Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
File: PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft (raw, json)
Hash identifier: kOKk+UfdCDBUnaVC6sr7orkJoaitGXwT04AQYEpt1n0=
Subject key identifier: 84:7B:88:E2:A2:B4:FB:B7:A2:1A:CB:1A:3B:3A:C7:54:07:16:0F:E5
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial: 019F14C20DAC1E06AA8E711F991D86E8F3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
Manifest number: 16B2
Signing time: Mon 29 Jun 2026 19:01:29 +0000
Manifest this update: Mon 29 Jun 2026 19:01:29 +0000
Manifest next update: Tue 30 Jun 2026 19:01:29 +0000
Files and hashes: 1: OVRZqerAEA6FdBHYTHLhizGh3Lk.roa (hash: W21lAIvc4nqkkHrKrS73psgIVNPGbE549XUQirrqwIg=)
2: PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl (hash: 2ZvdjUic/fh07Gqt0Io5euT/fFd6UkuFrGn5BzqqKiE=)
3: e44guLfP35rbMYmq1et0-pJl0Xg.roa (hash: xefm7hUzpQcUW8PNo6qYp/Qx0pr2/QhPaTWWMRnSDm8=)
4: iDGiu9b2-5gZed1g0VFujNY9Peg.roa (hash: ZId1dGdqtQ2GMpbChYr39bY2N4BezjujTh90i4mM35w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:c2:0d:ac:1e:06:aa:8e:71:1f:99:1d:86:e8:f3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
Validity
Not Before: Jun 29 19:01:29 2026 GMT
Not After : Jun 30 19:01:29 2026 GMT
Subject: CN=847b88e2a2b4fbb7a21acb1a3b3ac75407160fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:56:a9:0c:f6:0e:a2:20:8c:7d:29:1c:e7:0b:
fb:f2:3f:0b:07:af:fa:c2:d4:d5:70:f4:bd:0a:21:
e3:a0:5f:f4:1b:ac:39:ec:b4:f4:96:8b:6d:54:87:
c5:5d:1f:aa:23:0f:f5:84:6d:3c:3a:e3:54:fc:11:
30:6e:2f:f9:1f:77:dc:32:fa:16:5c:d5:ab:28:dc:
d4:44:10:db:de:83:8e:ba:aa:fc:4b:53:64:9d:9d:
ed:28:44:b0:35:82:b8:ba:1b:84:1d:55:d9:39:c3:
d6:74:ec:be:53:21:19:39:a0:62:a9:8b:dc:fb:a5:
ed:19:60:eb:79:1a:90:5d:fd:e1:8d:20:8b:ba:d7:
8d:5d:ad:ae:49:1f:f2:32:51:ed:fb:13:0b:f6:55:
9a:5b:ce:a9:63:19:5f:2f:4f:51:0c:ff:b5:8a:59:
1b:66:fa:37:73:cb:92:03:40:d2:83:45:f6:06:c0:
5a:22:c2:ed:a2:58:07:7a:6d:1b:9f:81:af:ac:3c:
4d:88:a0:31:e5:09:4a:f0:c8:73:c9:57:88:99:05:
d3:06:d0:54:18:69:cb:4b:2c:3a:93:17:70:c6:73:
09:78:62:68:ec:5f:c0:5a:ec:6a:43:5d:72:22:34:
57:14:4b:97:58:cc:99:a4:8d:6d:09:f5:fc:40:98:
0d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7B:88:E2:A2:B4:FB:B7:A2:1A:CB:1A:3B:3A:C7:54:07:16:0F:E5
X509v3 Authority Key Identifier:
keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:45:97:5a:4f:02:0d:4f:3d:0f:b6:f9:43:b2:42:ec:5d:aa:
40:b5:cb:8b:2b:bf:c9:58:5a:1e:6d:b0:18:9a:c9:bd:9b:b5:
9d:7d:de:2f:b7:cb:02:3d:a2:bc:8f:e1:3d:08:45:dd:02:a6:
ef:5c:2b:7b:e9:e6:9e:fa:3a:f5:bd:43:11:11:f1:9b:c9:85:
d3:31:f3:e0:32:3d:98:aa:13:53:b4:5b:c3:0f:3f:3f:67:71:
17:23:15:ae:58:38:71:43:a8:59:c4:cc:8f:36:09:02:17:c8:
39:eb:f9:bc:34:66:7e:8c:df:88:5e:25:32:73:a5:09:50:6a:
83:0b:0e:5a:50:b3:d4:b1:eb:72:10:04:07:aa:56:41:75:c6:
7d:fe:88:11:b2:8e:8a:b7:e7:56:01:a9:44:ec:de:ba:7d:7d:
af:5f:4f:23:6e:cf:46:24:50:2d:45:89:ef:20:95:bf:96:9a:
ab:4d:4a:fb:2b:87:62:35:3e:60:bc:70:e7:f4:bb:9d:d1:fe:
dc:c6:e6:2e:09:0a:77:d7:a7:4f:53:cb:70:d1:8f:15:ea:85:
44:60:c2:29:37:5e:9e:af:cc:64:41:a0:52:60:2b:46:43:5b:
6f:5d:c9:1e:ee:c9:34:32:1a:67:17:c8:00:7a:89:90:2e:b9:
a0:95:3c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 23:18:38 2026 by rpki-client