Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: lSyzq4EpLCAk2NLfbLMl+IZhQTcnqNMSqMttoDjjAlw=
Subject key identifier: 29:4F:C3:DE:9B:04:97:BD:E7:CD:76:6C:49:0A:E6:77:F7:6F:34:EB
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 019EB87D11D793F461B71A9DC5300EDBFBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 1953
Signing time: Thu 11 Jun 2026 21:01:04 +0000
Manifest this update: Thu 11 Jun 2026 21:01:04 +0000
Manifest next update: Fri 12 Jun 2026 21:01:04 +0000
Files and hashes: 1: 8xpf1H5jnrklNTBoaVn0u85Fw00.roa (hash: xVZEKXXOjsh0YBdOeRbRNQ2rIeuGE/aopxCQhkfvBRc=)
2: k1f4H5R1t7ioWxpD9zQTzDGVw34.roa (hash: UazRYiujjVi7Q1FCel0edXG5MOLygjSQmvy3K0uCobk=)
3: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: I9tnwea6aml7uQ44MKT1gaW6lBmYS+1AynLU6FoOqFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7d:11:d7:93:f4:61:b7:1a:9d:c5:30:0e:db:fb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Jun 11 21:01:04 2026 GMT
Not After : Jun 12 21:01:04 2026 GMT
Subject: CN=294fc3de9b0497bde7cd766c490ae677f76f34eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:8c:ab:51:fc:b2:16:3e:8d:1f:cf:28:be:
ce:6e:46:5f:9e:16:6f:32:af:d4:87:a2:de:02:77:
d2:2e:a3:9d:0f:21:11:f0:be:20:9c:31:e2:24:62:
b4:b6:32:0a:d3:83:e2:2a:30:4b:b7:a7:c6:6f:b8:
cd:03:ea:96:d4:0f:d4:25:9e:20:b2:2a:4f:d3:bb:
5f:41:63:f1:69:86:d5:36:b1:d6:fb:f2:64:38:dd:
b1:3b:99:77:0a:71:4f:20:cd:65:79:b5:d0:11:9f:
2c:6b:e1:88:16:16:56:76:69:4b:b0:18:81:4e:cb:
f9:9b:0e:8b:59:bc:8a:94:e2:a0:62:35:f0:41:1d:
58:08:77:69:30:68:02:b2:cf:53:4d:c8:1d:c0:2d:
fe:bd:1d:f5:28:21:06:b5:9d:4c:29:62:81:70:64:
35:d9:12:4f:4b:7f:94:40:99:ec:c8:3f:aa:80:c8:
3b:fd:b2:20:5b:c0:54:6b:8d:4e:8c:66:d9:9f:fd:
8d:80:99:aa:4e:2b:c5:41:71:85:3d:36:e0:b8:42:
dd:e0:61:cc:dc:9d:5a:78:75:1d:7f:19:fb:aa:af:
26:8c:b5:a8:ab:b2:75:34:c4:31:6d:87:19:f2:06:
d8:a3:1a:30:5b:4a:29:46:9c:57:71:89:22:9e:62:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4F:C3:DE:9B:04:97:BD:E7:CD:76:6C:49:0A:E6:77:F7:6F:34:EB
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7c:24:ae:8c:d0:7f:ca:6d:c3:66:10:37:4b:6e:63:69:c5:
cf:f4:82:c3:eb:ba:e0:da:67:c9:a6:62:2e:39:bb:28:e7:a6:
ba:a5:36:a6:20:a5:bc:02:7c:0d:6b:88:1f:69:e6:8b:e8:01:
da:b7:91:8e:15:7e:be:2e:8a:f4:77:51:14:3c:eb:b2:c5:fa:
81:ad:9e:b4:fb:e4:85:ba:7c:c7:9c:b6:6c:4d:00:6c:e3:f1:
71:43:6e:9a:30:3f:f3:d4:77:10:8d:e7:46:d9:9a:26:d7:20:
91:7a:b4:c8:4a:3f:b2:95:78:63:f0:60:e1:2c:79:96:69:03:
a7:7a:ac:18:e3:1e:e5:61:bb:29:20:ac:af:4d:bf:7a:04:88:
4e:ba:87:50:53:a9:fb:91:c8:a4:3e:5b:3f:66:68:8a:3f:aa:
b6:85:83:bc:79:2a:5b:db:db:d9:7b:65:9c:d3:bc:8e:d0:93:
37:3d:fa:39:82:16:62:59:94:20:9a:a8:b2:9d:d2:cb:e4:d7:
1f:72:2b:31:b3:7d:02:1a:9a:22:98:d8:09:f3:87:8b:e9:ae:
12:8e:4c:3a:2b:1a:5f:25:5a:73:b1:5d:be:b7:dd:5f:e3:06:
86:b8:2d:05:57:ae:33:61:b9:af:38:d5:4f:21:41:3a:43:21:
77:2e:d5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:04:14 2026 by rpki-client