Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.mft
File: ptLtcWXLUbzSgGiylwI1zb0BKAs.mft (raw, json)
Hash identifier: xIha8NKg68XD90JHxI0IHFXNMDWRZznbl6D8HNzxfAc=
Subject key identifier: 0B:BB:52:A7:54:6B:25:71:F2:C0:F8:FD:26:14:71:8F:9C:49:35:8B
Authority key identifier: A6:D2:ED:71:65:CB:51:BC:D2:80:68:B2:97:02:35:CD:BD:01:28:0B
Certificate issuer: /CN=a6d2ed7165cb51bcd28068b2970235cdbd01280b
Certificate serial: 019EE631B96D1EEF5196277C5A272384DC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.mft
Manifest number: 05
Signing time: Sat 20 Jun 2026 18:01:18 +0000
Manifest this update: Sat 20 Jun 2026 18:01:18 +0000
Manifest next update: Sun 21 Jun 2026 18:01:18 +0000
Files and hashes: 1: GeyQ22_1vQMHY5GZrB5nhP9JyB4.roa (hash: Wj2h7hdDA5yCp0fWJDCA3i2DZQ/8Uz+RBgjIYabkIHo=)
2: RV0OfGw4sTHbnRPfJv8sH0lSI0w.roa (hash: CYoV7elxlGmQCYBf+b0HKnOUdfRXo5GRpH2xt0y8mJ4=)
3: ptLtcWXLUbzSgGiylwI1zb0BKAs.crl (hash: IUx6Y8cIGnbDeHxyytsH8eQjmtHO0n1p2VTlEj3EnBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e6:31:b9:6d:1e:ef:51:96:27:7c:5a:27:23:84:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6d2ed7165cb51bcd28068b2970235cdbd01280b
Validity
Not Before: Jun 20 18:01:18 2026 GMT
Not After : Jun 21 18:01:18 2026 GMT
Subject: CN=0bbb52a7546b2571f2c0f8fd2614718f9c49358b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:02:70:5c:d6:bd:16:2c:db:6e:7f:1d:90:
90:db:a1:f1:f2:a6:99:92:cb:5a:fa:4a:d0:8b:bb:
7f:f2:2c:d2:8a:37:7e:78:31:35:49:58:84:44:44:
ef:ae:56:ed:38:04:41:69:10:a0:db:54:f0:95:d4:
f3:c5:3f:09:03:6a:53:74:78:23:b4:49:ea:00:ce:
0b:db:08:ab:69:e8:bb:b1:52:bc:3d:89:0d:40:8f:
cf:c0:d6:32:c7:a6:54:a0:e0:82:a0:fb:05:17:c4:
df:e1:b6:1a:2e:d5:05:ab:4a:1a:10:cb:94:fd:57:
4c:0e:90:43:fa:d6:85:91:a4:1c:c1:db:15:05:5d:
6e:dc:25:72:f5:93:16:f2:00:33:5c:2d:33:78:ab:
41:fa:7c:7e:51:f4:0e:6c:4d:9e:4a:3f:8a:68:b2:
3f:e4:a5:c1:7f:9c:bd:4f:81:14:65:16:1a:8e:a4:
6b:c9:6f:f7:ae:c4:b0:78:fb:89:0d:4f:ad:66:bf:
28:b0:11:34:84:54:3e:23:ba:5e:0c:a1:73:1a:f1:
d2:ab:5b:90:1e:67:60:8a:f2:65:59:99:3b:0c:86:
6b:43:ed:46:f6:d5:dc:ee:00:78:da:d8:02:1b:9b:
58:87:a7:88:f1:c4:fa:a3:7b:30:80:b8:cb:79:97:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BB:52:A7:54:6B:25:71:F2:C0:F8:FD:26:14:71:8F:9C:49:35:8B
X509v3 Authority Key Identifier:
keyid:A6:D2:ED:71:65:CB:51:BC:D2:80:68:B2:97:02:35:CD:BD:01:28:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4b:a0:c5:b8:90:7f:b2:3d:ad:f9:e4:fc:aa:43:74:a9:06:
d0:3c:d7:b2:e8:14:16:0a:3b:19:df:dc:9e:24:24:79:02:3f:
cf:ce:7c:94:22:ee:45:fa:ea:29:6f:c4:0f:4a:f2:17:68:f1:
2c:ad:47:82:70:23:f4:4e:6e:ab:b3:d3:51:2a:38:5b:4c:ff:
75:a7:3b:a7:42:88:dd:c2:0c:51:45:34:9e:30:48:38:33:64:
cc:01:4c:f3:6e:b4:2c:50:40:a7:65:c7:65:b3:95:73:17:3f:
35:e4:f7:ef:37:02:fb:98:76:6c:dc:f0:e3:d1:38:5f:83:10:
09:02:19:c4:17:a8:6f:26:a6:2c:11:2b:70:4f:69:cd:fa:25:
2c:a8:d3:68:fd:7f:25:02:8c:3f:74:3c:53:e3:47:ad:b5:98:
5f:4f:dc:15:d8:03:80:fd:5d:80:bc:38:9b:0f:8f:d9:f5:ea:
c2:06:5c:9f:2f:68:4b:cf:88:06:40:ee:1e:8c:e6:6e:b3:cc:
31:ab:df:23:63:60:c4:b4:99:6e:53:25:12:b6:57:ca:0c:c7:
f1:54:52:4b:2c:99:a4:dd:00:58:9b:c5:d8:79:9e:c2:07:8a:
fe:49:15:16:b2:85:69:0b:d2:77:a3:de:72:34:74:de:78:c8:
d0:04:0c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 00:40:57 2026 by rpki-client