Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: 6YXQLbLnOYvBRpFHKy1w2xmDJTMpEMG2sVpBv2K5TKg=
Subject key identifier: CC:68:04:2C:AB:09:2E:91:7E:FE:D9:F6:48:01:75:D2:49:17:7D:18
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 019EBF91595577DB561F0799E2ACB211FCC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 0D83
Signing time: Sat 13 Jun 2026 06:00:34 +0000
Manifest this update: Sat 13 Jun 2026 06:00:34 +0000
Manifest next update: Sun 14 Jun 2026 06:00:34 +0000
Files and hashes: 1: 1-m2fud3k5EzmiZRoBhOtqfySzmI.roa (hash: HOvFww4yxsynh17q+d5C89mxcrHn4M7iS7z+Y3frs9U=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: W2rWHrfAErPd/O/duKEGIuMQw7vISKUSTD4QXtydkEM=)
3: e89SBhBBaL18qejVEfgQtSemlB0.roa (hash: Gc/uVJGxURscBi9WA9foLpSF+kUOEix1bWq345u58KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:59:55:77:db:56:1f:07:99:e2:ac:b2:11:fc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Jun 13 06:00:34 2026 GMT
Not After : Jun 14 06:00:34 2026 GMT
Subject: CN=cc68042cab092e917efed9f6480175d249177d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:3a:3f:08:d9:0c:e4:15:5b:0d:fb:a5:8a:
3d:51:60:60:7e:1b:10:3c:26:46:9e:59:43:dd:5c:
98:07:b4:db:0c:b7:4f:84:f6:56:57:03:ea:e0:bc:
1e:81:45:bb:1a:53:23:bf:8b:1e:1c:92:0d:c0:50:
3f:8d:ea:f1:e1:d2:5a:c6:a3:88:55:06:1f:f2:3f:
fa:74:8c:f1:66:21:41:0b:da:21:35:54:38:7a:3e:
a7:31:cb:53:9d:3e:77:2d:d5:44:e2:ad:a8:cc:bf:
62:54:a0:68:62:2c:bc:c3:8f:85:86:68:21:fb:f6:
69:5d:63:7f:a4:e9:02:44:77:29:7a:92:bd:6b:6b:
a0:a7:2f:84:a6:35:e7:ef:9a:0e:9d:3b:ae:85:35:
8d:44:fc:ac:84:e5:e3:93:83:7f:77:07:d7:2d:ef:
8d:45:e0:18:82:5c:42:9b:d2:5e:22:3d:d8:04:0f:
70:18:ae:17:d3:30:3e:0c:7a:37:89:99:20:54:7d:
3b:d0:2e:43:83:32:84:1b:d2:dc:5f:16:10:9d:f4:
4f:81:e5:72:97:c0:8e:0f:af:21:c8:dc:2a:0f:5a:
2c:c0:8a:91:99:11:64:4f:d9:f0:98:ff:a5:d2:05:
f8:fd:b4:de:8f:90:9b:f3:29:7a:2c:cd:98:45:05:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:68:04:2C:AB:09:2E:91:7E:FE:D9:F6:48:01:75:D2:49:17:7D:18
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:95:82:9c:31:79:84:93:20:cd:ea:ab:18:31:25:99:64:f4:
60:11:97:cb:e3:ea:00:47:88:b2:00:f6:21:2f:cb:d3:3c:d7:
ad:ad:ff:d4:46:58:98:14:16:e1:b9:db:aa:b1:ff:ee:c1:f9:
7a:07:b1:9c:f9:b6:5a:6a:8d:92:96:81:4f:f2:32:56:08:22:
90:5e:15:d8:fe:aa:ab:e6:24:ca:36:f5:83:13:e8:ac:c9:41:
89:d9:05:a9:23:33:40:02:d1:24:80:93:a1:b5:91:b2:9a:13:
51:25:97:91:3d:25:22:e2:17:bc:43:ae:ff:28:bf:ce:8a:64:
8b:2e:a9:70:3a:9e:06:33:ea:c1:a0:34:07:95:5a:fb:73:91:
24:87:31:ca:0f:d1:a8:c3:54:0e:09:49:03:60:95:5e:a2:21:
1e:df:2a:9f:14:c8:14:61:e7:1a:ad:36:71:6a:68:25:cc:77:
a6:0d:d8:78:56:d2:38:41:42:eb:cc:15:4e:e9:4c:dc:5e:62:
de:b6:15:0d:bf:c8:83:db:fd:60:af:4b:15:78:4c:a4:6a:26:
0a:c7:31:a1:93:da:bc:92:cc:14:6a:28:75:d6:4b:27:3f:9a:
34:8d:82:a0:f4:f2:fd:6f:7e:ce:99:3a:32:ca:f5:82:d6:26:
f9:b5:e2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:35:10 2026 by rpki-client