
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: /d12SJJd1H/1gkAIx06xw6cQ+8WRZTCuMDuG2C4FFXg=
Subject key identifier: F0:3A:4C:68:17:65:99:4A:40:A5:FB:6F:B6:FB:90:EB:47:47:A8:34
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 019E31BBDB71FCB20204047724462094BDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 08B9
Signing time: Sat 16 May 2026 17:00:55 +0000
Manifest this update: Sat 16 May 2026 17:00:55 +0000
Manifest next update: Sun 17 May 2026 17:00:55 +0000
Files and hashes: 1: clGNCBZAUsZmUY2Yr9tTeA-xspg.roa (hash: 5vbfK5sSOuwTJdbsyPF/pmsdysNhxTsWqZlPG/oHPeQ=)
2: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: /wxXy2Y4SXZLWeeU4Vjqn2Q/vGxjE1Our2mkC+igoIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:db:71:fc:b2:02:04:04:77:24:46:20:94:bd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: May 16 17:00:55 2026 GMT
Not After : May 17 17:00:55 2026 GMT
Subject: CN=f03a4c681765994a40a5fb6fb6fb90eb4747a834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:2c:01:cc:62:9d:c9:24:8b:10:44:65:51:
b2:c4:44:e1:8a:43:4e:ec:fc:f2:65:5d:59:56:f6:
26:00:64:17:7d:0f:ab:78:11:84:43:e7:d5:5a:26:
65:79:f3:12:bb:31:53:ab:41:17:e0:52:09:a0:77:
9d:21:8f:44:e2:b3:d8:70:1f:0c:3f:2a:f2:7e:15:
f1:a0:5b:58:80:71:0b:f6:cb:eb:5a:1e:7f:bb:44:
96:25:67:11:78:bd:e1:0f:da:b0:7f:51:2f:55:ef:
d3:29:aa:c0:2e:7e:3e:c2:63:ce:76:fa:09:10:ef:
ea:a0:af:df:21:93:66:7b:8f:2e:53:2a:0b:d8:cf:
a3:d8:50:10:d4:bd:ab:b9:84:4c:f7:18:bf:bb:32:
27:b5:a6:44:b4:5f:84:89:58:57:d1:88:5b:c4:89:
6d:e2:e2:c9:0c:c7:5f:29:b5:b8:8b:d6:d9:cc:88:
2a:38:a5:82:20:d6:e2:0c:ab:b0:71:b7:de:c7:c6:
de:fd:b4:df:0a:d0:32:f7:33:a2:3d:29:35:e7:30:
2a:e2:91:fb:70:e2:38:d1:8b:a3:6d:ec:67:62:c2:
aa:01:77:17:af:a2:3d:13:23:81:7b:64:a4:28:83:
bf:1e:47:cd:b1:b0:5e:ab:6a:67:82:2e:9c:af:bc:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3A:4C:68:17:65:99:4A:40:A5:FB:6F:B6:FB:90:EB:47:47:A8:34
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:58:67:a0:b5:22:7c:29:4f:94:d3:4f:d9:7e:2d:36:5f:9a:
d2:32:9f:f5:30:05:b5:43:e7:0b:b7:91:33:2c:cc:00:32:0f:
9a:9e:a1:6f:28:7c:d5:5f:cc:eb:d6:12:92:0e:31:8a:92:d0:
5a:3f:61:76:b5:56:42:41:9b:09:b1:59:89:6e:1b:cd:8c:33:
b9:88:49:06:05:b4:1b:65:89:d6:ec:4f:53:12:ca:8a:bf:5e:
95:52:31:22:d6:99:08:32:83:ba:5d:09:95:28:24:0b:2d:bf:
51:cf:93:4e:c4:3b:be:01:c5:37:c1:8a:c2:30:eb:e0:65:f8:
5f:00:63:22:22:4c:44:8e:b0:72:1e:68:68:0f:f5:70:22:ca:
c1:7a:62:3a:75:e0:4e:83:f0:f2:e2:a8:6d:45:a6:88:1c:29:
29:1f:38:f6:71:d3:c6:41:99:07:11:af:b3:d1:ec:ec:e1:98:
53:d1:19:23:29:5e:78:87:c4:01:4a:22:55:4d:44:ac:bc:67:
85:70:7e:91:d4:a1:e3:3e:64:78:75:7b:ce:9a:54:6a:19:23:
37:7d:0f:4c:0b:69:6b:7a:47:5a:a3:c0:dc:73:f8:aa:54:34:
a5:00:1a:32:15:e8:39:2a:08:56:ea:b8:b9:2a:47:1c:4e:73:
c2:13:8a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:28:00 2026 by rpki-client