Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: 186D1FmPWpI0O7GCg5bYO76LKX22h8OLpDWvkFIUadg=
Subject key identifier: CB:EE:8B:1A:FC:0D:13:05:5A:B4:49:87:93:D9:4E:45:6A:97:D8:8E
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 019EC6A6159DED9364B7C46845A41EDDB090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 1968
Signing time: Sun 14 Jun 2026 15:00:33 +0000
Manifest this update: Sun 14 Jun 2026 15:00:33 +0000
Manifest next update: Mon 15 Jun 2026 15:00:33 +0000
Files and hashes: 1: o0tMA79YFIEEyFTw2xYa5Lv3piU.roa (hash: 8In4s4VKHhCyRo6MJFcuDqa2z/AG50EjAqON9SCd4uQ=)
2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: +7EX8ZfBF5EtJBb5EdgWz8RlAa2aPNFRn3mIDja8DjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c6:a6:15:9d:ed:93:64:b7:c4:68:45:a4:1e:dd:b0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Jun 14 15:00:33 2026 GMT
Not After : Jun 15 15:00:33 2026 GMT
Subject: CN=cbee8b1afc0d13055ab4498793d94e456a97d88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:51:08:78:e7:79:47:d3:5c:bc:6d:e9:a3:
64:78:2f:33:89:a5:75:27:46:ca:44:c1:73:be:f4:
35:2e:8a:94:91:ce:54:ef:9b:8d:ad:58:09:63:e2:
82:6e:4d:94:41:2e:b7:26:5b:03:ec:c2:df:e6:b9:
06:4a:dc:09:b8:11:eb:b4:ed:bd:ae:71:c2:dd:4d:
19:02:83:cb:3b:ed:5c:35:2f:10:fa:31:1c:ef:9d:
d2:2e:7c:14:49:82:e4:01:42:01:51:68:d7:5e:2f:
d3:47:6e:d2:1c:ba:de:d3:36:2a:23:48:31:08:6c:
a6:fb:de:24:29:7e:3c:5b:85:1a:bc:2e:ee:2b:e3:
dc:01:1f:8b:d2:d2:a4:f6:d4:7f:66:04:d3:12:7f:
dc:cd:bf:a7:48:39:ad:09:6e:80:06:4d:5e:eb:8a:
16:48:87:06:a1:f6:cc:07:48:88:c9:7c:a9:83:a9:
5d:33:7d:21:fe:ce:1b:c4:7d:2d:81:37:a6:77:70:
e4:7a:90:d4:10:74:77:21:9d:27:dc:dd:27:2a:3c:
6d:c4:30:3e:f9:c0:65:a6:6d:72:d1:34:9e:d0:f8:
05:f5:04:f4:04:70:c6:d5:62:6f:c6:c0:07:e6:aa:
5f:e3:a4:b4:45:1c:76:3d:78:26:5b:61:a3:b9:81:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EE:8B:1A:FC:0D:13:05:5A:B4:49:87:93:D9:4E:45:6A:97:D8:8E
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:10:e3:82:fa:e3:1a:af:34:c2:bb:25:d8:e1:59:32:cd:76:
b9:79:de:80:a7:e1:1d:2a:1f:77:3d:92:7b:88:9a:9a:27:5a:
d2:f6:ac:58:2c:54:db:b2:e7:0d:78:d6:50:bd:e2:80:7b:7f:
d6:c6:b0:13:c6:44:3f:2c:ac:e5:2b:f6:b7:1f:1e:0f:66:91:
eb:70:c1:40:1a:27:66:d4:ca:b5:ea:44:1d:27:69:9b:d5:c8:
e6:e5:c1:3b:00:e1:d8:df:05:4f:83:b6:a8:4b:2e:0f:7f:9d:
8c:4d:8b:1e:d8:aa:1e:bf:fb:07:81:e0:ab:67:2d:b1:cb:8c:
94:f8:5a:3a:29:11:7f:2a:d8:7f:59:35:e3:1d:12:6f:b2:c1:
44:ea:da:f5:91:e1:be:a3:2b:a9:a5:0d:8b:65:6c:69:31:5d:
56:d0:89:59:fe:e2:7e:33:5c:54:18:3e:45:e6:d7:54:15:c8:
cf:0b:2c:1e:a1:24:10:75:8f:07:b1:5a:09:01:c0:b7:db:37:
dd:c5:86:03:b8:1e:df:8e:b1:39:4f:bd:53:13:98:2a:5a:8a:
60:20:79:de:9c:de:66:f2:80:59:f8:8b:27:86:66:69:fd:93:
9a:37:ff:f0:c8:4f:3e:82:23:16:7c:b5:6e:c9:1c:38:8b:6a:
aa:49:9c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 21:25:18 2026 by rpki-client