Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
File: pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft (raw, json)
Hash identifier: 4pLA1rfoDHI0fujSyK66f2r6K0OY7ejQbULkTiYzPPk=
Subject key identifier: 62:35:4F:91:F2:68:DB:03:4B:20:0B:7F:8A:35:F7:94:AC:1D:53:85
Authority key identifier: A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
Certificate issuer: /CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Certificate serial: 019FA228EF97608BD6517B2213799A57D905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
Manifest number: 12B5
Signing time: Mon 27 Jul 2026 06:00:19 +0000
Manifest this update: Mon 27 Jul 2026 06:00:19 +0000
Manifest next update: Tue 28 Jul 2026 06:00:19 +0000
Files and hashes: 1: LlCo-cr1TvaGSEsvi_aeztFDrsY.roa (hash: ONGlxNxuG7wwvZScxkyZsCMFDhxVuAnR+LQnLfg7tcI=)
2: pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl (hash: MHk4AXGjY3JP1wko9y0n7RBFdtmA7bFOY2d5efTZjSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:ef:97:60:8b:d6:51:7b:22:13:79:9a:57:d9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Validity
Not Before: Jul 27 06:00:19 2026 GMT
Not After : Jul 28 06:00:19 2026 GMT
Subject: CN=62354f91f268db034b200b7f8a35f794ac1d5385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:75:44:53:b2:ed:c1:87:e2:95:86:eb:36:
0e:04:18:f3:bb:f3:a6:03:43:67:fd:0e:cf:43:bd:
f3:96:b8:09:31:72:67:2a:d3:15:66:11:60:d1:1b:
61:5f:19:4f:30:42:4d:2b:1f:25:d0:c9:bf:72:2f:
cd:f7:6d:07:25:67:bf:a4:1e:f0:e2:f7:d4:74:e4:
6c:f3:f7:9d:ae:c4:7f:01:a4:01:6a:ff:1b:3e:f5:
ea:82:40:43:d1:b9:a5:64:20:96:63:e1:a1:1a:64:
86:ab:89:7f:79:b8:22:f0:1b:f7:65:cb:07:32:6d:
9d:c0:6d:3f:db:2c:56:3a:93:78:e0:f3:16:3d:07:
ea:65:02:d3:d0:aa:79:ce:e4:6f:18:17:86:42:db:
61:d3:d9:6e:15:79:3a:37:24:49:b4:82:d3:10:7a:
ce:d0:1c:59:12:c2:a5:59:60:dd:fe:84:4c:07:2f:
45:ee:0c:32:6c:2f:1b:ed:d2:2f:e0:eb:9b:a7:b7:
b2:1b:65:64:d5:6f:00:51:c6:ac:08:c2:d7:e0:8a:
33:83:83:9f:46:c8:7d:0a:77:8f:6d:8e:40:93:bd:
72:b2:20:68:21:20:24:8b:c3:a8:43:d2:11:2b:dd:
4c:9f:4e:8a:a5:58:65:2b:b1:a3:77:05:51:05:57:
bd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:35:4F:91:F2:68:DB:03:4B:20:0B:7F:8A:35:F7:94:AC:1D:53:85
X509v3 Authority Key Identifier:
keyid:A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c7:d1:17:c8:82:7f:37:d9:d3:f2:d9:ea:30:dd:c4:3a:68:
fd:52:84:45:71:41:66:f2:98:03:37:a6:f4:ba:24:66:37:05:
2e:24:94:43:93:2d:08:cd:f4:dc:a6:92:01:1b:9b:99:8f:d1:
fd:d4:5d:8e:90:f4:08:49:43:c7:ee:dc:ae:d6:96:4b:6b:ae:
33:41:70:fc:ef:45:af:3e:3a:4b:fe:0f:f0:ca:f9:d3:08:31:
ad:57:b1:73:e2:49:5f:d8:5c:e3:0c:09:18:fb:f5:63:58:f2:
2a:9c:fd:4b:27:2e:70:f6:7e:5e:87:b0:b7:ea:3e:a9:81:95:
56:0c:f6:db:79:fb:ad:80:31:fd:93:8d:24:0c:34:4f:55:e6:
17:25:2d:0e:5b:b4:e3:ca:59:e0:3c:6a:65:26:a1:88:2f:e3:
35:e3:15:b1:1a:ab:3e:2e:ea:13:12:24:69:0b:41:83:3d:16:
7d:0f:a5:7a:b0:12:92:85:9d:ad:7b:3a:56:a2:66:68:17:66:
e8:39:ce:3b:64:cc:29:a4:ae:d8:ea:0a:aa:87:54:64:68:07:
60:4d:9f:1f:f2:89:78:90:cb:67:7c:ee:a8:fd:99:28:f8:e3:
90:9c:81:1c:af:cf:c3:6f:ef:0a:7b:1c:33:21:03:04:1a:f1:
5e:66:64:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:20:14 2026 by rpki-client