Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
File: pnYhghhEiOf3hxIqcYCZfOjpDUw.mft (raw, json)
Hash identifier: YsLOwQcw9YJKtSXO5vhdzmyAQoJTH922WIybEmbWeu8=
Subject key identifier: 50:25:75:97:72:F1:91:27:30:3B:C4:1B:4A:8E:80:73:BE:DB:52:03
Authority key identifier: A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
Certificate issuer: /CN=a6762182184488e7f787122a7180997ce8e90d4c
Certificate serial: 019D9C2D4D0E6BB6DF04CEB29D90B3B6D0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
Manifest number: 0588
Signing time: Fri 17 Apr 2026 16:01:47 +0000
Manifest this update: Fri 17 Apr 2026 16:01:47 +0000
Manifest next update: Sat 18 Apr 2026 16:01:47 +0000
Files and hashes: 1: VChK6W8_i7KzNeJCYx2BZhWr3Us.roa (hash: W4XLdsDcBYlIZCoLkL1ahtz4JOKN4o+Rhjw4JGtYoSA=)
2: pnYhghhEiOf3hxIqcYCZfOjpDUw.crl (hash: zL3wLe8GiiEJNpJqldtnew5Q7bSEQytUd0DITfOQQ2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:4d:0e:6b:b6:df:04:ce:b2:9d:90:b3:b6:d0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6762182184488e7f787122a7180997ce8e90d4c
Validity
Not Before: Apr 17 16:01:47 2026 GMT
Not After : Apr 18 16:01:47 2026 GMT
Subject: CN=5025759772f19127303bc41b4a8e8073bedb5203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:74:47:54:2d:ed:55:39:45:94:94:d1:db:
9d:5c:a9:02:ae:53:c3:47:c3:a8:ce:27:08:af:b0:
36:39:1a:61:b0:0e:67:9b:2c:c2:58:12:55:e8:81:
65:6c:a1:2a:82:27:f4:de:bf:98:7b:f3:82:bf:ef:
ce:fa:3c:3f:c8:2b:f8:25:48:a4:c7:91:2a:dd:89:
6f:e3:db:16:39:f2:56:98:00:ad:99:ca:bd:63:d8:
35:f5:09:a1:5d:0e:7b:79:e5:64:16:3e:e6:2e:a7:
20:cd:79:17:0b:de:c0:24:d3:b2:b4:9a:03:53:a1:
ce:6d:59:4d:78:6a:f0:e5:4c:81:be:ca:2a:be:66:
8a:77:27:4a:6d:85:5e:b4:8a:d5:ca:8d:d9:2e:f6:
57:2a:72:45:15:d2:b5:70:c4:39:56:8c:84:35:53:
19:23:07:d7:c9:16:83:6d:63:88:65:fd:51:d1:0e:
62:17:5f:8e:1b:79:44:f8:e6:13:b9:a2:76:d9:da:
2d:a6:b1:c5:df:7a:7b:a0:ee:61:4c:e0:6b:75:88:
f7:7a:21:b2:7b:1c:34:89:f2:fc:f1:cc:cc:3b:19:
6f:f8:ba:66:72:3f:7d:3f:09:d1:7c:ec:01:00:6a:
1a:c9:06:b8:b4:cb:1a:31:d1:e2:1d:62:99:ef:94:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:25:75:97:72:F1:91:27:30:3B:C4:1B:4A:8E:80:73:BE:DB:52:03
X509v3 Authority Key Identifier:
keyid:A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:77:1b:a4:21:f7:ee:8c:3c:1d:0f:71:01:11:18:c4:f1:ae:
40:82:75:73:24:e8:9b:ce:b4:72:e9:f5:da:e2:8f:51:6e:83:
fd:00:f4:a8:af:a3:24:ab:b7:e1:46:b2:6d:49:ee:2b:03:58:
72:29:7d:3d:51:7a:a0:48:a6:ea:43:74:0e:f5:49:ad:5e:20:
b6:90:2d:09:f8:a3:c6:9f:6e:80:91:15:f5:27:21:7f:60:d2:
0c:e9:61:24:cf:4a:85:05:1a:8f:bf:16:e2:e2:52:47:4d:f9:
68:3a:6f:7b:74:28:c5:8e:a9:c6:51:c9:af:ec:a6:b0:a4:ff:
6a:1f:1e:0e:e1:e0:dd:82:06:00:f3:cc:2c:37:05:66:f1:aa:
88:05:94:1c:99:c6:db:4a:a9:a7:f5:21:3f:46:ba:e2:59:ef:
12:b0:3d:2f:f7:9f:3a:bf:88:6b:a9:aa:3c:99:80:6c:66:f7:
a2:b9:df:1b:9b:c3:14:f0:45:cc:f0:e3:83:46:f4:9e:7f:cc:
92:4b:ff:2c:92:72:14:35:0b:cc:f8:82:8b:05:58:cf:af:d1:
19:21:d4:3e:25:e2:54:2a:d3:9d:07:81:13:da:cf:f3:15:f3:
23:7c:3e:de:58:2e:bb:a1:30:aa:39:e7:90:e1:75:7d:f5:59:
46:b6:62:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:54:26 2026 by rpki-client