Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: XstUxZHq5Ui9YO99YBlhCzC/sVxq1iKxpGNH2XYrZOw=
Subject key identifier: C2:64:DD:5B:F3:EC:A5:E3:DF:15:65:42:00:92:D4:AD:40:C3:65:F8
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 019F126588FDC54BED56FA8503217B3A0273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 1374
Signing time: Mon 29 Jun 2026 08:01:11 +0000
Manifest this update: Mon 29 Jun 2026 08:01:11 +0000
Manifest next update: Tue 30 Jun 2026 08:01:11 +0000
Files and hashes: 1: nPVHMKh_KfMvRao_vET8GSNdB60.roa (hash: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY=)
2: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (hash: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: gXih56f8GHTknYHl6Kk9T4x1JP+1+1v4wJrFh30Apts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:88:fd:c5:4b:ed:56:fa:85:03:21:7b:3a:02:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Jun 29 08:01:11 2026 GMT
Not After : Jun 30 08:01:11 2026 GMT
Subject: CN=c264dd5bf3eca5e3df1565420092d4ad40c365f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:49:82:a4:a8:60:92:46:22:e6:61:22:3c:
5d:fb:98:43:97:c2:f4:89:9a:57:a2:2a:1d:89:15:
26:8d:e6:c5:3f:79:25:86:4a:98:d4:6d:09:36:bd:
4e:a8:db:9d:b6:5a:02:8f:a4:26:e4:ae:24:a1:e0:
48:1b:b3:cb:34:ba:34:cd:58:6a:45:37:c0:3c:52:
c6:86:99:71:1f:b0:27:f6:61:3b:4b:6a:27:cf:e4:
55:0e:34:74:bf:21:95:28:14:0b:47:61:36:d4:2c:
82:90:89:da:81:f7:f4:fd:b9:09:3a:d0:27:e0:0f:
90:3f:90:f9:2f:b6:9f:0f:98:10:62:c7:c1:0e:84:
86:5f:5a:cb:0c:5a:9d:66:48:dc:85:91:60:4a:54:
48:dc:d8:97:66:c7:98:f8:fd:83:3c:8b:e3:ed:e3:
fd:a5:52:c9:88:a1:8e:1c:59:17:2b:12:ab:67:13:
0e:08:f1:13:a7:b8:a7:15:72:c4:48:51:ee:16:1a:
38:a6:bd:ce:61:83:6c:d3:78:75:a4:f9:d3:1d:5c:
58:3f:82:c4:f1:d8:64:28:41:7f:25:21:72:52:96:
5c:9a:91:3e:71:52:44:3e:43:29:bf:e5:47:ad:3f:
5f:7e:98:7d:6d:76:fe:b1:78:dd:fe:d4:79:64:78:
06:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:64:DD:5B:F3:EC:A5:E3:DF:15:65:42:00:92:D4:AD:40:C3:65:F8
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6a:8e:d6:28:39:bd:f3:24:d4:d2:18:fb:db:a6:99:83:52:
eb:6b:00:28:8e:e9:a2:3b:c4:e0:93:3b:0e:7c:1e:67:c9:69:
de:90:28:16:00:a7:86:93:9c:43:b8:46:c8:f5:35:44:a7:9b:
4d:e6:38:b9:bc:e8:99:9a:88:d4:2d:33:8e:74:f4:14:68:f1:
5a:15:70:f6:b8:09:1a:6a:d7:bf:b7:5c:3d:1c:9e:08:99:88:
e6:fa:c8:1d:fd:30:02:14:24:20:1f:dd:78:29:3f:a7:83:19:
21:bf:ae:be:b4:26:f3:ff:bf:1b:41:30:93:76:2a:80:c7:8e:
14:4b:0f:7d:5d:da:c1:6f:09:21:bc:4c:dd:fe:97:c7:f9:00:
33:f3:0d:6b:df:dd:64:79:2e:04:51:07:00:06:2d:a8:84:a5:
96:dd:8e:7d:5d:f4:25:77:80:2a:9c:b6:b1:65:68:7e:c1:ba:
9d:7e:49:f9:26:97:70:2c:f9:26:0d:ae:46:ee:e0:fa:de:da:
2b:fe:b9:08:fd:14:44:b3:10:fd:76:6c:81:08:ee:b5:1c:ac:
31:a7:f6:67:b0:9d:14:5b:06:1e:cf:48:2a:d7:03:db:df:ba:
a7:6d:8f:15:0d:ec:32:e8:86:26:60:3a:44:22:de:99:89:f3:
10:e1:d2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:46:34 2026 by rpki-client