Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: Jl4fylzlF3gdb/Y7aSbGiHo6hg4iW/sfp2yjCv8Zy8M=
Subject key identifier: 06:9E:0B:22:BE:55:E4:6E:0C:30:28:96:AD:1B:DB:43:97:0B:06:9E
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 019EC2C994E4878EC2002867F261C9B72FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 1966
Signing time: Sat 13 Jun 2026 21:00:51 +0000
Manifest this update: Sat 13 Jun 2026 21:00:51 +0000
Manifest next update: Sun 14 Jun 2026 21:00:51 +0000
Files and hashes: 1: o0tMA79YFIEEyFTw2xYa5Lv3piU.roa (hash: 8In4s4VKHhCyRo6MJFcuDqa2z/AG50EjAqON9SCd4uQ=)
2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: Vl0CLjzwujUX3aQCRc9aKybRceXTDdTGd4AaRSsWXAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:94:e4:87:8e:c2:00:28:67:f2:61:c9:b7:2f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Jun 13 21:00:51 2026 GMT
Not After : Jun 14 21:00:51 2026 GMT
Subject: CN=069e0b22be55e46e0c302896ad1bdb43970b069e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:b3:1d:e0:8e:25:9d:c6:de:27:66:6e:26:
9c:33:3b:33:bd:1b:a2:c2:b7:1d:c8:ae:8a:b5:46:
01:ce:60:88:b4:e1:3d:1c:78:17:f5:94:60:c7:60:
47:2a:55:d9:f6:69:fe:a0:dc:a5:d2:cf:f0:0b:03:
17:d2:3f:41:64:4b:cb:f0:b5:ee:0b:f6:91:f8:c2:
83:b3:24:ee:e4:30:04:fc:12:98:21:dd:02:97:1d:
c9:66:08:d1:41:7c:a6:f8:99:57:66:cc:46:f3:c2:
ba:19:71:dd:3f:1a:c9:4f:69:37:d7:bb:7c:e9:8c:
ee:de:28:c6:13:b0:2e:dc:37:0f:a2:cd:b0:e4:9c:
c7:32:36:a7:0f:90:67:a9:19:80:57:59:05:87:2a:
28:9e:b7:0e:fa:6e:1a:68:14:55:0f:a7:eb:26:f7:
4f:45:db:c4:52:b6:23:00:bc:3b:29:19:3f:6d:d5:
ee:8b:eb:3b:0e:d7:c1:ff:11:34:c2:c0:8d:dc:ad:
23:f7:cd:f8:10:2c:6c:3e:5c:9a:e4:10:c4:24:3c:
c3:95:f8:89:e0:8e:20:be:b8:19:89:5e:2e:da:84:
a3:3c:45:e5:e4:8a:89:75:54:b0:85:c3:86:83:06:
45:07:2f:b5:c0:cc:bb:b2:16:50:a1:b9:13:c2:32:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9E:0B:22:BE:55:E4:6E:0C:30:28:96:AD:1B:DB:43:97:0B:06:9E
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7b:2a:b7:f9:ac:27:f2:5d:3b:d4:e5:15:3b:94:51:60:00:
be:8f:d9:5a:2a:35:5b:50:bb:b6:68:ed:e9:a2:c5:c3:fc:13:
d1:12:2e:7d:23:c8:03:fc:8f:c0:2d:34:08:cc:0c:86:7c:e2:
84:02:83:c2:77:c3:d9:af:44:6a:37:48:e1:1d:d4:8d:ac:7a:
db:b7:e0:df:df:34:9b:45:bd:ca:69:ee:a4:61:bd:8a:9f:bf:
81:34:d3:da:aa:d7:c6:ba:4b:da:4c:c2:a5:6b:17:2e:6d:61:
d1:36:69:18:0c:70:93:81:79:bf:b4:a4:12:11:23:f1:3e:cc:
1f:da:bb:26:0f:e1:7d:4d:f8:19:b4:a3:ee:3c:6f:bc:13:27:
5f:68:24:c9:03:7d:5c:8e:4e:2a:a7:31:cf:c1:c9:66:90:6d:
b6:49:19:27:ec:48:28:5c:70:31:55:c2:ac:ea:49:a8:d1:c1:
4a:a7:e3:c7:50:03:5a:5a:71:03:95:5c:4a:b7:3a:12:b2:f7:
6f:d2:08:4e:cd:a6:5a:db:1b:d2:71:42:b4:e9:d4:d9:0d:0d:
4c:3b:26:7a:f0:c9:d5:39:bd:57:3d:fc:fe:ef:b0:97:2b:6f:
24:20:f6:f6:0d:dd:e6:5b:cb:f7:57:ba:03:24:ca:4a:40:5e:
cd:75:25:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:16:43 2026 by rpki-client