Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: xzUJfgpFRi18WESyVqnvD97EqUT/LfGiLri8YkJ9BpI=
Subject key identifier: 2A:07:F6:13:01:71:1E:A5:29:63:73:C5:99:01:9B:A5:8F:43:66:8D
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 019EC44A909CBA87934F9E4A9B849621F2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 0BE9
Signing time: Sun 14 Jun 2026 04:01:21 +0000
Manifest this update: Sun 14 Jun 2026 04:01:21 +0000
Manifest next update: Mon 15 Jun 2026 04:01:21 +0000
Files and hashes: 1: XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa (hash: wAuwL6Iz2Pwm9WGIInMjcsxZMvhkc1vHutS+nMnQpa8=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: fWL1Kw0NdTPdtbxs+jQI9B4lF2nt3wdC6d3DyfVklcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:4a:90:9c:ba:87:93:4f:9e:4a:9b:84:96:21:f2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: Jun 14 04:01:21 2026 GMT
Not After : Jun 15 04:01:21 2026 GMT
Subject: CN=2a07f61301711ea5296373c599019ba58f43668d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:af:65:45:0b:7d:83:87:eb:53:1f:e1:89:a3:
d6:04:1f:90:6f:4e:fc:ca:f0:19:fd:ef:07:61:e3:
cc:be:37:dc:4e:88:e0:29:a3:52:7c:21:be:6c:e9:
0f:25:4f:18:3b:78:7f:43:c6:52:5a:75:bc:9c:53:
0e:b9:a2:b3:e6:ad:30:2a:00:0e:fe:e1:6d:ee:d0:
a0:0d:53:24:7b:43:79:47:de:a3:1f:4f:31:03:37:
27:8d:3a:d5:59:a6:7c:9d:e6:47:86:8d:19:da:3a:
b3:0e:6e:13:6e:6a:08:7a:7d:33:62:e5:96:35:dd:
01:bc:7c:9e:7b:d0:26:fa:6a:cd:b1:14:c0:d3:83:
73:97:f2:00:be:6c:28:4a:8e:e1:99:e2:48:d9:cd:
a9:bc:ce:8b:89:20:43:32:96:f8:6b:d1:55:36:9c:
57:40:a3:55:94:be:7d:ac:1c:43:76:11:9e:cb:f4:
c4:2d:ae:2c:8f:d5:b0:4f:88:97:1f:60:c6:62:13:
91:66:3a:a5:55:80:04:47:14:a5:59:0d:97:c8:a0:
7c:56:de:15:1f:9d:47:9d:a2:24:9a:8d:09:a9:de:
31:92:48:a9:b9:79:f2:c3:29:bc:67:8f:78:78:10:
59:43:49:5e:f2:2e:dd:a0:be:53:f5:8d:fc:fd:54:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:07:F6:13:01:71:1E:A5:29:63:73:C5:99:01:9B:A5:8F:43:66:8D
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9e:7f:e9:7c:d0:35:a2:d7:bd:e7:f7:29:d4:0b:45:9f:1d:
5b:08:22:6a:2d:12:e4:03:db:bc:88:be:c1:c6:8c:ee:4c:59:
9b:0d:13:fb:d3:ad:46:ad:6f:0b:e6:52:17:80:f3:23:2d:f0:
02:6e:b8:bd:93:aa:d9:bf:aa:5d:9c:a4:c6:35:34:40:e8:bc:
7e:c7:a1:5f:8a:df:90:48:10:08:04:70:39:d8:44:04:c7:d7:
59:dc:b2:34:87:59:85:6c:7f:02:2d:01:bd:fc:a3:3b:b1:f0:
83:66:bf:75:79:3b:e2:66:9e:94:ca:a5:ec:d6:46:11:bf:25:
f1:cd:39:87:4b:d7:c8:60:53:fa:d8:c2:d5:ab:12:fa:a5:39:
b8:1f:ce:c8:23:41:cd:3d:12:87:42:ff:f0:df:fc:30:d4:f4:
a0:e9:91:a2:c5:b1:d1:db:ad:e4:a4:45:46:30:09:25:3c:c5:
af:75:2f:cd:21:1e:8b:9e:d3:63:08:4b:48:58:a2:d7:4a:01:
15:40:66:e0:f5:4b:32:08:ea:f6:fa:94:e8:0c:e3:cf:c8:5f:
63:21:61:e3:8f:83:c2:c6:ba:37:47:e6:9c:c5:5e:b4:3a:d8:
32:0c:28:d3:9f:51:4c:d0:a2:e7:e5:8b:1e:79:79:d0:86:52:
30:e6:ff:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:35:51 2026 by rpki-client