Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier: 4bp1yAtPKb/oOniw5fDuwOTocSGvI8EQnTXeTqigcgo=
Subject key identifier: 9E:C0:25:3B:C8:3A:10:1C:EB:FD:5B:D9:58:3A:BE:09:4A:F7:69:5A
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 019F13AEF44C342B38007E9E4AD6160933E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number: 0320
Signing time: Mon 29 Jun 2026 14:01:00 +0000
Manifest this update: Mon 29 Jun 2026 14:01:00 +0000
Manifest next update: Tue 30 Jun 2026 14:01:00 +0000
Files and hashes: 1: jYQejTs_VCB1cpCr7qrPeVI5_VI.roa (hash: RuEfXGQ8FdYs+It13SdSHwiFRFM5ZGec+HI06Kuq/Ik=)
2: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: +Gx+ijWQqfn1dGEcx9+IYLfdsVPuHDCsHKTmYBXdoTU=)
3: sIQZHyrMKrx0aGLhGaxyLwG43WI.roa (hash: 1DHs9q3U0NDHbbr1v8UvKlsFj4sQc1jDRLQRmJtbDIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:ae:f4:4c:34:2b:38:00:7e:9e:4a:d6:16:09:33:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: Jun 29 14:01:00 2026 GMT
Not After : Jun 30 14:01:00 2026 GMT
Subject: CN=9ec0253bc83a101cebfd5bd9583abe094af7695a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d3:b1:64:21:a2:c3:b2:28:cc:4e:70:b6:ea:
45:78:fa:16:d7:9e:50:49:5e:71:b6:5e:ee:64:26:
54:75:12:ad:b1:45:c5:71:46:fd:04:eb:95:ec:24:
66:c5:c9:33:ef:ee:61:78:94:63:ea:14:56:90:f6:
43:ba:8c:02:ba:92:06:fc:d5:30:1b:a3:af:cb:22:
60:da:ec:f2:df:b9:30:9b:5c:b5:ea:78:6f:d2:49:
ae:06:50:95:bc:b1:ff:cf:bd:7b:2b:e9:b3:02:8e:
93:91:71:35:6a:3a:bf:66:67:2b:20:4d:9c:77:bd:
e7:ac:d4:24:0c:24:e5:51:31:44:a8:05:09:31:0e:
f5:d4:27:65:22:be:cc:4d:69:c7:7b:a2:13:0d:e0:
13:56:a9:55:45:44:2d:51:1f:67:2c:8d:3d:bb:42:
b1:fc:55:24:98:6e:ad:72:a9:9f:4e:2e:5e:66:b6:
79:94:7f:29:90:91:6f:bb:70:fe:60:4b:cb:17:22:
8e:b3:ea:cb:21:11:72:1c:27:db:1b:ce:8a:af:6b:
97:67:c9:47:df:2b:6d:3d:92:f6:07:bb:71:2e:0b:
99:b7:39:e5:0b:42:2d:ff:22:df:fc:dd:0b:07:10:
f4:c0:2d:f3:3a:ab:40:38:65:19:2e:c9:4b:dd:0f:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C0:25:3B:C8:3A:10:1C:EB:FD:5B:D9:58:3A:BE:09:4A:F7:69:5A
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:4b:c9:c8:bd:98:39:d2:57:c2:af:92:61:23:4d:aa:bf:6d:
95:0e:28:97:26:fb:37:e5:09:c3:57:73:60:5c:37:4c:70:01:
2f:b6:2e:e1:f3:3a:ff:f5:65:33:d5:08:74:69:0c:c1:a9:32:
7f:81:2d:32:30:3c:f0:02:7f:27:66:2a:5b:34:83:96:b8:5e:
67:8c:5d:a3:00:ed:e6:75:d5:61:ef:cc:b7:81:00:2c:e2:8d:
ef:26:25:b6:4f:88:91:5d:20:69:94:bf:07:ba:2f:df:9a:c5:
9d:67:ab:94:8d:62:02:25:2c:46:e2:98:bf:9c:b0:cb:d8:37:
aa:b8:31:3d:b1:80:e5:5b:4f:60:c0:cb:34:04:a2:8c:ff:48:
04:59:46:d9:eb:f4:c4:b8:71:79:78:23:35:8d:57:99:ee:65:
40:ac:6c:4e:4e:8f:20:a8:25:ce:f6:99:ef:17:1f:21:90:54:
81:0a:b0:32:f8:37:82:b5:54:14:39:9c:02:54:18:e0:b0:69:
a4:7c:0a:d9:84:a3:e5:0d:11:87:68:3a:93:2a:15:c7:b5:a8:
89:c3:8a:27:0a:10:e0:f9:f8:f8:24:4a:fe:d1:91:e8:07:22:
02:28:93:27:a3:ac:3c:d8:e2:e9:a8:2e:01:3d:ac:aa:84:d0:
38:15:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 23:14:00 2026 by rpki-client