Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
File: pkHn9ngj7vUqGf4dyODmp_QclDM.mft (raw, json)
Hash identifier: aFT1Qt5te0thgbJDGC++OweTmf45o9l+5R1f3yitl1Q=
Subject key identifier: 09:64:CD:28:E5:E7:5D:00:7C:80:F9:C6:A8:6C:D2:BA:5B:66:21:2C
Authority key identifier: A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
Certificate issuer: /CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Certificate serial: 019FFB35E85C48A91424ED6178D973A11487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
Manifest number: 0D9A
Signing time: Thu 13 Aug 2026 13:00:41 +0000
Manifest this update: Thu 13 Aug 2026 13:00:41 +0000
Manifest next update: Fri 14 Aug 2026 13:00:41 +0000
Files and hashes: 1: nJSmMLTuP11zOj-elOc_2mrwgF8.roa (hash: 10N2e/W3MOYvDPcGICyNpYfCx8NxZM9dOTlLGlZzpE4=)
2: pkHn9ngj7vUqGf4dyODmp_QclDM.crl (hash: x0NkM7D7KGK84aQtmS9GCeokiAKpZ89IKMn3n/IdEhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:35:e8:5c:48:a9:14:24:ed:61:78:d9:73:a1:14:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Validity
Not Before: Aug 13 13:00:41 2026 GMT
Not After : Aug 14 13:00:41 2026 GMT
Subject: CN=0964cd28e5e75d007c80f9c6a86cd2ba5b66212c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:c0:7d:64:e0:b5:8b:c4:af:63:a0:0d:8e:
38:5f:6d:84:05:c2:7f:6e:e2:be:76:7d:ba:40:30:
37:6c:8e:0f:fc:36:b1:9b:c0:72:ea:a3:7b:d1:b4:
ba:07:75:ea:67:33:06:aa:c6:bd:bb:ff:be:3b:b2:
f7:6f:97:7c:ff:0a:f3:e1:4f:df:cc:23:64:a7:8a:
4f:39:23:58:21:9b:20:5d:b7:24:da:8a:20:15:4c:
0e:ae:c1:c9:03:f0:c1:65:18:d8:14:96:40:d9:35:
72:0b:15:88:a9:63:05:19:04:fc:0a:23:5a:e8:e6:
66:f5:5b:b5:f7:24:ff:5d:f3:8f:ab:17:6b:c4:f4:
cd:27:e3:99:52:7c:ed:ab:66:68:f7:1b:c0:94:6c:
11:64:1a:53:05:7f:b5:bc:30:8c:c8:de:3d:bd:c1:
86:48:bb:6b:e7:eb:1c:68:02:8f:e4:cc:57:af:34:
d5:ce:2a:59:63:58:04:4a:bd:06:7c:03:a7:da:91:
0f:27:0c:10:30:f7:d2:71:3a:76:b9:11:16:bc:ea:
1e:5a:5a:66:3f:c3:1e:bd:c0:60:8d:14:68:52:f6:
ee:b9:fd:a1:a3:13:a6:5e:b3:84:e1:af:ed:1f:b6:
63:33:65:1c:0b:57:42:bc:2d:63:1a:77:f4:18:20:
76:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:64:CD:28:E5:E7:5D:00:7C:80:F9:C6:A8:6C:D2:BA:5B:66:21:2C
X509v3 Authority Key Identifier:
keyid:A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cf:f7:0e:98:48:be:8e:2e:bc:c9:5e:bc:da:a7:6c:20:04:
81:a5:61:f3:df:7e:d7:3f:64:66:27:04:8b:1d:25:9a:82:b9:
93:68:ac:c1:0f:48:80:fa:c9:90:b3:ed:24:0f:53:50:be:3a:
f1:78:d8:f9:39:88:ee:4d:45:bf:ab:2b:0f:a4:ca:33:c9:bd:
7a:c0:51:32:fa:90:69:63:a9:81:f0:48:a2:90:b0:1a:96:1a:
f3:b9:1d:25:1a:68:b7:6b:44:26:92:8e:17:a1:86:2e:d4:15:
b8:9c:ba:e4:a2:34:22:69:ac:41:d5:6b:d5:78:87:e4:49:29:
82:c0:b2:76:d1:bb:de:36:5b:be:b6:03:ed:56:58:31:0b:08:
ed:6e:5d:47:15:93:13:6c:09:0c:5e:a1:75:71:e4:a9:ac:a2:
ff:56:28:05:26:bc:13:a6:a2:d0:12:b5:fc:59:18:9e:fb:5a:
e2:c2:86:93:90:a7:71:71:cf:3e:b6:1f:75:4b:05:ae:8b:8a:
1b:48:04:60:af:ee:36:98:8a:f2:04:0b:ba:94:8a:83:48:0d:
0d:20:64:c0:d4:9e:b7:59:16:d6:b9:82:00:92:47:19:2f:7d:
3b:a5:cb:82:15:99:a6:c1:4c:cc:1e:2c:6d:1f:13:0e:9b:70:
f1:e6:9b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 17:29:39 2026 by rpki-client