Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier: v+NI8/NlQVwXCap6KZc0MgmCymUHqeGbEpKNMD9sbuc=
Subject key identifier: D9:6E:84:3B:FF:67:96:98:6E:20:60:28:17:71:E2:B6:D6:A4:2B:2D
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 019EC1EDF19669244A49E0D23F89017D6A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number: 0EBA
Signing time: Sat 13 Jun 2026 17:00:56 +0000
Manifest this update: Sat 13 Jun 2026 17:00:56 +0000
Manifest next update: Sun 14 Jun 2026 17:00:56 +0000
Files and hashes: 1: VBRvFj1EOS8ywtDDLAz1AuJ-F3M.roa (hash: ZcSJ73xAFGVAh8eRMHYLBDppD5u63RXHyLpMLnO53qI=)
2: mnODa5wDvkGX4Jfpz4BI1Vtzz80.roa (hash: jyMMr46dns8Qs3JvGsMvWCbFmVoKBoUCnfmLlBoBHdM=)
3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: KgDLGXCRtRQ6V7M/Hu1+JnQSqsRkG7MUm1EXvbJJbjU=)
4: vmahc-gH9xY8uloECYneObmRUwo.roa (hash: 6npTr2kUzSthDDmcUqv6TyudZTdNiJRtH1eH8fs3DyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:f1:96:69:24:4a:49:e0:d2:3f:89:01:7d:6a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Jun 13 17:00:56 2026 GMT
Not After : Jun 14 17:00:56 2026 GMT
Subject: CN=d96e843bff6796986e2060281771e2b6d6a42b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:19:1b:6d:3c:0d:f0:05:e4:70:45:9c:51:
65:28:24:9b:cc:e4:c4:a0:5d:9c:a9:fd:3d:1d:66:
18:e6:7c:7f:b9:e9:37:ab:76:97:57:b9:87:1b:85:
da:b0:b5:c9:8b:1b:46:b5:59:4a:1e:f6:66:54:0a:
49:6f:96:87:53:51:02:d7:54:1a:bd:96:0f:67:f4:
42:35:bb:0b:a4:78:9f:7e:c4:11:4b:25:94:0e:04:
78:47:b4:2c:71:aa:d8:ae:ca:2b:c8:73:8b:50:df:
a1:e2:5f:10:42:da:f7:18:bb:91:fb:c7:9c:cf:4b:
4a:b8:dd:12:9c:be:81:45:83:f7:26:3a:71:23:24:
06:c8:4b:6f:d6:f9:11:a8:d0:41:e9:33:c6:3f:8d:
b5:d2:bc:8d:e3:3f:41:5f:04:9c:13:0a:f9:08:b0:
b2:eb:31:05:ee:fb:25:1f:af:22:85:5f:5d:69:29:
d9:61:27:c4:ef:a7:f7:b7:4e:55:c9:ab:c2:d9:3c:
59:62:7b:68:f8:e1:d5:03:79:be:88:ed:94:e6:6e:
af:42:94:1e:16:3c:c7:ba:ac:9c:87:fa:5d:c0:8c:
30:b5:b3:49:a3:9f:16:8e:f8:83:00:a3:80:1c:bf:
43:56:dc:21:a1:b3:5c:10:bb:94:34:df:e4:18:0b:
1c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6E:84:3B:FF:67:96:98:6E:20:60:28:17:71:E2:B6:D6:A4:2B:2D
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fa:af:48:e1:1e:0c:93:3f:c6:b8:ea:10:07:7d:86:bc:e5:
cb:15:c7:b1:c9:61:4b:60:ad:b1:de:b5:47:99:6d:ff:4e:a7:
d6:51:0c:23:32:a8:66:77:61:cc:f9:cc:5e:8c:57:7f:ce:b7:
b8:76:f4:ee:5d:61:1a:f2:23:9f:a2:aa:9d:71:76:90:23:b3:
ef:f8:fe:e9:18:c1:ef:b9:b8:70:15:f5:7c:c8:46:bf:6f:d9:
e5:f4:49:7e:03:ec:3b:1b:83:5b:e2:f7:d4:a1:d4:80:2a:d9:
de:1c:fa:ea:24:70:2b:d5:db:6e:16:ac:37:7b:ad:f6:3a:f9:
d2:79:20:18:d5:ce:43:a5:81:ec:4c:c1:ee:39:ed:f5:2e:eb:
57:f8:a2:08:26:c2:ae:d5:08:c4:08:6d:28:d8:4d:31:0a:10:
f7:d9:aa:ba:91:a5:86:a7:e2:a4:0a:8e:fb:d4:b6:6f:7d:08:
58:5f:b7:f4:2e:f6:6f:c3:33:9b:a5:dd:aa:35:c3:42:95:11:
fb:b5:9c:45:4d:8b:5e:40:42:b3:d3:7d:51:ad:78:c4:88:93:
93:75:2c:60:5f:06:51:88:ee:93:d4:7d:18:f5:23:d3:64:27:
64:d3:96:e1:e7:bb:28:96:d1:0c:ca:bd:91:30:b5:9e:27:ad:
2b:7b:73:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:02:56 2026 by rpki-client