Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: OLNiTsWKvRLrOVUi1n9fcaaE7C6jhJys9oZkVWoi2Vc=
Subject key identifier: 33:18:F5:DE:AF:C9:C0:08:08:33:29:95:29:38:E1:F5:3D:7A:B3:7A
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 019EBF5AEBC9044FEEC0002F514B625E30A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 1349
Signing time: Sat 13 Jun 2026 05:01:07 +0000
Manifest this update: Sat 13 Jun 2026 05:01:07 +0000
Manifest next update: Sun 14 Jun 2026 05:01:07 +0000
Files and hashes: 1: nPVHMKh_KfMvRao_vET8GSNdB60.roa (hash: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY=)
2: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (hash: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: W4pGkXUvXOF6bPNsbZTzvEEo635ZlE+dcKXTPAlDYgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:eb:c9:04:4f:ee:c0:00:2f:51:4b:62:5e:30:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Jun 13 05:01:07 2026 GMT
Not After : Jun 14 05:01:07 2026 GMT
Subject: CN=3318f5deafc9c008083329952938e1f53d7ab37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:91:35:fb:92:92:eb:48:21:21:cb:17:b7:
7d:80:da:e1:33:ab:b2:b9:60:ca:3a:d9:ec:ca:46:
e5:ba:09:58:89:b8:d9:f8:68:fa:c5:db:df:d4:e1:
3e:b9:6b:0f:bc:03:b7:75:bb:69:fb:71:00:f5:1b:
37:41:0f:f2:42:1b:38:da:39:6c:f8:fa:0b:08:69:
12:3d:92:16:d3:3a:b5:d0:db:c9:3d:ba:d7:55:6a:
82:b0:9f:12:8d:60:f1:34:84:95:26:95:19:4b:df:
81:02:9e:2f:94:6b:24:1b:b6:b1:08:06:b8:cd:22:
f8:70:2d:27:81:a7:4a:b0:31:4e:91:ef:42:61:a4:
69:fa:e4:35:9a:38:84:b0:8d:3c:2c:0f:c5:3e:c6:
45:e5:e7:da:4a:74:9b:0d:27:e7:36:02:9e:6e:1e:
fb:e2:59:cf:31:c5:72:41:5a:bf:5a:b9:90:6a:14:
e3:e3:56:f2:c6:53:57:f7:0a:4e:29:c8:89:bd:f5:
d5:b3:55:7e:c8:ab:2b:fd:f4:7b:89:4c:d1:41:dc:
05:ef:3a:b9:16:b8:e9:2f:18:4a:77:b1:d3:19:7f:
13:c4:f9:6e:8e:4c:21:c5:b8:03:c2:bc:a8:b1:ad:
40:34:ce:b0:46:24:73:51:c3:69:83:6b:b6:a9:ce:
9f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:18:F5:DE:AF:C9:C0:08:08:33:29:95:29:38:E1:F5:3D:7A:B3:7A
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:7f:38:06:0f:61:12:eb:6b:f3:ef:61:09:b0:d1:21:48:ea:
13:52:e0:0f:4b:98:3e:5f:67:08:13:aa:b1:18:c3:7f:bf:a0:
61:c8:85:b5:32:03:8b:38:41:41:28:3c:54:ab:a9:03:f5:49:
a6:12:ba:55:fc:34:e7:a7:81:00:3f:ab:28:8a:b6:5c:b7:a2:
b5:a1:35:d2:e7:47:e8:9d:38:bc:0e:10:67:65:03:b1:a5:9d:
49:2a:61:82:30:23:5d:95:86:39:03:cb:2b:28:71:8b:2e:71:
61:22:67:03:8c:6c:66:85:21:d8:1f:9f:d5:2c:6f:17:fa:24:
36:91:a8:6a:ab:40:e2:cb:c4:36:06:db:d4:26:94:8d:6f:7e:
f9:41:b4:d7:e8:46:7a:8d:28:f0:70:1c:0a:b8:91:9b:99:d0:
ae:7e:97:8c:60:f6:1b:70:eb:08:71:b9:bb:e4:88:05:5a:fa:
9a:f7:af:88:41:63:bc:45:7d:61:1a:83:ed:81:c0:0a:54:dc:
cd:8f:53:89:83:53:f8:32:68:73:ca:b4:13:26:b1:67:38:a8:
f6:94:c0:1f:e0:e2:5c:e1:c6:1f:20:1a:0c:d5:86:43:a1:be:
5a:6f:1b:99:59:a0:9f:6a:42:55:b6:19:9e:5e:cb:04:d8:43:
0b:3a:91:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:52:14 2026 by rpki-client