Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: 8F/ZwdQnxr75RilfjH1F4x+x5HjcT9mXhpb7TSmEzao=
Subject key identifier: 29:0B:5A:BF:FE:8C:39:6D:38:B4:44:DB:2A:17:59:7F:D9:C3:7B:8F
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 019EC292C34E271C21541D263712E05C196B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 0904
Signing time: Sat 13 Jun 2026 20:00:58 +0000
Manifest this update: Sat 13 Jun 2026 20:00:58 +0000
Manifest next update: Sun 14 Jun 2026 20:00:58 +0000
Files and hashes: 1: clGNCBZAUsZmUY2Yr9tTeA-xspg.roa (hash: 5vbfK5sSOuwTJdbsyPF/pmsdysNhxTsWqZlPG/oHPeQ=)
2: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: Yn1bKWI9SimAyEhk3XTRxha8fA320dvdllE9gJNrWMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:c3:4e:27:1c:21:54:1d:26:37:12:e0:5c:19:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Jun 13 20:00:58 2026 GMT
Not After : Jun 14 20:00:58 2026 GMT
Subject: CN=290b5abffe8c396d38b444db2a17597fd9c37b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:2d:b7:70:83:2a:88:21:6e:0f:e1:98:7f:
cf:8d:54:3b:9a:f8:4b:a3:f6:28:a0:88:df:9c:df:
f6:c6:17:04:e0:9c:ef:1b:94:36:92:d6:7a:06:76:
2c:38:b9:64:ad:58:9e:df:6a:ee:64:9a:37:df:e3:
47:66:a5:14:95:f4:67:da:32:64:c6:a5:71:39:df:
61:93:38:a7:d8:5f:c8:3b:8a:81:68:2c:ef:c0:09:
c1:e6:59:1f:34:83:35:9f:95:90:6c:65:0a:e0:a5:
18:96:61:f5:94:f9:b4:00:0d:c8:fe:e2:0d:65:3c:
87:7c:33:92:ed:71:7c:85:6b:0a:b0:09:fc:b8:d8:
4f:5f:7c:12:e7:df:6c:eb:61:5f:9e:6b:d6:85:78:
7d:e2:4d:25:40:76:5c:33:42:ea:25:37:74:6b:d9:
51:f1:13:1a:24:fb:ec:4f:68:59:69:ea:41:65:bd:
1e:6f:66:51:64:ec:cd:84:80:87:f3:2f:5b:d1:ae:
d4:ab:f3:26:91:66:a0:7f:72:1b:04:c3:a5:be:b5:
bb:a7:7e:2d:3f:b3:d0:05:2e:1e:81:f1:12:30:56:
ce:f9:06:a8:28:c3:e6:ff:54:78:5c:84:d1:11:5b:
00:59:4c:ea:a7:37:21:ea:95:07:e7:66:95:ea:17:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0B:5A:BF:FE:8C:39:6D:38:B4:44:DB:2A:17:59:7F:D9:C3:7B:8F
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:04:d4:83:06:21:46:1a:27:ee:46:a4:cd:62:51:b2:03:e7:
1e:74:78:90:e8:7f:a9:46:6a:9f:d9:ce:52:f3:c3:d2:81:1c:
c1:c8:f2:9d:1a:fc:b7:d1:80:fb:5f:6f:60:60:92:ef:2b:5d:
45:26:43:3c:76:d4:47:dc:a3:84:54:09:56:a6:c7:e9:df:52:
ea:ad:c8:d0:4c:b7:56:bf:52:07:3b:4b:d8:0f:41:6d:80:30:
34:0b:09:51:cf:b5:fc:9b:69:50:eb:4d:23:0d:b4:0c:a5:a6:
71:9b:18:64:61:71:01:54:e3:1d:94:47:7f:1a:da:40:52:9f:
92:11:0e:94:fb:9c:ee:41:d2:01:17:86:71:56:91:67:a9:b2:
8b:14:77:f5:48:bc:84:29:1d:4c:9b:c5:d3:5f:84:70:b0:c7:
47:60:cd:1f:ef:70:39:6c:7f:d7:09:5c:6a:93:5d:ec:12:3b:
c2:ef:c9:80:ec:46:3a:82:f8:99:bb:1c:2f:c4:8f:1f:09:47:
1e:bf:31:81:da:4b:29:41:76:87:3f:f2:b3:a8:47:4a:0e:c4:
da:36:b3:be:7f:b3:06:93:a2:5a:f6:09:71:62:13:f2:c0:22:
1f:cc:d4:4f:3e:4e:de:bf:9c:d8:9b:06:08:ab:32:8f:a2:fd:
b1:64:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:49:59 2026 by rpki-client