Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
File: PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft (raw, json)
Hash identifier: H9HnLxs3YBClDkqA68LqblzOCskkfIKz3NNKiIhNIgg=
Subject key identifier: B8:CA:FC:D7:1E:2C:10:08:A9:F0:B1:39:9F:16:06:56:ED:51:50:1F
Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
Certificate issuer: /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Certificate serial: 019E9D0584C889C325F026BA85AF9DC9134D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
Manifest number: 1949
Signing time: Sat 06 Jun 2026 13:00:44 +0000
Manifest this update: Sat 06 Jun 2026 13:00:44 +0000
Manifest next update: Sun 07 Jun 2026 13:00:44 +0000
Files and hashes: 1: PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl (hash: USaW4LjfF1/0k5l63S1dC9qX0pXeifxgIq6IS+NInAw=)
2: m5c3Kp4r9aaG4JXnWoVgbW6fzLM.roa (hash: zFQk8P7qdiOsDme61W/zQfVewpw/uX39LK39s6ZU7J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:05:84:c8:89:c3:25:f0:26:ba:85:af:9d:c9:13:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Validity
Not Before: Jun 6 13:00:44 2026 GMT
Not After : Jun 7 13:00:44 2026 GMT
Subject: CN=b8cafcd71e2c1008a9f0b1399f160656ed51501f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b4:31:c1:05:88:cd:9f:00:7a:bd:7f:07:9b:
a1:d1:47:af:b8:2d:91:ca:53:d4:74:1c:4c:4b:58:
99:9d:43:a8:60:48:56:b1:cf:df:e8:d6:f3:b2:31:
7e:09:1c:de:40:63:a9:bf:60:53:a3:34:1f:e5:90:
38:f8:53:ac:a5:b9:f8:56:63:e8:3d:22:63:7d:26:
11:c9:db:ac:1f:54:b4:19:22:62:29:e4:f3:89:d1:
85:ab:01:36:0b:61:cb:89:1c:f3:15:b6:8a:59:fc:
c6:47:a2:7e:ef:7c:85:fe:62:07:28:8e:2f:c2:81:
eb:1b:69:9b:37:28:77:72:a3:7b:8c:2a:70:45:47:
13:26:f4:db:a5:24:d9:db:e3:b3:f0:4a:8f:6a:4f:
cb:44:b7:9a:4b:1f:84:14:bc:df:6c:6b:81:c6:cd:
2e:e2:22:71:38:06:98:f5:f7:a9:41:90:31:0e:2b:
c3:9c:fa:3e:99:16:d1:87:b5:7f:a7:9a:5e:b9:11:
13:df:ce:64:a7:26:60:dc:7f:98:27:af:99:7a:50:
54:42:5e:10:15:1d:54:fd:34:c7:bd:cd:00:c1:43:
9a:a7:62:35:6d:bf:09:05:ed:9d:56:6d:86:fc:cb:
4b:57:fe:10:f7:9a:a2:21:f9:42:c9:28:c4:94:d4:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CA:FC:D7:1E:2C:10:08:A9:F0:B1:39:9F:16:06:56:ED:51:50:1F
X509v3 Authority Key Identifier:
keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a6:8d:da:8c:fe:11:4d:c0:55:a7:31:e9:94:f4:94:a1:e3:
62:78:1e:b8:16:a9:6a:55:bf:6b:8a:f4:8a:85:93:b5:87:af:
aa:80:f4:1e:d8:3d:26:43:cc:7b:b5:d1:5d:33:0c:2b:1d:3c:
29:21:b6:10:96:65:66:9c:72:1b:08:4d:52:7a:df:49:69:2f:
8d:e6:6e:2d:c5:8c:6c:65:c5:09:63:41:e7:22:21:81:d0:67:
41:09:20:42:99:c2:c1:f7:6f:ce:2b:5d:66:60:bb:e5:a3:b8:
bf:ca:4d:7a:2b:71:e3:a8:bd:f4:6b:27:8a:0c:8d:8c:71:a1:
cf:5d:10:16:c3:ad:24:ff:1c:3f:48:89:e5:05:b3:76:ab:58:
55:e6:47:94:48:44:af:e4:6f:a7:c2:f8:d9:23:5f:cc:e6:b8:
12:48:16:d4:03:57:81:c4:84:f9:f8:57:6a:b6:0d:a6:73:36:
51:07:4a:34:df:74:b4:71:c1:a4:7d:51:b4:25:a3:7e:18:40:
2d:b8:f7:28:20:1d:ca:15:af:66:72:ec:78:58:52:34:37:b3:
7a:1c:0b:19:bd:e5:7f:c4:a0:d1:1b:70:61:69:ee:0c:23:09:
82:6f:6e:e4:c7:1d:92:08:a3:e8:cc:94:01:10:45:a4:cb:fa:
58:f3:32:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:26:15 2026 by rpki-client