Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
File: pXuo21YwYkxlOiY5F0s1kM4EFAY.mft (raw, json)
Hash identifier: bElKa6pCo1W+JV/O4IPa2jqs+0H12tcZA2ajsuSnUqY=
Subject key identifier: B4:79:93:7E:BB:CC:C5:2C:1E:C6:0B:92:C7:F7:3A:3A:2E:A1:AA:DC
Authority key identifier: A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
Certificate issuer: /CN=a57ba8db5630624c653a2639174b3590ce041406
Certificate serial: 019EC292DDE9151E9ABA943E95F26F8FAB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
Manifest number: C6
Signing time: Sat 13 Jun 2026 20:01:05 +0000
Manifest this update: Sat 13 Jun 2026 20:01:05 +0000
Manifest next update: Sun 14 Jun 2026 20:01:05 +0000
Files and hashes: 1: 8yeFiATSyAXfiOazb7-TVzpxgPA.roa (hash: /+IrcoQvrMrLoWvFl+U97S495MR+5y6wumyj8v/0eso=)
2: o1qu9kAQGyrDid3Spblf5v3dgGE.asa (hash: odg7GwvQ00QWdmBCQg59JuWtE0qJHiHi64Y8KEEj5bE=)
3: pXuo21YwYkxlOiY5F0s1kM4EFAY.crl (hash: L5KEkLltZyLEolNpI5QyTRsgc8VjAwIQ8h7yxoUpChU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:dd:e9:15:1e:9a:ba:94:3e:95:f2:6f:8f:ab:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57ba8db5630624c653a2639174b3590ce041406
Validity
Not Before: Jun 13 20:01:05 2026 GMT
Not After : Jun 14 20:01:05 2026 GMT
Subject: CN=b479937ebbccc52c1ec60b92c7f73a3a2ea1aadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:66:ef:33:9a:5c:57:d5:c1:0b:2e:50:5d:
87:70:c4:4f:86:68:54:bb:de:77:9d:46:cb:53:1d:
b2:9e:00:57:03:41:bf:43:36:1b:17:91:55:f4:7a:
96:9f:5f:93:13:9b:3c:1f:e4:4a:b4:d4:24:56:ce:
c9:34:84:ca:a8:9e:92:8f:c4:5f:75:52:bd:42:fa:
d5:9b:c2:e4:11:24:cb:25:21:1a:ca:0e:ef:4c:ac:
36:71:79:ad:80:b2:ed:6b:ce:53:78:1d:0f:49:5b:
1d:1b:7f:f4:ea:fc:92:01:f2:40:78:84:50:1f:0d:
e5:80:57:3b:ad:0e:26:ab:5f:9c:81:e4:d5:77:54:
54:6d:6c:59:d5:ae:fc:6c:16:da:64:22:64:02:b0:
87:aa:ac:f7:87:34:89:0c:c0:08:0d:a9:d4:72:bb:
ca:6b:ab:22:07:89:a1:d4:05:61:ad:05:a2:0c:3d:
10:8d:ea:61:a7:4f:e8:ce:9a:1f:93:53:d0:24:8a:
6e:a8:8a:da:d0:86:43:44:13:41:da:11:c9:59:52:
5d:3f:0c:19:0d:db:d1:6c:a2:18:e7:79:6c:d2:d6:
88:a6:a7:aa:e2:7a:7f:3c:55:ba:5c:ff:2f:01:d4:
2f:b4:00:45:0d:7d:1b:fd:ca:e2:14:80:32:f2:70:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:79:93:7E:BB:CC:C5:2C:1E:C6:0B:92:C7:F7:3A:3A:2E:A1:AA:DC
X509v3 Authority Key Identifier:
keyid:A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:05:2d:88:3b:6e:83:75:fe:a1:56:4a:1f:56:c3:31:d6:02:
e6:db:3e:84:82:9c:f8:97:fb:15:8d:3b:0d:48:e3:f9:28:fd:
7d:eb:67:c7:6a:3d:ea:15:9f:02:a1:1c:12:e4:58:bc:ca:4a:
09:4d:d1:d8:8e:49:06:f0:ff:e8:c6:87:87:32:38:a7:f8:82:
ff:d7:7e:fd:64:74:d9:a3:c5:96:4b:93:d6:49:96:a0:b8:28:
91:a2:92:ce:40:34:f7:e5:c2:dd:33:3f:88:c2:fb:0c:08:53:
c9:56:cb:44:60:69:95:6e:18:7b:03:41:3b:22:f6:57:bd:05:
c4:c9:31:0a:12:83:a1:e5:5c:4a:24:fe:db:ca:6f:eb:f4:de:
88:f7:1b:5e:7f:5f:0e:6c:05:41:17:ca:fd:c9:33:b4:f7:67:
3c:4e:e5:04:ac:f6:9d:8c:5d:12:4a:d8:00:79:d1:48:25:ca:
cc:d2:78:59:00:26:2e:9a:24:35:15:6e:ba:b4:56:ae:40:00:
7b:6d:4b:bc:55:78:b8:08:51:78:05:2f:ae:c9:3f:e3:4f:4a:
ef:77:dc:10:9b:8f:e8:e8:af:1b:93:64:c1:bb:81:65:a2:4f:
7e:bb:9d:d5:79:de:65:ba:38:11:d4:c8:52:97:f7:2f:e0:43:
d6:a0:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:27:37 2026 by rpki-client