Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: BA5r126G9B7GYYfLHrKLtdQcUyjFXVjq44devMtNr9c=
Subject key identifier: 33:90:2E:0A:92:61:FF:0E:A4:00:09:ED:67:CA:59:87:89:A9:55:DB
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 019F28B6DAD5435B31D9ACDB2CBF87461E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 0C1D
Signing time: Fri 03 Jul 2026 16:01:39 +0000
Manifest this update: Fri 03 Jul 2026 16:01:39 +0000
Manifest next update: Sat 04 Jul 2026 16:01:39 +0000
Files and hashes: 1: XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa (hash: wAuwL6Iz2Pwm9WGIInMjcsxZMvhkc1vHutS+nMnQpa8=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: Ft5R8n5Ie2zRDx+qPFZxjrStKOyz4a5TBq1+h0sRg0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:b6:da:d5:43:5b:31:d9:ac:db:2c:bf:87:46:1e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: Jul 3 16:01:39 2026 GMT
Not After : Jul 4 16:01:39 2026 GMT
Subject: CN=33902e0a9261ff0ea40009ed67ca598789a955db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:16:f0:44:7d:17:80:fb:ca:02:14:34:d1:
a7:6e:23:c2:fc:09:72:ee:7a:92:ec:27:5c:d3:51:
0d:14:4a:a7:ef:8c:29:02:b2:7d:86:7e:6c:10:6a:
a4:62:dc:dc:6f:71:70:6f:4c:c9:da:7f:31:b0:66:
98:f7:4b:a7:dd:d2:7f:4c:72:e0:ac:63:ff:72:fc:
0e:32:86:80:a2:0a:44:16:b6:ab:a3:ce:b3:a2:53:
10:f0:f9:80:36:cf:c8:a3:81:5f:e2:5d:ea:a0:ea:
5c:d5:06:9b:96:f1:8e:ef:0d:03:27:6f:9d:d2:30:
4a:0e:5b:b7:96:26:98:36:4b:87:5f:5a:ef:a1:a6:
0a:fb:ea:e5:0b:24:ef:2a:93:ac:51:e4:3c:f9:38:
61:96:cb:38:49:32:51:07:5e:de:8e:6f:25:02:2c:
95:4b:cf:e1:3f:bc:27:52:f0:2e:22:20:ce:e5:76:
6b:1b:eb:02:e0:c0:72:32:ed:a2:cb:73:8a:69:c5:
d7:1a:1e:ff:4d:9e:bd:4f:64:b7:35:2a:b5:81:68:
cd:28:43:1a:3b:f3:9a:4b:7b:4d:df:45:e6:f5:4b:
b7:de:b6:2d:02:59:b4:c0:3d:d5:8b:6f:d5:e9:82:
20:22:2f:15:b5:66:ff:8e:a4:a0:cc:e5:54:c5:e9:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:90:2E:0A:92:61:FF:0E:A4:00:09:ED:67:CA:59:87:89:A9:55:DB
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:1b:37:17:e2:96:9b:f1:a6:ac:38:cb:a5:91:e7:36:53:1f:
ca:f2:71:14:6d:c9:36:1b:23:77:69:19:82:cd:9b:a3:82:1d:
b1:e8:cd:44:a9:21:58:7e:46:c7:33:d6:79:2f:04:e1:99:62:
d1:3e:02:77:54:2b:3a:84:6f:9e:81:6b:cb:ce:f8:31:39:85:
f0:0a:7c:d2:26:94:20:f1:c8:42:dd:df:d1:87:82:17:3b:25:
b5:ad:3f:92:13:09:72:46:da:60:fa:b2:4b:67:d9:a6:d8:41:
0e:7c:74:cb:9c:ab:9c:52:d4:8d:5f:f9:91:69:84:2b:28:30:
a1:05:7e:ad:0e:fb:31:59:5e:7c:6d:7f:f9:1c:54:9e:9d:24:
a4:c2:a0:c1:36:47:1d:f5:e8:0e:b9:39:3d:88:17:d1:40:22:
cb:bd:8d:6d:ca:97:9e:50:d0:68:ae:7a:8a:b0:45:d7:5f:1b:
d8:b8:a0:e7:29:97:16:0c:d0:57:0e:16:c6:02:3c:e6:6d:44:
1c:b2:25:a2:16:8c:96:ff:99:ba:58:f8:8c:b0:c0:de:5f:a4:
70:7a:32:2d:fb:74:25:02:a6:22:dc:40:1f:85:05:69:c8:0b:
15:90:6e:bf:32:17:3b:b5:26:99:18:20:d0:5b:87:9a:84:e0:
e4:74:89:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:45:24 2026 by rpki-client