Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: jJPiDgL0K5veZtMJySMnnHzKYFZiwrDaGmaXSbzev3A=
Subject key identifier: 02:49:78:36:B4:DB:32:5D:56:05:FA:DC:40:6E:4C:E0:A4:3E:E0:1B
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 019ED42BC7D50E20BD51E83E3C69D147FBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 06:01:39 +0000
Manifest this update: Wed 17 Jun 2026 06:01:39 +0000
Manifest next update: Thu 18 Jun 2026 06:01:39 +0000
Files and hashes: 1: FQ8IH5cBqg-duSc2imKOt1dr3gc.roa (hash: zLx5O2JcZIf3WeCO72jwVB0rL1h+cp1I4W0w1x3rEC8=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: AzfHeMiBeer2sOpRD0IT//q3BDp4c8ksbuI7SFew4y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:c7:d5:0e:20:bd:51:e8:3e:3c:69:d1:47:fb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Jun 17 06:01:39 2026 GMT
Not After : Jun 18 06:01:39 2026 GMT
Subject: CN=02497836b4db325d5605fadc406e4ce0a43ee01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:0c:7e:a9:a6:58:69:76:86:9b:27:cb:80:
d6:45:83:90:e7:4c:f1:2e:9f:c3:5d:c6:8c:39:f1:
90:14:8d:a2:d7:4f:d6:5b:e9:0b:f0:45:8e:13:cf:
0a:6c:9f:cf:62:04:a2:f6:d6:80:39:df:56:ca:a9:
6a:32:b9:74:eb:37:de:84:a7:bf:d2:a5:f1:6e:ae:
10:f9:22:f4:d1:e7:b0:d8:f9:6f:da:92:de:53:ef:
0d:57:13:95:e8:80:24:27:2c:bf:25:0f:d4:55:b6:
5b:b4:5b:77:36:31:1e:b9:bc:7f:d7:72:f9:f0:62:
a9:49:cc:f5:fe:a8:87:0c:15:b0:b7:58:02:21:e1:
d2:81:30:ba:07:18:7b:4c:90:cf:23:0c:8d:43:56:
f0:45:5a:7a:2d:10:71:45:64:46:fb:a2:27:8f:90:
46:37:98:f8:6f:98:e5:75:98:02:4b:f8:ad:a8:16:
23:cc:1a:1c:2d:57:75:be:3c:1a:97:c4:80:bf:8b:
c9:ab:ae:0f:44:2a:f2:e7:d9:78:4b:d1:35:48:3e:
89:0e:fe:59:a2:fa:61:ea:e7:73:07:7c:10:8b:b0:
77:01:63:24:c1:3b:81:eb:53:33:1e:d1:0f:70:9c:
cf:8e:93:e1:ca:53:d1:cd:73:be:dc:15:61:e2:09:
f2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:49:78:36:B4:DB:32:5D:56:05:FA:DC:40:6E:4C:E0:A4:3E:E0:1B
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cf:26:79:14:42:15:04:e4:02:84:05:9f:4d:31:42:dc:8b:
29:e5:50:76:af:9b:da:de:d9:cd:72:ce:b0:9b:d3:9f:4c:21:
fa:56:d5:7d:14:de:be:87:09:e7:39:62:de:e1:c0:64:cb:e5:
fa:be:df:2d:51:3d:ae:04:fc:3c:7f:76:31:b2:45:42:ce:4e:
88:49:db:9b:09:2b:6e:f4:e1:be:5b:18:33:75:e5:55:8d:b3:
45:53:e3:35:62:81:08:c6:80:26:f0:dd:b4:ee:63:63:9f:e5:
4a:5b:0f:ac:38:4f:53:03:39:40:3e:e6:00:34:54:df:87:c7:
4d:10:9e:7d:9b:3f:55:40:1d:d5:55:70:8e:30:e2:1c:34:8e:
27:31:c7:72:52:27:ac:5e:98:1c:e5:94:05:e7:4e:4c:61:95:
78:de:02:c8:73:35:86:84:67:cd:e2:6c:e2:f5:dc:9b:88:cc:
f5:71:01:80:d1:0a:4a:91:6f:53:a9:12:f8:e8:ba:79:e1:19:
ab:69:39:20:bc:cf:6c:ad:3f:4b:9b:53:f7:ee:69:2b:ea:70:
17:54:1d:8f:3b:4e:b2:03:91:4a:a1:5f:d8:24:ff:8e:3c:6c:
fc:9f:e9:68:9d:6e:14:12:a1:a2:4c:4d:e0:e0:0b:81:c4:b3:
b2:c0:32:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:27:46 2026 by rpki-client