Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
File: pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json)
Hash identifier: D1jIKXfF5yY7VRRfwwX3V9URsIRp0xalgv7+S76oKBg=
Subject key identifier: 7F:F8:C9:F6:57:E7:85:AD:99:55:D2:BE:CF:C1:EA:86:CC:58:A5:79
Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
Certificate issuer: /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Certificate serial: 019DA340CB739CFA19394340FEF28A9BF596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
Manifest number: 0F9D
Signing time: Sun 19 Apr 2026 01:00:25 +0000
Manifest this update: Sun 19 Apr 2026 01:00:25 +0000
Manifest next update: Mon 20 Apr 2026 01:00:25 +0000
Files and hashes: 1: 6qcrdhxsXntUBfmqIofqw1-iJPY.roa (hash: GiOc4UHObExccKeqBRzv/DUsn92kIZYjDxqeAxX9Y0Q=)
2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: UNaH08gXGWrqL0GlwUcY8AwUSBwERkHHUr914Yd8w8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:40:cb:73:9c:fa:19:39:43:40:fe:f2:8a:9b:f5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Validity
Not Before: Apr 19 01:00:25 2026 GMT
Not After : Apr 20 01:00:25 2026 GMT
Subject: CN=7ff8c9f657e785ad9955d2becfc1ea86cc58a579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:fe:9d:db:79:a5:2f:16:b3:b3:91:52:28:
45:7e:85:fd:54:8e:8b:e1:d7:6c:0c:48:9c:f8:30:
71:2f:9b:b6:7c:91:c7:4a:b0:aa:77:3b:02:ee:cd:
da:70:de:36:48:7e:f2:a7:8b:68:0a:0a:63:c4:7d:
53:f1:38:6d:49:a0:7e:90:0c:28:33:8a:bc:18:47:
ec:bf:27:8b:36:ae:60:49:31:64:c1:6a:e9:5a:b0:
a7:46:cd:e3:22:0a:32:99:a5:e8:1b:c1:39:dc:9f:
71:0c:1c:2e:4e:27:2f:b2:d9:4c:1d:8b:d2:b0:c7:
21:57:06:9e:c4:43:5e:eb:25:59:bc:01:76:45:68:
9b:59:a3:cd:53:1a:a7:52:b4:63:66:95:1a:2b:e4:
a5:2e:10:11:27:ad:8d:6b:ee:b6:13:d3:69:6a:86:
7d:91:c2:86:f6:bf:43:37:ba:27:28:c4:7b:34:69:
f6:44:3a:5d:3d:01:6c:0c:d8:ad:8b:8a:ff:ed:81:
54:7c:9a:5e:ea:f7:0a:c0:62:61:7c:f2:69:dc:e3:
8b:95:6f:3d:60:e1:1a:15:29:48:44:9c:8b:36:a8:
e1:2a:69:22:0a:4b:9f:dc:0f:fa:39:42:a2:f7:eb:
1f:ab:19:d2:1b:fa:da:5c:83:f8:fc:e3:a4:df:b7:
b7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F8:C9:F6:57:E7:85:AD:99:55:D2:BE:CF:C1:EA:86:CC:58:A5:79
X509v3 Authority Key Identifier:
keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7e:0d:0b:1a:7c:68:1c:43:fa:fb:c8:10:6c:18:65:da:3a:
43:d3:cb:19:e0:87:08:94:d5:d3:15:eb:89:62:42:b3:d4:74:
47:7a:99:21:f7:a9:f3:a8:dd:c0:13:7d:9b:4b:85:b9:9f:47:
ea:8d:20:d2:da:10:27:02:f5:83:82:b8:c6:9a:7d:85:ec:76:
4e:a2:00:39:d0:01:63:c7:b2:ef:f9:98:30:43:cb:f4:ed:7c:
e4:3a:e3:e2:0b:d0:dd:d8:6f:24:56:1e:9c:8b:bc:b0:84:ef:
2b:eb:4e:a8:5d:f2:12:d5:69:40:dd:92:41:f7:5c:09:df:1a:
60:b2:ab:2e:3a:f5:ac:5d:28:13:5f:aa:c0:25:65:74:f0:c1:
02:15:dc:48:c4:74:ab:54:cc:3f:c2:9d:27:6f:90:c7:00:ba:
06:f7:61:01:01:5c:61:26:20:05:b2:be:1a:40:ff:3e:a2:82:
1b:ed:2a:cc:09:df:ad:8c:00:0e:87:a3:04:55:6c:79:32:ce:
9b:09:3a:ae:f9:90:d1:a3:f9:db:96:29:b9:dd:42:5a:df:ab:
8e:20:79:8c:ed:6b:9f:a7:34:0b:f8:68:cf:e9:f1:7a:2d:a7:
09:ba:a2:35:c5:9d:4c:d0:94:63:dc:7e:04:68:e2:c9:8b:b3:
57:48:25:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:31:22 2026 by rpki-client