Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: z1ZDhuJbH9xxxDs/wz/JFntwhJiDF7uYqzkccAGGB54=
Subject key identifier: EB:8E:25:41:C6:5F:D0:F8:75:76:44:D9:DD:05:AF:9D:31:89:E4:DC
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 019EC1499C7BF9A7CC43FFD1095903CCBEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 134A
Signing time: Sat 13 Jun 2026 14:01:27 +0000
Manifest this update: Sat 13 Jun 2026 14:01:27 +0000
Manifest next update: Sun 14 Jun 2026 14:01:27 +0000
Files and hashes: 1: nPVHMKh_KfMvRao_vET8GSNdB60.roa (hash: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY=)
2: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (hash: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: GjGdsd2fhFcbGZnUH36T4nuVk6PZZF1TTCI/MMUOywM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:9c:7b:f9:a7:cc:43:ff:d1:09:59:03:cc:be:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Jun 13 14:01:27 2026 GMT
Not After : Jun 14 14:01:27 2026 GMT
Subject: CN=eb8e2541c65fd0f8757644d9dd05af9d3189e4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:04:88:a5:b3:3b:d3:59:ec:c3:99:d3:13:
50:9d:9f:2a:8b:6b:28:0f:0c:3d:97:50:c2:4c:74:
d5:72:43:89:03:61:bd:b1:40:27:c3:00:ff:2a:74:
2a:4e:6f:27:40:37:4c:b0:ec:e1:72:fa:55:fd:b4:
9c:0d:59:82:b0:da:0c:63:8b:57:5e:a8:37:f1:c8:
0c:4a:b8:e6:64:ea:08:68:59:55:6d:bc:24:f4:c8:
32:e8:60:e9:bd:83:a9:f6:fa:43:58:22:60:34:a5:
98:5e:74:9b:93:8e:fd:c0:85:58:4b:36:2d:49:14:
16:05:c1:89:b1:6c:7f:8d:0e:0c:32:86:83:8c:0b:
00:be:7c:28:b4:e0:af:de:a7:dd:08:d2:49:a3:7b:
56:75:17:94:2a:3d:be:48:45:ac:cf:68:51:35:55:
f2:ad:07:f3:57:a7:9d:4e:1b:15:ed:d9:ac:9e:59:
06:d2:e2:c4:80:9b:54:4e:18:70:54:61:b2:ce:df:
fb:ab:88:bf:5a:fb:db:ad:2e:ce:51:93:e6:a8:d5:
9b:ea:5f:a2:db:4c:90:06:b4:6d:04:54:85:a3:3d:
a0:eb:86:18:c4:ea:32:5e:89:2f:74:82:c7:ba:de:
08:06:b0:fd:96:94:0f:8d:97:b8:6b:36:4e:45:2f:
9e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8E:25:41:C6:5F:D0:F8:75:76:44:D9:DD:05:AF:9D:31:89:E4:DC
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:cc:ee:3c:b2:9f:54:47:b6:2f:c1:5c:69:fa:71:d0:f0:f2:
6f:9e:4d:05:30:99:8c:ed:e5:a5:dd:5d:29:18:21:a1:46:57:
b3:5c:96:e0:59:97:8c:18:2c:83:12:d9:cc:7c:05:f0:5e:d4:
e9:84:11:2e:e1:cc:cc:63:2d:c3:87:00:70:77:a4:4e:b4:17:
6c:87:63:0f:a0:fa:22:33:d9:aa:4e:52:3e:a6:af:6e:5a:35:
d8:6d:5d:2d:ab:cb:89:c6:34:ae:01:ed:99:0e:af:7f:08:8f:
ce:f3:14:44:10:3c:00:99:a6:67:55:e7:d8:e5:f2:ad:37:f8:
da:05:8d:e8:6f:77:da:09:87:59:14:25:e8:91:b6:c1:ae:fc:
9c:bf:99:d0:8f:20:77:f9:e3:00:7c:42:69:e0:12:c0:41:9b:
02:5f:10:1b:03:80:25:b0:03:99:07:11:e1:ae:b2:ce:58:9e:
24:3a:6d:93:ab:33:1f:29:6a:e0:95:16:67:01:e8:d9:81:8f:
42:96:f5:0a:2f:96:ec:90:fc:c8:71:e1:3f:49:8b:c3:53:c2:
c6:0a:c4:17:c7:66:0c:6c:f5:2a:fd:a1:a8:ac:ef:35:62:db:
fd:ce:f1:39:5c:db:15:7c:c6:84:f4:87:43:e8:ac:25:3f:8d:
20:17:fe:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:10:12 2026 by rpki-client