Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
File: pkHn9ngj7vUqGf4dyODmp_QclDM.mft (raw, json)
Hash identifier: wfRb+PbKq2+4f/1bVwKJ2hxE5FYQtib33utLdKQP0G0=
Subject key identifier: 78:4B:5F:A8:0A:85:40:18:78:55:8E:9E:A6:F9:B9:79:E0:6E:70:1A
Authority key identifier: A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
Certificate issuer: /CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Certificate serial: 019FAC07EEB0FF4D4DA60E6B2D4BF90A0C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
Manifest number: 0D71
Signing time: Wed 29 Jul 2026 04:00:28 +0000
Manifest this update: Wed 29 Jul 2026 04:00:28 +0000
Manifest next update: Thu 30 Jul 2026 04:00:28 +0000
Files and hashes: 1: nJSmMLTuP11zOj-elOc_2mrwgF8.roa (hash: 10N2e/W3MOYvDPcGICyNpYfCx8NxZM9dOTlLGlZzpE4=)
2: pkHn9ngj7vUqGf4dyODmp_QclDM.crl (hash: Lpad02kleO9DhVqZvwQclWaPmyAvD6RiDan3v1r1qRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:ee:b0:ff:4d:4d:a6:0e:6b:2d:4b:f9:0a:0c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Validity
Not Before: Jul 29 04:00:28 2026 GMT
Not After : Jul 30 04:00:28 2026 GMT
Subject: CN=784b5fa80a85401878558e9ea6f9b979e06e701a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:37:21:e9:61:72:55:3c:ba:43:51:36:9a:
60:0d:d4:8e:6d:6d:56:e9:e1:e3:a3:97:85:61:7e:
9b:5d:5d:74:58:46:d9:9c:d6:04:b6:84:23:3c:1e:
3f:a8:ea:19:d5:6d:c3:8d:6a:4f:ae:97:0e:5a:0e:
f8:d7:53:bf:eb:e9:7b:f7:d4:f8:b3:2f:56:8a:0b:
2a:83:da:9e:ad:cc:e4:db:0a:1d:bb:f4:f0:fe:a8:
d9:82:03:5f:51:58:25:0c:81:41:ed:c3:bf:5c:79:
11:43:fe:27:1e:98:68:4e:65:50:83:ce:51:16:a2:
0b:68:e8:e4:36:ee:45:68:7f:ac:ff:b7:0c:73:c7:
3b:85:fe:67:f3:ae:b9:f6:cb:05:c3:06:c5:33:73:
ac:8a:45:7c:6a:94:ea:04:f9:cf:8c:b8:2f:5c:15:
ef:5d:09:d3:17:8f:ae:4f:ca:9c:35:b1:20:35:41:
f2:b1:16:14:ca:34:74:c1:fd:06:69:cb:bb:ae:c8:
c2:e6:5c:4c:d9:57:ba:ea:3b:93:b2:1d:c7:38:1d:
a1:92:43:e5:eb:1f:d9:45:50:a6:5e:e8:57:fe:a3:
89:36:24:87:38:fa:dd:48:2d:6a:94:65:08:d3:68:
94:16:59:a4:f2:49:9a:3d:d7:45:e0:2e:4c:cb:ee:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4B:5F:A8:0A:85:40:18:78:55:8E:9E:A6:F9:B9:79:E0:6E:70:1A
X509v3 Authority Key Identifier:
keyid:A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e5:7b:4a:e9:a7:9e:e9:81:3b:78:32:35:6a:e2:1e:64:d8:
fc:21:ef:a5:55:2c:d4:4e:d2:ad:44:47:a4:a2:65:9a:15:82:
30:bc:bc:34:59:ba:8f:77:43:bd:05:a1:35:ae:98:bc:37:1b:
1d:12:d9:60:2d:b0:87:24:cd:5f:8c:ba:45:2e:e4:c2:3f:c8:
3d:05:f0:99:4c:b9:52:86:88:43:7b:38:4b:40:ee:85:6c:b5:
5b:fc:d9:8c:2c:71:d2:82:77:61:b0:7f:81:b8:66:09:ca:e9:
5d:66:71:b7:ed:b5:d7:34:a6:a4:1f:2a:1d:b3:73:5d:cf:b9:
5d:a5:e4:e3:73:6f:bd:80:3e:62:ec:73:0c:04:2a:74:39:f4:
59:67:06:93:48:1f:dc:3c:26:79:be:e4:56:bd:45:e5:03:f1:
f0:8d:8c:3c:f1:29:cc:5a:ec:f1:bb:cf:6d:4f:01:9c:24:58:
43:aa:07:b2:eb:0e:72:f1:02:bf:ce:f1:d7:10:b9:b0:5b:a3:
06:0f:78:b9:c3:1a:01:26:fa:ed:77:dc:24:b2:23:fd:ed:77:
df:0c:64:a6:41:e9:cf:77:28:70:c8:db:67:50:9b:58:d9:0a:
d7:a4:73:37:62:95:8f:64:28:28:88:77:d8:3c:15:fa:9a:6d:
26:3a:ee:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:34:26 2026 by rpki-client