Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
File: p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft (raw, json)
Hash identifier: VioSOdvM3MQvKrtEOu5OGgePmeW617GDXkpZ5HmyxUE=
Subject key identifier: 64:26:56:D2:27:AF:33:45:C6:CB:69:CF:90:AD:80:8A:95:07:F1:F6
Authority key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
Certificate issuer: /CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Certificate serial: 019EB9589E81B2A38AA9888C0190D04E0755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
Manifest number: 095E
Signing time: Fri 12 Jun 2026 01:00:53 +0000
Manifest this update: Fri 12 Jun 2026 01:00:53 +0000
Manifest next update: Sat 13 Jun 2026 01:00:53 +0000
Files and hashes: 1: 8HLfSggRfCQKqxfP5-UeXb00I7g.roa (hash: Z2nghP6xwioSl3jH3QUVmpIFKFZILHts7G8PmuEqq+Y=)
2: CYXPumOChSdoMa-5o0FCbfSsOYE.roa (hash: Ki1vUDNQjiNnTFWXimQLwQJZU9YwEW1064X+1jbc6MM=)
3: p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl (hash: srd1UHSLBUm5wcr28tkam6sIBy+X+n0NyBzcLXIECLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:9e:81:b2:a3:8a:a9:88:8c:01:90:d0:4e:07:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Validity
Not Before: Jun 12 01:00:53 2026 GMT
Not After : Jun 13 01:00:53 2026 GMT
Subject: CN=642656d227af3345c6cb69cf90ad808a9507f1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:1e:db:e6:ee:cc:b0:0c:1a:f0:d4:61:ea:
f6:cc:a5:39:50:14:0a:9b:2e:5d:ca:c1:9a:23:55:
f2:38:90:9f:70:26:b9:04:5e:61:a3:1e:81:5d:cb:
35:f3:ff:d5:77:38:9d:e5:ad:b3:05:09:0d:28:a5:
33:ef:38:27:98:ea:fb:be:5b:3b:dc:dd:23:6e:5f:
67:c2:84:1a:f9:82:94:8c:f1:79:0c:9a:6d:0d:a5:
7d:09:bf:7b:6f:cb:4b:d9:50:43:12:c6:08:6e:68:
50:fd:56:99:74:70:c2:62:93:05:82:00:7b:f2:29:
b7:6e:09:a8:c3:69:c9:f2:8e:f5:97:89:e1:9f:63:
f4:6a:d8:5f:2c:91:5e:d2:9e:d2:b2:af:18:53:8e:
7c:95:ec:cc:d4:6b:ae:cb:40:48:9b:78:92:da:aa:
62:f8:ac:9c:2a:f1:ff:e5:14:6a:a6:c3:84:b2:fb:
9f:fc:ab:ec:6b:98:83:29:4a:99:a0:c9:b6:bf:18:
c8:69:97:46:86:bd:77:6d:5b:29:9e:80:f4:47:49:
b0:8a:74:0f:43:95:67:be:b5:1d:26:93:89:ee:c9:
73:47:80:85:de:0a:60:af:65:ed:86:63:f9:08:94:
67:62:f2:19:c2:30:02:26:e3:0f:3d:7c:14:68:62:
dd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:26:56:D2:27:AF:33:45:C6:CB:69:CF:90:AD:80:8A:95:07:F1:F6
X509v3 Authority Key Identifier:
keyid:A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:68:6f:c2:40:08:a0:27:7f:db:ba:0f:7b:da:e3:c3:d0:14:
70:44:ea:5b:70:a9:2a:67:b1:4d:80:ae:64:7c:a3:15:93:08:
ec:ed:20:16:07:d5:ed:08:08:74:34:4e:e7:7e:3f:3b:b6:a5:
57:7d:57:11:ae:8b:ff:c2:e6:a1:67:68:ff:6e:99:9a:4c:ce:
7d:db:17:12:cc:46:31:ed:26:35:f1:db:ee:48:7b:45:05:6b:
6f:38:ca:57:48:8b:5f:a8:34:13:68:1c:a9:7c:e9:90:87:52:
8f:80:2f:cc:a7:f5:6c:c9:09:91:c8:09:fc:2b:a9:e3:6e:01:
49:00:ad:da:b1:ce:9c:d0:bb:3b:0d:f7:a4:95:c6:ff:ed:48:
c5:4d:74:f3:77:d2:11:3a:4c:89:e2:45:ab:3f:93:64:c6:3c:
24:02:5e:6b:89:07:ba:48:c8:49:b0:db:b4:6b:25:4e:02:cb:
85:56:a6:6b:c4:1c:95:af:f7:7a:c5:7b:5e:0f:fd:85:6e:97:
2d:17:1a:58:da:e6:b5:dd:8a:bc:bc:1e:43:38:ba:0c:6e:4d:
32:bc:26:04:fe:0c:ed:29:b5:99:78:58:05:74:f4:d4:68:d5:
79:20:ad:d0:96:a3:ba:88:4e:0c:aa:47:fe:72:86:00:f9:60:
ff:cf:df:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:39:30 2026 by rpki-client