Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
File: pkHn9ngj7vUqGf4dyODmp_QclDM.mft (raw, json)
Hash identifier: MwuAtFxISaweN5kw6NGF0xt9kTQgpFG2yAqDBkhzFUY=
Subject key identifier: 4F:1B:87:89:F4:E2:4A:EC:4A:63:17:0A:E8:C2:B4:A3:C1:35:FD:35
Authority key identifier: A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
Certificate issuer: /CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Certificate serial: 019FADF64EDF6909902311FAF2E048185471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
Manifest number: 0D72
Signing time: Wed 29 Jul 2026 13:00:28 +0000
Manifest this update: Wed 29 Jul 2026 13:00:28 +0000
Manifest next update: Thu 30 Jul 2026 13:00:28 +0000
Files and hashes: 1: nJSmMLTuP11zOj-elOc_2mrwgF8.roa (hash: 10N2e/W3MOYvDPcGICyNpYfCx8NxZM9dOTlLGlZzpE4=)
2: pkHn9ngj7vUqGf4dyODmp_QclDM.crl (hash: /6iHyfWC7Ft91737WvZ0P6l5n4jLlUsAQ4+NEWMWOyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f6:4e:df:69:09:90:23:11:fa:f2:e0:48:18:54:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Validity
Not Before: Jul 29 13:00:28 2026 GMT
Not After : Jul 30 13:00:28 2026 GMT
Subject: CN=4f1b8789f4e24aec4a63170ae8c2b4a3c135fd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:5f:cd:84:7a:e4:f0:83:68:b5:23:ef:38:
c6:30:f0:24:68:6c:d6:a8:07:93:29:f0:90:dd:c2:
24:f9:4e:6a:d6:b9:f6:f1:0d:c8:b7:1e:6e:0c:3d:
c9:48:05:65:f4:22:ef:30:e4:85:4b:af:3d:28:00:
ad:17:18:cf:ed:f0:ac:00:2d:13:26:69:a3:41:97:
62:5a:ed:f0:cd:af:99:d8:46:9c:2d:88:46:0e:82:
e5:d1:c4:0d:94:21:7f:ca:4f:ef:b4:65:8b:df:dd:
d5:0a:6b:5b:fc:a5:e2:e7:92:09:2d:2e:a3:2d:74:
f4:bb:23:cf:f2:54:fc:d3:86:01:74:c7:f9:d3:79:
62:1d:c0:86:d7:99:7d:a5:c0:ea:79:00:36:5a:1c:
a4:c9:60:4a:4b:4b:8f:de:87:06:58:03:68:bc:92:
99:cf:d9:b9:77:fd:68:77:02:ae:d1:82:ab:2d:b8:
a9:33:4f:91:13:ff:ba:79:71:d6:fd:d1:0e:8a:8d:
66:d5:5c:1c:58:29:d1:e2:9e:95:f4:5f:5b:ed:67:
58:89:a6:f8:e1:e6:a9:5a:f4:4a:00:1e:4e:df:7c:
24:70:e6:3b:bd:e2:42:9d:60:9b:03:05:60:de:86:
d6:d6:f8:e3:b8:7c:30:11:21:19:37:3e:b1:43:19:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1B:87:89:F4:E2:4A:EC:4A:63:17:0A:E8:C2:B4:A3:C1:35:FD:35
X509v3 Authority Key Identifier:
keyid:A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5b:22:1a:2e:d9:8b:5b:7a:15:9f:c4:cd:39:b7:42:59:f5:
f8:b0:33:11:e4:8f:f8:9f:2e:7c:b7:2e:97:2c:50:ce:8e:48:
eb:05:7b:1b:89:85:cb:05:bf:26:d5:58:27:7b:6d:d4:4c:02:
fb:72:c4:3f:d6:81:bc:2b:28:c6:ee:8a:42:66:eb:e9:17:e2:
43:22:74:bb:21:20:54:22:24:73:1c:4f:6a:98:d7:11:40:97:
e5:32:25:c8:e7:70:50:96:49:0a:a1:59:eb:5e:1d:2b:ad:fa:
89:69:6b:f7:4f:18:00:5c:ea:f2:34:5a:90:ed:86:7d:36:27:
57:1b:b4:8b:ef:dd:02:42:cf:7c:4e:38:90:96:81:64:68:7f:
8d:94:ae:c0:14:f5:d3:8d:96:33:27:ca:84:09:c1:a9:37:ee:
50:e2:83:72:3e:50:37:fd:04:66:c3:05:b9:73:9b:7b:4c:23:
f0:e1:44:d4:27:42:f5:6f:a7:b8:13:89:19:35:05:95:a3:72:
27:e1:77:42:96:2f:d8:db:39:fc:de:d8:c1:c1:49:72:b6:34:
9e:c2:cc:c0:d3:61:be:c0:2e:f3:76:11:df:76:db:f0:1a:f8:
ad:85:df:19:24:c8:aa:6f:6a:65:7e:4e:89:f6:80:02:4e:7f:
e0:33:2e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:31:42 2026 by rpki-client