Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: 3K8QhSjeDrFLQxtJmlw0i3ydVrGx/ajgtT6yeDFSYW4=
Subject key identifier: D6:2D:83:E5:A7:D5:1D:9F:12:69:47:C8:8B:4E:B2:BC:12:31:CA:35
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 019D97E1CEBD2EB5DF80EE3C9F2494866287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 0CB4
Signing time: Thu 16 Apr 2026 20:00:51 +0000
Manifest this update: Thu 16 Apr 2026 20:00:51 +0000
Manifest next update: Fri 17 Apr 2026 20:00:51 +0000
Files and hashes: 1: jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa (hash: heA9ElftnVcEx/Z56cUQXfy2JpdBhi/Gw5ToPa737lc=)
2: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: hVPdBtRh4uSvtn46ov6y2xU/LxoBWJaqtv9Pd+pLnro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:ce:bd:2e:b5:df:80:ee:3c:9f:24:94:86:62:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Apr 16 20:00:51 2026 GMT
Not After : Apr 17 20:00:51 2026 GMT
Subject: CN=d62d83e5a7d51d9f126947c88b4eb2bc1231ca35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:c9:d5:66:94:9c:1a:7c:d1:6c:ca:cc:85:
76:ad:4f:ea:71:f2:1f:da:80:aa:51:57:56:4a:a2:
07:6c:b0:54:b6:e7:ec:9e:40:2f:fe:c3:de:1f:41:
bc:ad:15:10:df:52:17:1c:29:24:b8:64:0c:96:0d:
84:9f:99:a4:30:66:01:56:43:ee:81:1b:1b:a6:ff:
c4:a9:d7:f8:c7:4a:17:3d:a0:11:84:18:f7:e2:6c:
de:ac:bd:c3:24:9d:f3:aa:49:fc:1e:5c:4b:50:d1:
a6:03:88:dd:5b:dd:8f:44:dd:90:97:23:f2:26:90:
a9:8b:c7:b2:88:f6:01:b9:ec:61:97:1d:b3:2d:a1:
61:5d:03:d5:13:73:92:32:c4:49:0f:a9:76:8a:9a:
36:d3:95:97:25:74:ba:cc:67:ef:55:b9:81:c4:86:
9b:d8:75:04:85:0b:f6:59:d9:05:cc:90:0a:19:47:
89:f8:da:be:9b:22:1a:ef:05:8a:b6:65:98:10:58:
c0:f1:80:ba:0a:af:2c:bf:48:6a:f1:a5:7c:f9:9f:
cd:8d:49:7b:d1:b3:49:9e:ee:64:cd:1e:63:27:e4:
45:a6:da:86:85:f3:e5:2b:cc:c7:27:fe:7a:30:e6:
22:52:a0:45:29:1b:4d:2d:3e:a5:0c:fe:60:a7:59:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2D:83:E5:A7:D5:1D:9F:12:69:47:C8:8B:4E:B2:BC:12:31:CA:35
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:73:2b:3a:26:1c:fa:32:fb:6d:98:46:e4:52:24:41:d5:5a:
1a:c0:72:df:df:e1:4c:41:ea:be:17:02:67:39:4c:90:70:df:
0f:34:e8:3a:ed:27:e9:e8:58:33:3f:72:60:11:71:3c:44:1c:
23:4c:d8:e4:f4:13:51:7a:83:4d:f2:07:03:d5:0d:b3:af:ad:
26:12:16:fe:0b:d1:fa:f1:29:e5:8a:88:32:4e:de:d5:81:cb:
55:51:ab:41:52:b2:14:87:cd:c7:96:94:4e:16:75:36:10:8b:
8a:f4:fe:f1:04:2f:c0:46:f9:82:7d:78:98:4d:b6:5b:95:84:
21:da:b3:e5:35:b3:f2:3c:6d:76:ad:d4:78:bc:77:12:38:81:
46:3f:0d:95:f8:67:69:f0:3a:16:55:70:23:ba:97:7a:67:14:
36:8e:91:e0:a8:4a:53:0d:46:c0:d6:19:ef:3c:7f:1b:f4:8f:
78:f0:10:85:56:d6:35:cf:2b:3e:3d:a2:37:3a:1c:e9:eb:78:
8f:cc:ff:1f:83:91:88:c9:3f:61:45:9e:40:62:03:cc:d0:73:
b0:1b:ae:08:19:ab:a7:b6:f0:af:2e:ec:95:9e:96:f8:10:2f:
5c:c7:69:68:7f:1f:22:bf:8d:64:cc:ee:76:66:b6:9d:f3:2b:
95:62:df:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:30 2026 by rpki-client