Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: GpZYs/EtJpzQJPRFCqrahUvYwP+Eqh7G1z0ZAALpNPc=
Subject key identifier: 69:51:82:FC:72:0D:74:8B:83:9C:5E:8B:FD:07:95:51:2A:ED:B5:D0
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 019F11F8021ABF7BE524E4330C8368588049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 06:01:33 +0000
Manifest this update: Mon 29 Jun 2026 06:01:33 +0000
Manifest next update: Tue 30 Jun 2026 06:01:33 +0000
Files and hashes: 1: FQ8IH5cBqg-duSc2imKOt1dr3gc.roa (hash: zLx5O2JcZIf3WeCO72jwVB0rL1h+cp1I4W0w1x3rEC8=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: 5c5mdH+l9LlG533Xb4walxFtVAGPn2+8ToeFi3PCOfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:02:1a:bf:7b:e5:24:e4:33:0c:83:68:58:80:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Jun 29 06:01:33 2026 GMT
Not After : Jun 30 06:01:33 2026 GMT
Subject: CN=695182fc720d748b839c5e8bfd0795512aedb5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:d1:42:02:17:37:9e:7b:e3:91:71:e3:7f:
1d:b0:6c:fe:02:75:b5:f9:76:a1:d5:c3:7f:5a:97:
a8:65:d5:bf:29:9d:de:58:4e:93:d9:6c:02:20:97:
63:64:a9:48:2f:9a:0f:c9:6a:f0:0a:a2:2a:7f:5a:
c0:bc:c2:16:cb:5d:45:19:2a:7d:d5:6f:7c:d7:6c:
9c:29:54:d1:a1:b2:0d:33:7f:db:75:f2:da:d9:73:
8e:b8:aa:9d:8d:4e:76:49:07:a6:3e:0a:a7:c1:54:
fe:f8:70:d8:33:d8:0f:47:ee:a1:9b:2d:2d:50:a2:
12:c1:04:56:9b:9f:c0:36:46:c7:f0:01:1d:bb:27:
6c:5a:9c:10:b3:01:35:fa:d7:c8:75:89:be:d1:87:
e4:44:a0:f0:c7:a1:ca:ff:2b:58:9a:cb:13:63:a2:
43:f5:b8:96:0a:94:de:2b:19:dc:c8:8f:eb:38:95:
b3:6f:1b:c2:79:43:4a:b0:22:a7:67:6a:81:33:02:
42:d1:da:ac:eb:e2:47:1b:6a:2b:1d:4b:4b:33:de:
03:14:6e:73:f7:18:b5:e5:68:c2:2e:42:12:4b:05:
f0:e7:73:4e:5e:d4:2d:1d:5f:f0:c4:e1:66:90:22:
cd:61:83:18:18:99:3e:95:61:a9:1a:a1:3c:a2:10:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:51:82:FC:72:0D:74:8B:83:9C:5E:8B:FD:07:95:51:2A:ED:B5:D0
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:be:2b:16:09:77:28:96:92:28:56:c3:93:37:11:d9:18:7a:
32:75:eb:dd:32:4f:4f:90:ad:4b:04:b8:61:fa:c2:81:fb:50:
db:d2:cb:0a:64:ee:ef:1d:a6:e1:b1:e7:06:5d:43:c0:e5:c5:
a4:0e:8b:55:76:85:6d:66:3b:3d:a5:9e:2a:84:76:1a:19:d0:
60:d8:52:51:b5:8d:72:68:02:02:6a:4f:6c:6f:80:6c:09:37:
66:54:aa:3e:3c:55:03:9e:f8:ec:7a:78:ab:70:82:b9:21:a0:
60:ab:4e:03:64:5e:88:9d:e7:c0:0b:30:fb:f6:cd:f6:f4:b8:
7a:a5:12:d2:11:3e:60:1c:cb:6c:25:b1:ad:56:6b:e3:7b:67:
64:b5:66:1f:0e:43:2d:59:80:9f:e2:64:86:ee:3e:d7:2a:ae:
b7:c6:50:95:2d:0c:2e:f7:27:33:2f:57:ec:d8:5d:93:0a:8d:
b0:ed:2f:ae:b4:84:84:02:20:be:2b:bc:b5:b1:46:28:49:a0:
11:3c:ee:de:60:55:f4:d7:72:0a:70:d1:b9:47:cd:40:bd:c8:
35:12:f9:18:23:9a:b0:a7:e6:1c:6f:73:b5:b3:46:68:f7:be:
76:b8:00:0a:bf:a1:8f:4a:ec:96:ea:1d:3b:88:d5:ea:ff:ea:
f8:f6:0e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:53:43 2026 by rpki-client