Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: 5I2mqKra6Me1x8Tsj57ObuZyWt/EA71UkuWINFwEQkE=
Subject key identifier: 45:0C:1F:3B:21:17:2C:1B:95:5F:AD:2F:13:B4:54:A1:D0:F0:BC:4E
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 019D389C2C768B123D82F610432CBCD56629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 0838
Signing time: Sun 29 Mar 2026 08:00:52 +0000
Manifest this update: Sun 29 Mar 2026 08:00:52 +0000
Manifest next update: Mon 30 Mar 2026 08:00:52 +0000
Files and hashes: 1: clGNCBZAUsZmUY2Yr9tTeA-xspg.roa (hash: 5vbfK5sSOuwTJdbsyPF/pmsdysNhxTsWqZlPG/oHPeQ=)
2: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: +yHZ5f+V2RaU6TdJAnYK9IyYZClx4hzw4vr+ygE1XQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2c:76:8b:12:3d:82:f6:10:43:2c:bc:d5:66:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Mar 29 08:00:52 2026 GMT
Not After : Mar 30 08:00:52 2026 GMT
Subject: CN=450c1f3b21172c1b955fad2f13b454a1d0f0bc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:e8:42:d6:95:70:fc:59:83:8f:4d:b7:55:
71:89:46:23:91:9c:9f:a6:fb:fd:4f:25:69:fb:7f:
55:7a:c0:3e:c2:0a:94:1d:db:a2:d1:0f:f2:b0:5c:
e0:cf:69:74:68:55:a3:6d:e8:1f:ee:cb:22:61:68:
34:42:58:fa:f7:35:ad:ae:3b:0c:99:30:96:28:7f:
12:bc:57:14:23:87:fc:7f:20:f6:8d:66:6a:11:98:
d1:82:0a:1e:a7:7b:bd:ba:62:db:ee:2e:3d:09:97:
78:5f:2e:0c:6e:72:f6:d0:03:08:eb:6b:1b:32:a5:
b7:19:aa:28:2d:82:02:55:6d:b5:d2:f5:aa:53:c9:
fc:8b:31:4c:40:93:77:fc:49:e8:58:74:62:d6:5f:
46:4f:cc:80:13:2f:af:20:e4:df:57:b4:28:9a:38:
a4:6e:89:b1:77:ea:03:8a:92:d6:f6:b7:3c:95:db:
27:b3:31:a9:bc:a9:85:b7:aa:c6:8c:ee:72:8c:42:
92:fe:ff:6a:03:9f:ef:ec:9a:23:c6:cd:3c:e4:b2:
ec:10:ba:1a:af:b6:70:96:d1:99:3e:14:6a:1d:65:
24:40:d2:2e:56:36:e7:93:47:67:a4:c8:ea:bd:09:
2e:2b:f6:fb:bb:46:f8:a2:f7:97:91:c7:5d:02:8c:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0C:1F:3B:21:17:2C:1B:95:5F:AD:2F:13:B4:54:A1:D0:F0:BC:4E
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:91:a3:09:a0:e8:6e:ec:20:06:52:04:7f:6d:f2:7f:ff:3c:
15:8d:ee:40:75:4e:a1:78:a4:34:63:87:1c:e2:f1:dd:66:ed:
46:33:10:10:b1:61:5f:d6:d7:4f:69:a8:42:dc:da:5d:a6:46:
82:c1:28:30:54:f2:b0:56:41:ca:bf:4f:43:e2:5a:ef:17:aa:
ae:f9:d5:a3:f0:89:75:3f:54:0f:10:4c:b4:46:ca:5f:4c:a3:
9e:cd:24:41:35:39:eb:ca:45:d5:14:68:59:cd:26:83:0c:4b:
44:18:11:12:60:74:6d:cd:f0:a7:fd:e4:36:dc:a9:18:83:ac:
ce:a4:31:d7:97:40:a8:da:6c:33:8d:e5:5f:c9:45:4a:82:e6:
33:bb:59:e7:35:3e:c7:46:fa:a3:db:d9:f1:2d:77:dd:d2:38:
a2:e5:ae:8b:ba:3e:02:0a:b0:f3:0b:59:73:4c:66:7a:20:1b:
0b:4d:78:8a:ce:bb:42:7a:66:54:58:69:16:b5:55:54:37:2f:
01:93:7e:09:36:20:97:30:ab:e6:f7:05:46:de:3f:13:11:4c:
27:49:45:83:62:01:ba:b4:71:64:81:f1:d7:e6:fc:71:4b:75:
b8:27:7c:ab:71:57:64:b1:40:53:58:f1:15:2a:cd:1e:47:f3:
91:79:60:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:02 2026 by rpki-client