Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
File: pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft (raw, json)
Hash identifier: NKw3+yH6CYQorPSigRpNfrQQMpp/k0QZ6C/aNl5Q/+Y=
Subject key identifier: 0D:07:53:CF:29:46:98:69:E0:2A:FB:7C:76:77:A5:05:10:62:58:75
Authority key identifier: A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
Certificate issuer: /CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Certificate serial: 019EB87C8D7686669452C89BE3A3494EEDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
Manifest number: 123C
Signing time: Thu 11 Jun 2026 21:00:30 +0000
Manifest this update: Thu 11 Jun 2026 21:00:30 +0000
Manifest next update: Fri 12 Jun 2026 21:00:30 +0000
Files and hashes: 1: LlCo-cr1TvaGSEsvi_aeztFDrsY.roa (hash: ONGlxNxuG7wwvZScxkyZsCMFDhxVuAnR+LQnLfg7tcI=)
2: pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl (hash: Ak+Bv4WB2WCGF52Mc2+Y0A6jOinIi9PSDluoq+FB0uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:8d:76:86:66:94:52:c8:9b:e3:a3:49:4e:ed:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Validity
Not Before: Jun 11 21:00:30 2026 GMT
Not After : Jun 12 21:00:30 2026 GMT
Subject: CN=0d0753cf29469869e02afb7c7677a50510625875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:9d:8f:13:a9:ae:bb:87:67:25:94:bc:e8:
85:4f:d8:f7:5b:d6:92:fb:1a:06:48:7d:b6:2e:9c:
e2:2a:d4:7d:05:53:89:11:ed:4e:9b:dd:cb:17:ee:
ea:3e:39:64:e0:0b:f1:74:5a:50:73:1c:4b:40:7c:
fb:d8:59:2b:96:ab:80:1a:78:da:35:19:08:eb:9f:
79:34:16:79:a3:f7:b2:4b:10:f1:e6:c2:2c:58:77:
39:1a:84:2d:9a:b6:a7:82:41:91:d5:58:2d:be:44:
ef:28:e3:aa:1c:34:8a:99:60:33:f7:29:c3:b9:fa:
9c:8a:e1:b4:6d:3b:ee:9e:37:72:52:0b:fb:a3:ab:
49:96:ff:de:b7:ab:2e:2b:b3:fe:7e:39:95:8f:02:
50:58:3e:0a:1b:86:a3:7f:20:cf:cb:95:9d:bd:b9:
23:39:e0:e3:39:26:70:c9:48:b1:37:cc:fb:e6:64:
65:d5:e9:18:a0:a0:b7:37:16:62:3c:8b:b2:bd:bc:
d7:cb:b9:94:dd:33:e2:bd:d2:53:78:32:5e:f3:f9:
37:bc:9e:91:21:89:d4:eb:de:63:f6:87:5b:df:56:
cd:6c:c8:77:c7:fa:f4:f0:5d:ba:39:28:bc:cc:69:
2b:22:8a:a2:69:3e:44:f0:83:58:a6:bc:f4:01:8d:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:07:53:CF:29:46:98:69:E0:2A:FB:7C:76:77:A5:05:10:62:58:75
X509v3 Authority Key Identifier:
keyid:A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:02:39:32:b0:66:b1:2a:68:8e:c3:43:91:2a:6d:f0:3a:ed:
5b:17:d0:2a:d3:eb:6d:b0:a8:88:a4:ac:c8:41:d1:d1:11:5a:
f7:83:7d:8f:ae:c2:63:de:c4:13:e9:31:4f:84:ca:59:62:f7:
6a:18:50:d3:6f:27:07:1e:d8:3d:2f:ed:ab:be:ea:0f:99:e6:
83:6a:e9:1c:15:da:ed:41:b0:d2:99:b0:d3:65:61:51:34:e2:
ed:15:69:f3:97:c1:c8:39:67:36:ba:a3:5f:6f:63:c2:db:03:
f1:11:49:bd:f5:a4:24:ab:70:7d:9c:4b:b6:cb:4f:6c:01:97:
69:e4:09:e3:db:53:95:b5:7b:c9:b5:f1:43:4c:81:fb:50:29:
d3:48:9f:b6:0f:f5:72:bc:52:3a:7a:c2:11:3a:2e:01:1b:c8:
28:85:64:9d:36:58:43:3f:82:1a:0b:57:4f:9b:ed:aa:ec:10:
56:82:45:20:b8:a3:01:13:ac:93:15:01:19:55:47:b7:1a:f6:
8f:b9:17:95:27:1d:af:00:76:87:8b:6f:4f:fc:91:82:88:13:
b3:71:e7:a3:65:ce:29:b2:9f:bb:4d:87:d9:a8:00:d9:19:32:
38:4e:b6:53:06:64:e7:56:62:a6:24:f6:f5:7d:f5:a0:b1:d7:
e5:08:46:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:41 2026 by rpki-client