Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: OXqXCxe1v026hMUJB4cEg2r09xvKEIaCgFAf8gzTqfw=
Subject key identifier: 6C:3D:E0:8F:09:8B:B4:A8:F7:15:AC:94:FB:0D:71:D8:16:B4:F9:3E
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 019CABA25CF98A360BF51BA937B75EAFB4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 07EF
Signing time: Sun 01 Mar 2026 23:01:10 +0000
Manifest this update: Sun 01 Mar 2026 23:01:10 +0000
Manifest next update: Mon 02 Mar 2026 23:01:10 +0000
Files and hashes: 1: clGNCBZAUsZmUY2Yr9tTeA-xspg.roa (hash: 5vbfK5sSOuwTJdbsyPF/pmsdysNhxTsWqZlPG/oHPeQ=)
2: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: ZCeVTfxl//Hd+y+NV/SN22cQUYAQLGoYQdaOKkE+G4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5c:f9:8a:36:0b:f5:1b:a9:37:b7:5e:af:b4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Mar 1 23:01:10 2026 GMT
Not After : Mar 2 23:01:10 2026 GMT
Subject: CN=6c3de08f098bb4a8f715ac94fb0d71d816b4f93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ee:2a:96:b8:b9:45:d8:a2:7d:25:77:3f:74:
94:87:4c:e0:69:08:e7:42:91:4f:bc:32:e1:b2:95:
53:1a:ff:50:ac:a4:df:71:8e:26:30:d1:4a:9e:c5:
b5:a2:3c:f7:11:3b:8e:71:ee:a5:5b:79:b2:4d:61:
e7:3f:fb:3c:e4:62:8d:1c:2c:ef:42:4f:8a:e4:8a:
8a:cc:80:a0:52:22:86:96:d3:3b:ea:86:94:e6:6c:
54:16:7a:df:15:86:4d:a5:ee:f0:a9:c6:0b:a5:69:
2f:ee:5d:13:8e:ce:2a:e2:52:71:7c:c5:06:24:a3:
1e:50:89:63:12:42:12:3f:2b:c6:ed:81:9f:40:0e:
53:05:5e:fc:37:61:85:70:64:f7:af:2c:e9:e0:d6:
a9:1b:18:d6:d8:f8:23:0d:5e:6c:bc:c5:08:b2:8e:
6e:ed:5c:cb:e2:1a:3f:fc:03:5e:9b:20:ec:9e:93:
cf:07:39:2c:bf:17:bc:41:ef:d3:34:08:02:67:40:
a5:c3:fc:bd:c9:2a:b4:d7:6e:65:80:1d:79:53:4f:
fb:8b:d3:4e:a6:38:69:f2:50:7b:1a:8a:86:84:a4:
a3:8a:f4:6c:c3:c9:36:79:a0:a6:fd:ba:02:7f:16:
45:3d:d9:05:41:c7:f4:ba:9d:8b:e0:f7:a7:38:de:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3D:E0:8F:09:8B:B4:A8:F7:15:AC:94:FB:0D:71:D8:16:B4:F9:3E
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fa:8f:72:7d:5e:3b:1a:26:7a:e4:17:16:cf:b4:34:9f:6e:
e4:89:b9:23:57:17:6e:5c:1d:12:f1:c7:eb:51:29:24:23:73:
1e:65:d2:41:f6:b1:7b:34:9f:94:95:2b:da:9d:5b:5b:9b:df:
ec:ec:fe:42:92:f0:92:5c:73:d3:53:9b:b0:32:30:a4:2d:cc:
ed:78:6b:65:3d:f7:97:21:3e:e7:de:48:27:66:7b:f6:ee:f8:
a2:28:43:21:85:d0:4c:f5:28:41:06:a4:db:cc:2a:39:17:a8:
b2:15:5f:5b:74:a7:8c:cd:92:07:79:52:01:69:c4:ca:0c:d5:
96:8b:58:95:88:d6:97:4e:2e:3e:fe:6f:53:c9:d2:ca:11:95:
d9:ba:ad:d1:c8:75:40:d5:46:86:f3:fd:35:c5:65:d5:6c:ff:
f2:c4:0b:ab:ab:0e:e2:ed:48:fb:d0:be:07:66:f8:d7:28:97:
83:e2:84:15:42:9b:20:21:b9:dc:14:d8:d6:fc:63:a8:47:1d:
2d:c9:0e:84:f2:e3:40:2d:49:8c:2f:ea:d0:18:42:ea:96:4a:
7b:6a:17:25:7a:72:9f:4b:cb:fc:02:94:82:d8:57:14:72:a9:
b3:d3:35:5c:6d:2f:14:c3:b1:12:f2:c3:d4:a4:c1:1f:18:21:
10:c8:98:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:22 2026 by rpki-client