Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: ijaIptkXNbUGqE2JiIKlPwCLe5QRTJhhJn8xY0X9XdI=
Subject key identifier: F1:18:1D:0F:11:59:43:32:BB:12:B5:AF:AD:C2:1A:89:1A:6B:2F:24
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 019D98F51612C67287FC36F90FAEA500EBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 0B4E
Signing time: Fri 17 Apr 2026 01:01:31 +0000
Manifest this update: Fri 17 Apr 2026 01:01:31 +0000
Manifest next update: Sat 18 Apr 2026 01:01:31 +0000
Files and hashes: 1: XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa (hash: wAuwL6Iz2Pwm9WGIInMjcsxZMvhkc1vHutS+nMnQpa8=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: EjEZgv1x51FN5L5tYFK82NxAXhwAWIy3aqWMlSTM02Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:16:12:c6:72:87:fc:36:f9:0f:ae:a5:00:eb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: Apr 17 01:01:31 2026 GMT
Not After : Apr 18 01:01:31 2026 GMT
Subject: CN=f1181d0f11594332bb12b5afadc21a891a6b2f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:65:38:82:ee:64:a7:89:41:a3:34:7b:9d:
62:6b:56:e6:4c:e5:07:97:dd:56:10:73:57:f7:86:
6e:e7:7b:e4:1c:22:c5:84:6b:04:8e:db:9d:97:67:
10:d3:e1:68:23:c8:fe:b6:0e:1e:b1:93:a1:7c:7a:
d1:bc:25:68:29:3a:fa:2f:66:d0:bd:54:0e:35:b1:
19:b9:fa:05:09:03:15:ee:f8:08:df:00:fd:32:e9:
de:a0:69:90:c2:f8:8d:4a:25:33:50:ee:35:17:ae:
0c:97:50:3e:9d:7b:60:ae:67:bd:d6:ca:e1:86:9f:
c7:cf:45:97:06:d8:77:53:cc:18:f6:eb:e3:34:6d:
86:95:ed:88:dd:b8:d5:ea:f9:6e:05:4d:b3:b0:f5:
4d:93:5f:d1:15:14:fc:35:d8:ea:8a:21:ea:35:e5:
4b:9f:90:0b:eb:b4:33:d5:31:4a:6b:1a:0c:2f:b3:
e9:73:24:38:78:40:6c:b0:f2:92:06:64:11:d3:11:
d8:83:a0:56:7e:4a:d2:c4:a1:ce:56:89:8d:25:bd:
41:b1:40:7b:47:e0:dc:d6:bb:08:3b:9f:8a:df:c1:
f8:25:63:4e:a5:20:7b:18:a6:58:fa:de:10:55:d2:
23:dc:e1:ca:4d:d1:f6:90:59:af:26:f0:c8:54:b8:
ca:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:18:1D:0F:11:59:43:32:BB:12:B5:AF:AD:C2:1A:89:1A:6B:2F:24
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7c:5f:46:64:41:30:57:0c:67:04:9c:cf:91:45:de:68:40:
88:c0:f9:30:54:aa:94:b0:fb:1b:12:57:15:63:fb:e6:3a:21:
a8:7d:23:93:c2:b5:6d:7b:6d:1a:e4:a0:8e:40:e9:a8:38:5d:
0d:2f:14:2b:be:34:9d:30:55:a6:a7:33:5a:dd:07:23:7d:97:
75:7d:05:69:2d:15:d6:5c:d1:8c:af:d6:29:2b:d3:25:e6:18:
c5:da:68:35:52:04:33:94:43:a1:e3:50:f3:d7:f4:d8:42:f3:
d9:d1:05:a1:c1:eb:87:cc:ca:bb:da:71:2b:c8:89:95:4f:59:
07:51:1e:8c:80:57:08:f3:09:9e:3e:a5:6c:be:cb:35:d3:44:
6b:13:bf:32:10:d9:9f:c2:91:55:ff:5e:4a:d4:e6:0e:5b:2e:
90:f3:29:48:be:40:43:3b:66:be:4b:d5:d4:1c:b6:37:4a:50:
0d:e4:0a:0e:77:5b:b2:b0:3a:cd:a2:e0:c4:ee:eb:94:b4:ea:
f9:64:5f:2c:25:ac:0b:c0:9e:82:bf:7c:20:b0:2d:18:48:bd:
e1:15:72:7d:48:83:73:43:e9:f3:71:5d:11:7a:21:93:93:53:
0e:28:60:f9:0b:02:9b:79:c9:4e:e3:94:a8:5d:ed:c0:e3:09:
5c:97:0f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:25:32 2026 by rpki-client