:c0:
d4:5f:84:6b:0e:8b:0e:f2:b1:a6:ed:16:0b:a8:e4:
44:83:7a:b8:dd:ed:d5:3b:a8:d8:f0:26:1b:46:09:
cb:a6:b2:7f:d2:7c:97:00:c3:ea:b1:19:3e:47:80:
99:ea:1f:47:8f:b7:a7:82:0c:22:c9:87:5f:8e:82:
56:54:09:74:12:f5:61:52:ea:d4:c3:72:da:d4:14:
88:9e:b8:10:46:d1:24:31:1d:79:76:8e:2e:2a:c8:
7e:2e:9f:3b:58:b2:fa:4f:ec:52:8d:e9:5e:b6:f8:
de:8c:fa:55:24:4d:8f:c3:f6:36:6c:0c:96:7c:cb:
e7:59:5f:3f:61:0c:b7:60:0c:83:b8:80:48:60:dd:
cf:f9:5a:06:c5:6c:e8:68:5f:32:3e:2f:15:e5:b8:
56:03:f2:79:79:e2:13:72:85:ad:82:1a:64:cc:2b:
e1:b0:20:79:48:9a:39:85:c2:35:7e:af:07:d4:fa:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:28:5B:81:33:6C:41:53:41:00:12:B6:0D:EF:40:C4:03:39:F3:12
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:de:a7:9a:9e:91:9a:5e:17:98:3b:71:f8:ea:76:82:1f:95:
25:ed:15:b2:47:6b:78:8a:e3:aa:d1:45:e5:b1:81:76:3b:b5:
79:35:50:53:d1:b5:02:08:1a:ca:ed:2f:f1:46:f0:ea:d2:2e:
5f:89:7f:cf:e3:94:9f:c8:41:e1:d4:78:1c:4b:53:ef:8e:ad:
59:bb:28:4b:11:02:cb:24:c4:d0:0e:98:f4:fc:62:22:cd:72:
e7:8a:11:75:ef:eb:6d:f5:7c:49:53:41:d5:2f:a1:71:80:6c:
45:b1:56:9c:cc:0a:25:07:3f:18:62:0e:2e:15:52:ea:0e:8e:
e1:e9:4a:e9:ef:71:52:f0:09:48:b5:91:03:5e:46:97:08:68:
9c:23:ec:9b:f9:a9:c8:5b:77:54:df:b1:ac:b5:3b:14:b9:3d:
18:10:18:89:dc:da:f9:c3:02:c8:d2:d0:07:2c:1e:2c:4b:5e:
e0:18:3a:0b:23:fb:ac:25:dd:f2:ad:a1:63:aa:7e:39:4f:81:
41:fe:46:03:62:a1:83:f4:78:2a:06:9a:b1:73:e5:c7:69:e2:
6e:da:01:28:a1:2e:86:fc:9a:63:45:bf:95:a1:67:a0:38:13:
c6:c2:88:ad:e9:2e:7c:f8:70:43:28:43:ab:d0:a7:04:a8:21:
c1:28:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:08:37 2026 by rpki-client