Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier: frVkQuGXkpfoJDmgYb6daNO0taHfTLn7G06KItTqZrY=
Subject key identifier: 4A:8D:A9:AA:6E:7D:52:18:AC:E9:75:CA:39:90:77:5B:01:CA:E2:F1
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 019EB9C666AAA4019823BDF4FEAB19083A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 03:00:47 +0000
Manifest this update: Fri 12 Jun 2026 03:00:47 +0000
Manifest next update: Sat 13 Jun 2026 03:00:47 +0000
Files and hashes: 1: 5ApvAMni12n_Tl97hQfErFu1d6c.roa (hash: CMR/4LXkDxQdsem1khNHlRD0gmxgV2kLwB9hrxJKQb0=)
2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: 1Yi61pZIshTox0gf+6aFwEmhbwkI4Pm7fXTzPLtykrU=)
3: XuBRU-qTaIe3iIMhEcyOCN_o1WE.roa (hash: aMfF2+emhhqGrwHfGQBas1ojIcyc28sSmp2XmBjy3No=)
4: kq8a46tLEeqaFqiTieRfOg3LWKo.roa (hash: qYlRFmIgG79GEajldFvoiEkS/VYV56G5bugYQU8ZN5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:66:aa:a4:01:98:23:bd:f4:fe:ab:19:08:3a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Jun 12 03:00:47 2026 GMT
Not After : Jun 13 03:00:47 2026 GMT
Subject: CN=4a8da9aa6e7d5218ace975ca3990775b01cae2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:93:85:f8:ea:1d:ca:55:cf:86:c2:0a:92:
5b:71:be:0a:87:a4:1d:c7:99:cd:ba:d9:84:0f:ab:
c0:62:c3:11:a2:9c:9b:d9:a9:81:6e:8b:a2:4a:6e:
db:46:41:7b:87:1c:77:98:bd:73:28:dd:a8:6b:84:
09:e4:67:02:92:21:08:04:94:55:4f:26:0e:c3:89:
43:0f:35:bd:b8:e4:51:fc:bb:43:4b:1d:ec:81:cf:
e5:65:a9:71:40:4c:47:8b:ca:0b:be:e3:b1:7c:9a:
75:b0:81:6b:66:7a:64:cf:37:a1:63:28:45:7d:7a:
29:ab:9e:41:54:ed:94:42:33:21:5a:04:71:20:fe:
98:85:f6:ec:9d:09:57:51:1d:3d:5e:76:6f:a1:00:
8e:8b:3d:43:f9:5c:7f:8d:a8:21:9b:18:44:66:5b:
f4:64:54:57:f3:54:bf:bf:43:d0:77:5c:6b:1a:04:
c2:46:56:b2:cf:0b:86:bf:7e:21:53:52:e8:d1:1c:
a9:75:7c:e6:11:59:6d:ae:5d:e2:54:63:a7:38:27:
a1:c6:ce:44:a9:cf:ec:c5:3f:6b:02:57:96:ed:51:
ce:c6:2f:b9:0c:31:5f:e3:04:54:ef:94:32:58:72:
cd:26:5a:ac:c7:fb:03:f3:8f:7a:a0:1b:04:8b:90:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8D:A9:AA:6E:7D:52:18:AC:E9:75:CA:39:90:77:5B:01:CA:E2:F1
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:28:dd:a7:9d:ba:5a:d3:8c:dc:01:e8:19:3d:29:62:92:e7:
60:d9:1c:fa:73:46:8c:33:ba:f9:f8:36:f5:67:48:f7:67:7b:
06:c4:0d:97:1e:6f:5c:5d:32:52:f0:1b:24:fe:46:5a:fe:b6:
87:33:ac:83:10:6e:24:82:c1:0d:a9:21:de:6d:06:4e:fa:29:
e0:2d:67:b2:03:26:95:57:22:f1:5b:f7:7c:98:9e:4e:c4:2c:
84:b3:dd:47:37:5d:74:04:f0:8a:7d:3a:b5:df:c1:a6:55:32:
61:94:2a:67:94:d9:84:5c:70:37:64:d5:7d:3f:0a:38:49:c9:
d2:67:33:a9:7c:b6:9d:86:12:41:31:a4:33:27:08:fc:5a:8b:
dd:ef:54:e5:67:fb:0b:ac:47:ab:93:5d:35:f9:3e:bb:c7:6a:
9a:73:f6:a8:20:4a:34:cb:bd:aa:0e:20:fc:88:cb:87:08:de:
0b:63:63:65:41:0f:3e:44:45:2f:62:0b:a8:39:39:51:af:68:
c3:2e:b4:ed:e6:71:67:c7:83:53:f9:fc:7e:22:b1:23:9b:ae:
ac:48:74:08:a1:ad:1d:61:0f:eb:64:c6:5e:a1:bb:97:c9:25:
38:c4:c5:bd:82:ca:39:44:58:0a:ce:b2:3a:c0:a2:6f:24:c7:
34:82:a2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:42:43 2026 by rpki-client