Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
File: pi8tPCadk1InaQsot_vdlT4entw.mft (raw, json)
Hash identifier: TGCHNQA3zo7sojb+FEUMItcpVQmB6B1hemGlAVOOP4c=
Subject key identifier: E6:FA:2D:60:10:D3:68:EF:CE:06:07:E2:B2:39:0F:6C:9A:9A:F5:B6
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Certificate issuer: /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial: 019DD051274727E7EB2990CC57225D4D0EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
Manifest number: 0D9B
Signing time: Mon 27 Apr 2026 19:01:12 +0000
Manifest this update: Mon 27 Apr 2026 19:01:12 +0000
Manifest next update: Tue 28 Apr 2026 19:01:12 +0000
Files and hashes: 1: 8hDvXAFXtwTiaPxitWHApgLE65k.roa (hash: EiRwFtmOo1DVVx7O1xctBpgvgnvAfczha5+H5oxZvkk=)
2: FrgtLDHlGMWP7-Ol00IvZZoBesM.roa (hash: T567K72LlQfx3PglnXUfayy6bFn0FIimheQaqSUapwY=)
3: PIBAi-NbloODmSiDeKc6jb9ihv4.roa (hash: R3IFcDR+URbSvkybKJ/Sj9TwLvQjyr3A69qpjrCDlEE=)
4: ga1BrMjD7wY_QoN5ExMTad0kou0.roa (hash: /2/Lg7lZekU4p6NvtnYYz9mRfacgER7O7n79Ibm5W4s=)
5: lplNqf06vua3DkgbqqhwRpQX5y4.roa (hash: yaa0RKonl28mWEtrN2B7tlLyBAqCTM4woPMQSkOo7wE=)
6: pi8tPCadk1InaQsot_vdlT4entw.crl (hash: beR/uAp6TcRDLVUNnaE1JHV7CMya3bdbpOUUAi3as1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:27:47:27:e7:eb:29:90:cc:57:22:5d:4d:0e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Validity
Not Before: Apr 27 19:01:12 2026 GMT
Not After : Apr 28 19:01:12 2026 GMT
Subject: CN=e6fa2d6010d368efce0607e2b2390f6c9a9af5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:3c:c4:78:14:d3:bd:00:86:78:63:96:39:
e2:5d:27:1a:90:f4:7b:c4:c2:62:01:f1:f7:fa:e8:
5a:21:76:1d:09:a4:6f:29:ef:08:b9:a6:80:65:c1:
4b:da:34:ca:27:44:8e:5d:b1:56:12:35:b6:a4:1b:
e6:6b:46:6c:70:ae:32:e1:a8:e2:02:d1:91:e9:be:
c3:06:19:c3:00:2e:62:55:43:0c:e5:7c:ff:27:25:
45:da:9b:d1:7f:e2:63:3a:4c:f9:88:fb:af:c8:84:
a0:fa:59:27:a5:d2:39:dc:62:fc:b7:42:23:19:db:
c8:38:60:15:31:9f:f6:53:d6:b1:d7:97:5d:a3:ae:
01:20:91:7f:f0:6e:b7:6a:d7:4b:a1:87:5f:28:04:
74:5e:f5:01:3e:e4:44:3d:ed:ee:9d:3f:c1:a5:d5:
72:94:5a:c4:b8:c9:96:9c:18:a9:c2:a8:a6:0d:bc:
56:c8:89:1b:0b:2e:93:84:b2:41:88:33:d6:21:10:
df:da:9c:e1:b1:e1:35:d2:66:de:30:e0:be:ab:b4:
28:07:87:15:6e:73:3b:28:de:90:ba:fb:c0:6b:b8:
87:bc:0c:6d:33:b4:2f:82:91:06:8c:40:04:26:da:
47:0f:b8:ee:19:77:f7:1d:f1:73:0e:77:b5:96:d0:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FA:2D:60:10:D3:68:EF:CE:06:07:E2:B2:39:0F:6C:9A:9A:F5:B6
X509v3 Authority Key Identifier:
keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ae:fe:c9:50:a0:96:3c:88:6c:09:06:3d:93:24:31:f7:e2:
e2:31:eb:a5:b9:21:5f:f3:01:ce:c1:9b:b6:21:c4:59:f4:8c:
85:0b:ce:66:86:af:0c:df:26:1e:a0:de:c1:95:b4:c5:db:2f:
c8:e4:fb:00:b2:5e:05:06:e3:2b:ca:2e:4a:7e:1f:a5:1a:83:
bb:62:60:91:7a:39:27:f8:c6:bd:a8:7e:18:b3:47:74:e2:58:
7a:c8:8c:3c:5d:56:f3:d1:88:28:db:9b:b4:54:d4:81:3e:06:
0a:ca:6c:01:5b:a6:ff:f4:40:61:09:0d:90:a5:db:e6:74:5d:
75:0d:74:86:c0:07:3d:f8:cf:dd:42:41:dd:1d:b2:b0:85:d7:
b3:64:e6:2c:cd:65:66:c1:a9:f8:5d:50:1f:41:c3:66:fb:50:
83:66:92:04:32:5c:2f:75:df:d0:74:84:a7:39:5c:92:51:70:
8c:77:a6:cd:df:cf:ee:21:59:3b:6a:e8:dc:0c:a3:0c:8f:8e:
a9:bb:46:80:e2:b7:02:94:94:bb:f6:87:57:8b:84:16:cb:08:
c2:48:31:fe:1a:1a:4f:6c:44:9b:4b:0f:af:d2:7f:0b:27:fa:
22:57:94:31:ae:e5:ca:c0:d8:15:03:40:15:73:0f:f9:19:be:
0d:89:fb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:24:24 2026 by rpki-client