Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json)
Hash identifier: Afz4EZSuu8FUhRxhyz8B1GbnQstO+HN0VUkjhv5bH6o=
Subject key identifier: BE:80:B7:EF:65:1D:23:70:82:CC:79:9D:B7:8B:F6:A6:BD:FF:D6:9F
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 019DA340F5A9B66D4BE76206FCD529A8CC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 01:00:36 +0000
Manifest this update: Sun 19 Apr 2026 01:00:36 +0000
Manifest next update: Mon 20 Apr 2026 01:00:36 +0000
Files and hashes: 1: TEyzbeE0RPVawr5UzZUBwB5xhtc.roa (hash: bkckZhvDpq39zxJxt09vjj1edwBpMlUWDqgAAFwbo24=)
2: Xdnvns2DRqazD189iM-2jNt4vZo.roa (hash: UAbhMlaae4Ik19w+3ZsFKwWR5TNpwZbcrBfdZMwkITk=)
3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: 37/4Ids2tbMePGJNKKlAnP8vaqRDw4CG5P7We+Z6E9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:40:f5:a9:b6:6d:4b:e7:62:06:fc:d5:29:a8:cc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Apr 19 01:00:36 2026 GMT
Not After : Apr 20 01:00:36 2026 GMT
Subject: CN=be80b7ef651d237082cc799db78bf6a6bdffd69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:4b:57:64:3e:ba:62:19:e0:be:99:df:a8:
a3:8b:4d:dd:4c:a2:cd:ef:d5:c6:8c:89:44:be:69:
c5:44:c2:f6:fb:0c:e3:4d:16:35:f6:20:b6:7c:af:
96:22:95:16:ba:d5:d4:28:80:e7:07:db:08:64:da:
7f:13:52:3a:75:a6:4b:ad:03:23:d6:4c:9b:49:3e:
59:24:82:98:a8:d0:b6:71:37:16:df:f1:68:3a:a1:
fe:3f:0a:aa:15:47:de:5a:c5:46:8b:64:f4:54:01:
b9:ea:41:40:32:54:36:62:60:76:04:85:1e:cb:cf:
28:1b:a8:cc:c6:b3:32:4c:ab:80:d4:da:8e:b4:1a:
c1:05:40:68:86:82:ee:63:52:fa:bb:2f:45:ec:b4:
eb:dc:b5:5d:d9:65:d7:83:aa:1c:0e:72:72:63:c6:
aa:07:19:8c:0c:55:94:55:80:3e:ad:28:df:85:d8:
1a:04:9b:a5:aa:86:9f:d5:2e:3a:7c:15:26:bd:7c:
66:25:46:f1:e0:95:66:fe:5f:af:91:5d:9e:1b:12:
f2:6f:5f:f1:be:34:96:33:14:2e:48:68:b3:5b:4d:
f2:c3:67:16:b1:18:d0:e6:49:7c:4c:bd:0c:64:d8:
c6:d5:dc:0f:b3:0d:07:ec:71:c6:af:b4:6a:0d:c6:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:80:B7:EF:65:1D:23:70:82:CC:79:9D:B7:8B:F6:A6:BD:FF:D6:9F
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b1:28:17:e8:34:04:ce:17:e7:e7:ec:3f:89:e2:bd:00:2b:
95:bc:7f:dd:5a:8b:b7:60:a1:13:a3:12:75:f6:db:54:f9:c9:
12:ec:36:db:a4:7c:f4:78:7a:71:89:e3:eb:44:3a:87:34:a9:
92:40:6f:b5:6a:36:f4:c4:83:3e:31:04:42:41:a7:e6:a2:bb:
1a:8d:4d:45:c8:a3:0a:b6:d1:2f:44:ac:2c:98:de:16:2c:f0:
62:28:81:02:d8:b9:c8:f7:f5:63:16:c5:0a:f6:68:1a:30:4e:
da:82:11:e4:e9:70:e3:50:8e:8f:78:98:c4:85:02:b7:29:75:
72:68:45:ac:f4:07:16:5a:cc:4a:ac:9d:50:2c:21:59:b0:09:
50:0d:47:44:c8:06:1d:f7:fa:03:b1:f4:44:aa:9d:6b:b9:2d:
fc:ad:7c:d6:56:6a:fb:50:9d:73:f3:58:03:a9:65:88:77:96:
a9:7b:77:65:34:43:f9:53:36:80:86:2d:01:d3:6a:06:ad:dc:
8a:57:d5:3c:96:2d:2f:41:db:cf:20:c4:70:a0:f5:e1:2b:b7:
2a:a0:eb:10:40:04:d6:ae:cc:57:25:f5:75:37:38:70:d2:2c:
a2:c9:8c:da:d1:17:17:ee:2e:eb:7a:a9:32:3a:d3:e3:fa:ce:
4b:50:b1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:26:59 2026 by rpki-client