Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier: 02haNkhcF4i2JOS2WMpixLngl5dO0W1gwCXK5QXVaEA=
Subject key identifier: 7C:CA:36:D2:CF:32:33:DE:4F:73:15:D5:CC:41:99:F9:26:81:AC:24
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial: 019ED42B8D5D9EA3BB7582AFB367F72CDE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number: 06D1
Signing time: Wed 17 Jun 2026 06:01:24 +0000
Manifest this update: Wed 17 Jun 2026 06:01:24 +0000
Manifest next update: Thu 18 Jun 2026 06:01:24 +0000
Files and hashes: 1: 3fJrjAYV-8WA5qmnNRu8vP1jkLs.roa (hash: UTNsuGJV1hBq6NhuyQF7exUAJYp789Ei8OqvCYeZo7o=)
2: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: EN2iCN7xLS37kcm+zPVWunEjWqrYX9RP/4uMgfNOwbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:8d:5d:9e:a3:bb:75:82:af:b3:67:f7:2c:de:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
Validity
Not Before: Jun 17 06:01:24 2026 GMT
Not After : Jun 18 06:01:24 2026 GMT
Subject: CN=7cca36d2cf3233de4f7315d5cc4199f92681ac24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:f9:af:5d:3c:cc:3d:9f:b4:7a:e9:fc:4b:
ec:2f:4d:76:9b:16:47:10:3d:43:23:64:20:43:7a:
76:b8:5a:0f:e1:7f:e8:e4:2a:ff:c0:bc:35:0d:f6:
06:0c:fe:73:fd:c9:1b:92:26:01:63:e1:ff:96:cd:
35:bd:ce:c1:6b:54:fa:4e:86:b7:79:15:32:fd:cc:
0d:72:ea:b0:d4:b4:4c:2d:3b:84:92:86:c0:90:d5:
06:da:fc:db:f9:a5:d9:a4:9c:04:75:1e:70:a3:2a:
75:1f:83:a0:e1:f9:95:c7:47:7a:37:54:79:b3:d3:
fe:b8:95:ff:c3:e5:81:2f:d3:a6:eb:7f:46:93:95:
6b:44:32:dd:6c:b5:78:ae:cc:8d:cd:d6:f3:35:6e:
a2:11:1a:db:62:fd:93:2d:22:36:91:26:db:39:0d:
48:a4:5f:f9:e5:4d:25:23:9d:5b:00:01:b2:8b:4e:
de:2c:92:18:83:44:f1:06:23:b0:2a:7b:40:97:c5:
eb:9b:2c:46:13:1b:f7:d0:51:37:13:3a:cf:20:7e:
89:00:55:d6:7c:1e:a1:76:8e:36:f1:c0:e5:e9:58:
c2:a9:26:17:ee:6e:85:a4:cb:98:0e:dc:d2:f7:59:
a1:91:e2:ae:4a:55:c8:69:49:ec:7a:ac:5c:54:ed:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CA:36:D2:CF:32:33:DE:4F:73:15:D5:CC:41:99:F9:26:81:AC:24
X509v3 Authority Key Identifier:
keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c2:63:fe:36:20:8f:60:a0:9a:69:5a:ae:72:f8:1c:59:eb:
5d:e1:1d:1f:e1:8d:dc:02:0a:3c:5b:84:09:cc:a6:71:24:5b:
8e:b3:fc:8e:db:68:55:9e:4d:7f:f6:65:07:2d:71:c0:b6:58:
5f:4e:6d:0b:6d:99:80:99:44:b5:e9:e4:22:78:5a:7d:1d:01:
0c:16:db:df:73:34:3a:78:5b:0f:c1:03:e3:a0:ac:69:c5:81:
a4:19:ed:7b:7d:2e:13:36:24:45:fa:23:50:6c:d6:d7:fc:0f:
5c:e4:ee:8c:1c:95:17:19:23:d1:2c:3d:4b:33:d0:d9:c4:38:
25:3c:b2:b0:b1:d9:fa:25:4d:9a:94:56:4e:e6:3c:90:04:8d:
b3:21:15:7c:5d:f5:84:6d:dd:9e:73:93:71:4d:79:65:7d:be:
f1:5a:36:ba:a4:fd:5f:15:1d:2c:35:30:60:07:cd:a0:1d:66:
b8:9b:d0:1b:82:bb:55:90:0e:7c:12:41:ce:a2:8f:bf:72:0b:
e9:2b:8f:0d:01:0d:16:24:b1:1f:1c:b0:6a:35:f3:35:5b:ec:
12:95:0a:4a:b6:67:b6:b0:19:c5:73:cf:76:5f:ac:df:f5:87:
5c:14:91:05:ef:7f:3f:8c:f2:33:54:e2:80:fe:97:3b:09:43:
31:73:d6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:18:38 2026 by rpki-client