Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: 0A4FqheV4u+VgoAfb6w8fF7caa0y76yBoZEf5ZSeuos=
Subject key identifier: E2:6D:9F:B2:C2:D1:41:D3:23:30:71:07:CA:D4:28:90:55:42:92:BA
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 019EB7A1179889FBCE84DCB3F642FD58262D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0DB7
Signing time: Thu 11 Jun 2026 17:00:48 +0000
Manifest this update: Thu 11 Jun 2026 17:00:48 +0000
Manifest next update: Fri 12 Jun 2026 17:00:48 +0000
Files and hashes: 1: UycNDBh6XIKJ82eOMM9nsWm3RUU.roa (hash: j5CuV0Ecvfd3t9K7/xrfKK4OIBdyHHKPYNpzUJ5l9jc=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: cr6LCglEWqUtm+wpaeS32f/9InxbD0AnQ3pFIKxs+9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:17:98:89:fb:ce:84:dc:b3:f6:42:fd:58:26:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Jun 11 17:00:48 2026 GMT
Not After : Jun 12 17:00:48 2026 GMT
Subject: CN=e26d9fb2c2d141d323307107cad42890554292ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:16:a5:ef:74:f8:8d:6f:8e:50:12:92:e1:
34:77:b5:89:fb:f9:90:e3:8b:69:9a:1c:b2:ca:3d:
2b:68:10:ca:72:bb:f7:72:19:05:b1:e9:ed:44:1c:
74:f1:4b:5d:28:3a:32:12:7b:d8:4c:88:0f:56:5d:
14:23:81:06:42:2e:48:34:fa:f6:65:51:da:4f:2b:
54:0e:a2:0e:d6:c2:c0:b8:c0:3a:2b:eb:03:41:e9:
ca:6b:8b:b9:94:1b:cd:74:e5:16:c5:f9:e1:40:e8:
c5:2f:3f:14:c8:59:47:0d:0a:88:c0:17:14:e3:e4:
22:4a:af:78:5d:42:99:fe:e1:8e:d3:48:99:08:db:
96:72:ab:e5:e8:7e:10:6f:ce:23:b4:39:36:15:66:
2a:39:b2:40:84:15:a2:dc:18:fa:80:7b:c9:1b:bb:
b1:1e:19:70:c8:7f:c0:d0:ca:b4:81:00:6f:34:10:
fb:3a:db:4f:5c:ff:29:5c:7c:a5:2d:03:a7:f2:8c:
61:e4:fd:a9:52:a0:85:28:07:95:90:ad:f4:f1:a0:
36:99:94:14:81:7e:d6:85:93:b3:73:51:e2:8d:2d:
db:98:e4:b6:cd:c0:e7:46:ea:c5:84:d8:31:91:36:
95:45:80:e7:3e:a6:a5:19:75:3e:1e:64:5a:0f:39:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6D:9F:B2:C2:D1:41:D3:23:30:71:07:CA:D4:28:90:55:42:92:BA
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f9:c0:20:72:9a:3e:8b:3c:a5:ad:02:ca:9b:e9:1d:fc:33:
d4:4b:95:82:1f:53:ad:03:74:6c:ec:44:40:6d:58:dc:a7:3c:
b6:3b:92:31:55:51:68:00:af:17:16:3b:94:71:ca:ec:29:8d:
cf:86:5c:25:ae:9a:59:06:64:d2:49:b7:ef:70:78:3a:8b:54:
08:ee:5b:c2:f6:af:b0:6b:ea:9a:8e:8e:52:f3:9a:96:6d:40:
7e:ed:fd:5b:a0:bc:22:ff:86:a5:2b:a3:1a:1c:14:a4:2f:d6:
63:51:35:d3:b5:df:17:2e:55:13:61:b9:f7:73:72:f1:5d:eb:
8f:79:6a:1c:7b:76:87:50:c4:e9:8a:97:1d:72:67:35:40:e4:
30:17:8a:11:84:e3:95:a5:59:af:47:17:25:61:81:b7:2a:25:
b5:bf:7a:ec:2e:bc:75:e1:f2:e1:7f:ca:91:5d:0a:d6:67:59:
38:f8:f9:21:7e:66:fe:21:97:3e:55:7f:56:e4:2c:1c:7c:5f:
ce:3f:69:6c:d5:ae:4b:27:52:d1:e0:1f:34:f9:fd:2a:e6:0c:
f4:9d:d5:23:f6:61:79:4b:cd:f9:b5:86:35:ef:1b:7f:2c:14:
ff:f5:b5:6a:0d:7b:1a:60:f8:98:1f:36:56:95:66:82:17:a3:
e4:ed:6c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:24:31 2026 by rpki-client