Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
File: pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft (raw, json)
Hash identifier: i7/6O1M2pDPkcuu6lo137kPSHdk0F1t0OujdP37xDNU=
Subject key identifier: 6B:C1:42:CF:8C:CC:32:A3:7D:C8:2B:DB:5B:31:A5:71:A9:27:B4:0E
Authority key identifier: A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
Certificate issuer: /CN=a4537cbedad356819cbc77ae3fca17d65431c280
Certificate serial: 019F42408945E3686788A0EE65104CF5B71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
Manifest number: 17
Signing time: Wed 08 Jul 2026 15:02:33 +0000
Manifest this update: Wed 08 Jul 2026 15:02:33 +0000
Manifest next update: Thu 09 Jul 2026 15:02:33 +0000
Files and hashes: 1: AmJH-oKP8JDfCGjtvLBdScjcl94.roa (hash: JYSfH/iBbNzkn+YYYr8OyA3qLrDl+3bHlmfyOFI1Y70=)
2: BnfQ_AzrFoZh3KLGYso6JJ9GXdo.roa (hash: ENsW9JPhfPIhP5yk5NQtzakTi0pxm6wJtb9Q7w/b4ZM=)
3: FBnng7ak4AJweaj7mNiiDGPhP-A.roa (hash: 7O6BMYqqhyaPH6JejfjvmE43i9bE4Safke5zHGTaAxk=)
4: NwJicw-oNTpUA4v64y45-zeOf4g.roa (hash: INZDhCKr9gd0n290T2UKiTgj0PQTfi5Y3hHK5PYeBA0=)
5: aZqL4PQIRKXk-Nf9g8MWjRBJYWY.roa (hash: oswi/PqLXiY69b2lF56784lBrhIisxDRepTm/CrpEY8=)
6: pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl (hash: FBohCF3wHF2H1XnXfB/wFGtBjp2o53GvNYYPOQSJ0VM=)
7: qThwM4VOPtwJ-fORifwyTLzk-FM.roa (hash: inwDpdNUtTVuD4hxozBiGnVD6vXL05h5rizEBbo4mSI=)
8: vlQgVNHMOMDCgexHalesjIDPMos.roa (hash: NKNm5ZfHR4kcXtf4m4rKT2uIMrcP5kuQXn9iZz+SX+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:40:89:45:e3:68:67:88:a0:ee:65:10:4c:f5:b7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4537cbedad356819cbc77ae3fca17d65431c280
Validity
Not Before: Jul 8 15:02:33 2026 GMT
Not After : Jul 9 15:02:33 2026 GMT
Subject: CN=6bc142cf8ccc32a37dc82bdb5b31a571a927b40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:81:86:37:4f:04:c4:bd:6e:2f:53:df:57:
0d:86:77:f8:59:34:f6:77:ec:19:d0:77:39:dd:e4:
f8:74:cc:17:c3:73:dc:a8:50:98:78:10:14:9f:91:
1b:89:bd:b7:7c:b6:d1:4d:4d:50:e8:c6:da:42:ed:
ae:1d:47:5f:f7:40:96:7a:e8:fb:f1:49:6a:f7:c3:
fa:6e:b6:3a:36:3e:e4:e2:bb:29:2d:6e:f2:cc:08:
c8:b3:5a:ec:4a:48:87:42:56:14:be:28:c1:31:ff:
ac:8f:fc:df:c3:93:39:b9:6a:58:a1:01:0f:3b:ea:
f1:d9:e6:b4:23:ce:cf:54:a3:a1:e4:4f:0f:da:d7:
f7:88:22:ae:a4:e5:f5:9d:27:d9:a0:e6:fa:18:46:
82:54:bc:78:91:19:d2:95:48:bf:7d:bb:45:6f:1b:
8e:e9:80:46:5c:b6:d0:91:5b:3b:dc:6d:52:d1:fe:
5a:8f:53:11:83:66:8b:ad:76:7d:e8:49:d7:46:e9:
54:0b:e1:96:4b:45:34:29:8f:80:94:08:b9:10:da:
03:7d:c2:89:0d:dc:09:1d:a3:23:c1:a3:48:0e:71:
ea:4b:4c:de:11:01:8d:52:53:f2:8a:53:f2:f7:7b:
2a:aa:01:da:b7:31:ae:72:2f:c3:47:93:a7:ce:43:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C1:42:CF:8C:CC:32:A3:7D:C8:2B:DB:5B:31:A5:71:A9:27:B4:0E
X509v3 Authority Key Identifier:
keyid:A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3c:2d:90:ae:4e:fe:10:9b:b2:55:1e:46:8e:74:8e:04:fd:
52:6a:ef:fa:eb:ac:b8:18:76:a6:ab:b4:82:80:81:0c:14:2a:
8a:b8:09:3a:06:06:fa:5b:c9:58:5a:1c:14:43:fb:4f:17:d0:
0c:b2:b1:07:89:82:f0:78:79:92:6d:0b:fb:d1:95:db:e1:3e:
dd:2b:bf:2e:8d:c8:4e:fd:45:ca:5a:f9:38:ba:2d:61:10:6a:
9d:5f:8b:63:e1:ab:02:0b:df:b4:c6:3d:c3:6f:46:5f:e5:0a:
37:69:9c:28:00:b4:c8:c6:57:94:c3:75:35:72:9d:2f:2c:d3:
b7:77:44:75:ff:e1:be:8f:2e:f8:54:9a:1c:27:45:e3:18:21:
b0:b3:ba:9b:b2:9e:56:83:45:09:f4:38:30:83:2e:cf:a7:c7:
65:32:4a:02:a6:6a:0b:76:10:3b:fa:13:c8:22:95:ae:01:29:
05:6e:02:b0:1f:23:f3:06:0f:0d:2e:b7:d8:6c:4d:80:a7:4a:
1d:04:76:d6:74:2a:44:e3:2a:1e:50:5b:97:1d:22:66:be:58:
de:35:e3:44:0b:25:b4:2e:49:5b:fe:ab:b5:51:e5:65:f8:de:
b9:08:c9:b1:d8:71:4e:98:ad:ec:6b:ef:7c:6b:60:7b:16:e6:
a8:2a:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:46:07 2026 by rpki-client