Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File: piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier: L2t0OJDmWaRogf/kfnZBvvPYnX6IjSyk3XyuH+ih0qQ=
Subject key identifier: 7A:91:D2:D3:C0:34:D6:28:44:5A:E4:A7:14:84:11:71:7E:99:92:75
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 019D9AE36CE5B46B6E1545BB9DE93002E551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number: 0D06
Signing time: Fri 17 Apr 2026 10:01:28 +0000
Manifest this update: Fri 17 Apr 2026 10:01:28 +0000
Manifest next update: Sat 18 Apr 2026 10:01:28 +0000
Files and hashes: 1: Sr6zqiJ99FeqwYQ28f19iLqoqDg.roa (hash: TL3BARSlFoDZ5ZNhUOEZiPZ9fIVbuOQ2POjRAByuFjI=)
2: TGeDIFBGIW5eczvcX5q3jNyzVtA.roa (hash: DgUdGVPI56iMDORgQFEHjPBMjjgqkbyYMnQ4bBFfVcc=)
3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: Myhe+06kmn4c6G/AmRnadTUAC29VX+7J1++NjItrPlY=)
4: tVbgzppTtTNiiJtIVClKJaUjV5Q.roa (hash: +w5E9Iu1vewLPX6wA/Khvas6REQH1AClWY9b6rdLWo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:6c:e5:b4:6b:6e:15:45:bb:9d:e9:30:02:e5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Apr 17 10:01:28 2026 GMT
Not After : Apr 18 10:01:28 2026 GMT
Subject: CN=7a91d2d3c034d628445ae4a7148411717e999275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:b5:ab:29:79:60:7c:48:15:24:05:c9:38:
92:c2:9c:7e:44:93:62:01:3f:22:b5:f0:0f:45:39:
0f:51:67:4a:e4:d1:e5:05:a8:0d:91:33:d5:5b:23:
4e:e9:da:88:6e:5e:96:28:04:1e:c2:5f:77:b9:a9:
01:51:fc:e3:48:ca:29:1f:f1:a5:e0:76:86:db:8c:
59:4e:8d:5c:81:a6:90:f4:16:f6:97:4b:c3:96:93:
0c:66:c0:e9:0b:77:9e:e7:ff:c7:d2:1f:1d:c5:20:
e6:5b:70:27:f4:fd:22:26:d7:07:3b:7c:80:df:79:
86:2e:aa:eb:cf:20:43:7d:b4:60:e1:0e:b2:56:a7:
3c:3f:60:97:82:b1:4f:71:72:8c:0a:ca:00:31:08:
ed:0f:c7:98:32:72:0b:23:02:22:fe:6a:02:d4:ca:
e3:18:20:e8:50:b1:dc:e6:d7:5c:61:ae:80:5e:a1:
10:f6:f7:1c:2c:1c:39:30:66:40:da:c5:11:61:44:
e3:f7:8e:7c:6f:da:8b:b9:30:f3:74:6a:02:8e:7d:
d2:b2:6a:a6:15:40:f8:25:50:1c:b3:e0:ec:a4:13:
3f:6b:20:c3:b2:bb:39:1a:57:5c:1c:1b:7f:7d:bc:
e7:10:fc:07:6e:3a:5e:6b:b7:db:ca:21:bd:02:fa:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:91:D2:D3:C0:34:D6:28:44:5A:E4:A7:14:84:11:71:7E:99:92:75
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:62:fd:92:4b:76:dc:ba:58:43:b2:47:a8:95:62:ee:42:6e:
09:37:eb:cb:90:bc:b9:da:72:11:9e:35:82:6e:e3:eb:68:54:
2a:af:dc:fa:39:88:21:61:7c:ad:a1:be:a9:22:00:a9:d6:dd:
42:0e:d8:82:1a:a3:f8:0a:48:b4:e3:70:57:f8:15:79:8f:f7:
70:1b:26:c0:a1:4f:75:6c:c4:89:4b:d1:d5:b1:8f:ab:77:24:
86:32:a2:13:4e:64:31:ca:8a:8f:27:f0:8d:dc:41:55:3c:76:
f8:ae:94:29:5d:22:b1:38:5f:d6:55:bd:d2:54:ed:48:32:83:
ea:d7:f9:18:9c:c3:bb:40:57:20:ed:21:18:42:3e:02:99:40:
75:eb:95:5a:c5:ef:9d:4f:31:2a:36:b5:66:c9:b4:72:23:d2:
d2:5b:bd:d4:82:37:f9:66:c0:05:88:9a:95:3e:82:fb:cf:21:
c1:27:cc:03:f3:f6:23:fd:61:b4:e2:0e:cf:79:dd:41:16:4f:
b2:d1:5f:7e:e6:4b:f9:b6:ee:83:40:51:70:7b:fd:d0:0a:86:
69:ac:fa:6f:67:17:0d:18:e9:34:19:67:03:7e:6d:2b:f2:43:
f6:bc:18:ae:50:8c:1d:0d:6c:99:50:fb:27:58:22:d6:f0:36:
f2:58:d2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:02:36 2026 by rpki-client