Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier: 4RqlYwBQQF5Y/WqrLGWZQOczpss2SjtqUsyDDpaVacE=
Subject key identifier: A5:5E:9F:D3:76:15:03:C0:13:C1:09:8D:36:A4:32:92:3C:B0:AC:90
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 019F12D3DC7B5C71119DDCC21C0161EE84DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number: 0B3D
Signing time: Mon 29 Jun 2026 10:01:42 +0000
Manifest this update: Mon 29 Jun 2026 10:01:42 +0000
Manifest next update: Tue 30 Jun 2026 10:01:42 +0000
Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: +KEQSPYFezw2ukfwEYFLo1iDmTXEHgiV8tsZD4wpWRM=)
2: o2oMp4w_9TGCM9aisNXx6hIf0dE.roa (hash: 5zj6ry4dUTAYdyPOXRmxJv5IwbCW/zphAyYpf0E3ouc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:dc:7b:5c:71:11:9d:dc:c2:1c:01:61:ee:84:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Jun 29 10:01:42 2026 GMT
Not After : Jun 30 10:01:42 2026 GMT
Subject: CN=a55e9fd3761503c013c1098d36a432923cb0ac90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:d1:ad:97:95:ea:dd:51:65:89:61:ec:e1:
03:7b:25:2d:95:d0:49:15:d1:4b:26:63:e9:01:f9:
ae:d3:1a:dc:0e:a3:31:f3:dd:3d:25:45:f3:8e:9a:
6f:d3:79:4f:98:3b:be:85:ff:b9:82:1f:6c:5c:7f:
de:4b:9e:27:f5:fc:eb:53:ac:38:da:78:50:02:7d:
ef:9b:c9:2e:e5:a5:e5:26:ff:9f:b8:d4:7b:e9:62:
06:5c:b9:d5:23:f6:21:2f:d1:2a:96:dd:cd:24:2d:
a1:95:96:14:55:97:88:4d:c5:71:ad:0a:ca:37:de:
b4:4a:d4:ed:9c:cc:0c:f0:31:6d:78:19:67:8c:f6:
8c:32:28:ed:ca:96:1c:d6:b0:0d:67:66:b5:09:8c:
03:f7:89:83:e7:d0:c2:8e:59:ed:e1:c3:6e:31:bd:
62:b6:ec:2c:d7:e6:1a:f6:b4:b5:4f:98:61:71:77:
91:9e:76:32:bd:95:f2:0f:de:dc:e0:05:9c:9e:e2:
a5:29:60:23:15:aa:82:b8:bd:a9:c3:81:23:b7:c8:
8a:f3:ba:41:e6:32:d0:c9:46:a7:84:44:ba:3c:1a:
4f:7d:61:77:e8:af:11:49:ab:41:43:89:01:af:17:
66:72:ad:6c:d3:3c:45:9b:2d:9c:40:8b:2e:a8:ba:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5E:9F:D3:76:15:03:C0:13:C1:09:8D:36:A4:32:92:3C:B0:AC:90
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8b:e2:71:41:d8:02:ba:1d:b9:01:29:65:4f:cf:86:d9:54:
8e:b4:84:0e:ad:b1:99:57:40:70:44:d8:5f:3c:be:30:f3:66:
99:e6:1a:59:c7:b5:d0:41:75:ef:9f:20:a8:10:15:f7:0b:32:
dc:05:d9:36:df:55:14:81:64:83:5b:81:a9:33:40:ef:1a:9d:
95:1f:8c:1f:58:a3:4c:34:4b:25:79:18:74:61:cd:cb:fd:be:
af:6b:96:01:07:17:e4:0a:49:3a:7d:51:46:3b:af:fd:c1:da:
a2:7e:84:b4:ca:33:83:a3:f1:7f:d2:5e:ef:4b:ab:f1:8f:63:
2d:ea:19:a5:8f:37:8f:04:ce:e4:e8:ec:8c:24:3a:6b:a6:c7:
ad:b8:bb:e4:1d:78:69:3a:42:07:e1:ca:d2:af:7e:72:04:3d:
16:ee:61:81:e6:db:7f:2c:79:b6:7c:cd:e9:f7:18:54:03:96:
66:ab:a1:31:3c:df:74:9f:51:ee:96:81:73:08:fd:8c:21:f1:
77:12:46:e6:d5:37:b3:bc:57:c8:82:51:59:9f:09:fe:9d:03:
be:70:85:61:37:83:9d:a4:e1:c9:54:ab:13:f0:94:15:5f:d5:
7a:ad:69:75:61:39:a7:b5:08:e8:8c:2d:ad:50:8b:a9:c2:45:
7f:d5:66:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:42:26 2026 by rpki-client