Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: MwjWPB2rIg9FxV1Kt+RlWiGwb44JSpzZ09YNAtfFlkk=
Subject key identifier: 73:C4:20:47:CB:06:22:2A:82:F9:1C:BB:B6:AD:F2:83:D6:0B:9E:97
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019EC36E2FF7AEF192110150FC797E780E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 11D2
Signing time: Sun 14 Jun 2026 00:00:38 +0000
Manifest this update: Sun 14 Jun 2026 00:00:38 +0000
Manifest next update: Mon 15 Jun 2026 00:00:38 +0000
Files and hashes: 1: SvxwS_lV784DW9bPgSuJYXAnLY4.roa (hash: cRLgycuUHIOemfVnKATCpToT+Luf3V15E0LKGchaIIs=)
2: TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa (hash: XbrnUGWje15/NR9HfumBox3YZkdHMNSMKy7Az9ObxUM=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: 9jgNi+1uqWTmHKHrL6qqvWVP9WQSTU3l85a7YQ/ItEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:2f:f7:ae:f1:92:11:01:50:fc:79:7e:78:0e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Jun 14 00:00:38 2026 GMT
Not After : Jun 15 00:00:38 2026 GMT
Subject: CN=73c42047cb06222a82f91cbbb6adf283d60b9e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:90:e2:42:d7:8c:f2:31:c6:62:0d:b1:fa:
ab:69:0d:9b:1d:b1:f1:7b:2f:01:b5:0c:bc:3a:e6:
02:49:83:48:6a:84:28:db:89:9f:39:00:f5:6f:e4:
b9:cf:0e:1c:21:50:c6:af:47:9c:5c:36:44:ee:7b:
ed:a6:7a:33:87:04:4b:5d:fb:23:47:01:60:33:ca:
2a:f3:52:56:5e:37:af:c2:59:c4:ff:d7:5e:88:7a:
2e:73:3c:3d:5b:8f:73:80:3d:14:f7:a3:24:87:7f:
44:3a:ed:89:07:d8:64:f1:08:21:f5:89:05:04:13:
b6:e7:59:9b:5a:9e:de:5c:ec:a0:1b:a5:8a:ac:1e:
14:11:8c:95:4e:8b:b5:c7:a9:24:6e:23:46:99:e2:
a4:d3:79:5a:e6:2d:92:bd:aa:53:1c:7f:61:6e:b0:
4d:7b:a1:b5:38:28:5a:d3:7a:84:d3:ae:d6:9b:41:
60:5c:bf:82:92:0a:9c:4e:34:25:55:6f:dc:94:7e:
80:50:4c:c5:4c:2a:87:22:50:11:76:8a:b1:30:8e:
9c:b1:b9:06:1d:65:1d:aa:c8:c3:2c:47:45:38:94:
fb:81:c7:bc:7e:58:61:4b:5c:80:2a:62:11:28:45:
60:a7:cc:c2:fe:00:b9:2a:64:3f:d8:58:fd:be:ff:
c8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C4:20:47:CB:06:22:2A:82:F9:1C:BB:B6:AD:F2:83:D6:0B:9E:97
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d2:af:ef:a3:21:86:c2:e6:03:ac:7f:d7:77:9d:8e:85:64:
b8:48:dc:5c:38:67:76:a1:45:e9:84:ef:f3:51:a5:b9:2e:a1:
a9:89:8f:a7:8f:eb:cf:4b:cc:d3:cb:dc:29:af:9c:85:3e:e0:
7e:a0:1b:6c:5a:a2:0d:39:6a:80:58:be:ee:28:24:e1:bf:53:
a7:9d:db:75:98:5c:99:0b:33:29:1f:dd:7a:36:57:3b:a5:de:
9d:7c:1f:81:82:c0:9c:21:3b:d6:30:fd:f7:c7:7a:6d:71:91:
b9:0f:12:e6:e1:9c:1f:4f:45:44:10:c2:31:c2:32:4a:14:9e:
6b:69:bf:a1:67:80:33:ae:76:13:7f:1a:3e:80:49:0e:dd:ca:
03:d5:28:07:4a:49:c6:3d:fd:37:47:10:37:f3:4c:6a:72:33:
08:45:b9:6d:ae:9b:ed:d7:9f:c3:81:c3:6a:23:82:9b:3e:c1:
52:9a:2a:2e:f4:24:c6:7e:4c:b1:13:70:81:f8:28:20:47:4e:
d7:ac:4a:d1:36:72:2d:8e:e2:48:98:8c:46:00:7c:de:62:9b:
fe:28:91:3d:43:30:e2:43:55:52:72:b7:1d:cc:0c:33:7a:04:
94:17:68:b0:ea:46:34:0f:f0:db:75:0d:50:a8:82:95:ce:6b:
94:05:26:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:08:46 2026 by rpki-client