Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: cr5cWFhJWNbxuJjlun8J0M4K/xImDMOzELskGsGsW+Q=
Subject key identifier: 7F:A9:1A:A3:12:03:D0:CB:16:61:6C:CF:A7:C4:32:3A:0B:3D:13:65
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 019D992B937D1C8585AC3CDA31DDABB73BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 086A
Signing time: Fri 17 Apr 2026 02:01:02 +0000
Manifest this update: Fri 17 Apr 2026 02:01:02 +0000
Manifest next update: Sat 18 Apr 2026 02:01:02 +0000
Files and hashes: 1: clGNCBZAUsZmUY2Yr9tTeA-xspg.roa (hash: 5vbfK5sSOuwTJdbsyPF/pmsdysNhxTsWqZlPG/oHPeQ=)
2: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: Of250CRaylEQCg7RonRuMC6x0DxfVRTynrmgRdOd/Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:93:7d:1c:85:85:ac:3c:da:31:dd:ab:b7:3b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Apr 17 02:01:02 2026 GMT
Not After : Apr 18 02:01:02 2026 GMT
Subject: CN=7fa91aa31203d0cb16616ccfa7c4323a0b3d1365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:ca:5b:8c:97:e7:84:1e:23:85:27:34:d4:
19:56:f8:e5:d6:07:ac:fb:2b:8b:d6:a2:ca:69:86:
25:72:f3:9c:a6:36:06:ba:0d:d4:c6:ff:ec:3b:4b:
09:fc:26:14:f2:ed:4f:ff:8f:ed:2d:41:6a:0c:2e:
b7:6d:54:67:01:d0:9d:e4:8e:61:ad:a3:cd:4c:34:
ed:0a:88:3c:b4:ba:81:ac:86:ab:dd:bb:52:35:b1:
b0:e6:ed:92:41:90:fb:98:59:c3:eb:f2:02:4c:76:
51:77:da:71:26:4d:2d:83:44:79:5c:8e:e4:93:3d:
bf:d6:d5:48:5a:29:79:05:55:2d:74:e7:0d:df:0f:
91:7a:bb:a4:79:49:8f:20:9c:63:41:08:66:59:7f:
cd:87:6b:f4:f5:99:fd:56:60:db:d1:56:7a:e9:f7:
8d:f9:dd:89:18:b0:bd:e0:6c:d2:1c:74:ed:7f:04:
52:c7:e8:85:11:37:cb:76:93:1b:6a:84:53:0a:fa:
99:45:c1:76:66:c4:b2:fb:56:f4:ad:ca:94:8e:5b:
30:d9:db:17:2d:e7:b1:0b:6b:7c:39:3b:70:b2:b9:
e2:51:87:fb:cd:4e:cc:99:f4:e0:4e:14:30:b3:08:
6a:6c:8c:16:99:40:f5:d4:3c:f1:20:7a:2b:53:22:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A9:1A:A3:12:03:D0:CB:16:61:6C:CF:A7:C4:32:3A:0B:3D:13:65
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:c7:a3:8b:0e:a8:36:f3:38:63:ed:bb:d6:a1:05:0e:ab:28:
22:9d:1d:2b:cd:8a:90:f5:f3:6c:68:a7:86:b7:b8:3c:a2:1b:
87:3d:4f:15:09:c5:a6:03:45:fd:f4:44:02:ab:42:8c:2d:c0:
69:5d:2f:23:a1:f4:2f:2b:5e:62:d9:81:07:3b:63:20:b6:28:
1d:7c:0e:f8:36:51:06:00:08:11:fb:a2:07:58:f1:1b:3a:e7:
46:40:09:30:23:5e:d0:0e:01:61:95:dc:08:7f:d2:08:07:4d:
90:fd:2f:b9:fe:e0:dd:33:60:98:30:8e:a8:02:43:a5:0e:49:
53:1b:ef:32:6b:6e:8f:2c:9d:ab:9c:b6:3c:04:8a:92:ea:3a:
43:e4:60:a6:15:f3:15:fa:94:0a:78:c4:b9:a5:32:b7:40:0f:
35:d9:0d:17:79:64:2a:56:4a:36:c7:b4:2a:03:f5:30:7e:10:
cf:82:e6:17:a7:86:17:d8:a1:6f:1c:8e:68:86:bf:97:f9:fd:
0b:7c:9b:a6:f9:1c:89:1b:fd:32:56:b7:d3:cb:0e:79:e0:d1:
2c:86:8d:bb:85:d1:67:90:08:c3:e1:a6:e0:14:58:d0:72:8c:
7e:ec:41:7f:22:4e:64:39:db:87:a7:c1:5c:ec:3f:e2:ce:f7:
9e:04:58:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:46 2026 by rpki-client