
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
File: pIKPtnaRQQizohBYAGsbdGU6coQ.mft (raw, json)
Hash identifier: E6LMoWc6fWHXwI4TthvTxG6/GRyrJ7lTCJvi4VQFxTg=
Subject key identifier: 37:77:2E:B3:5C:26:D8:FA:91:EB:31:FA:C1:D0:BB:56:14:9A:3C:EB
Authority key identifier: A4:82:8F:B6:76:91:41:08:B3:A2:10:58:00:6B:1B:74:65:3A:72:84
Certificate issuer: /CN=a4828fb676914108b3a21058006b1b74653a7284
Certificate serial: 019F85D6BABA01373948AA326F05FAA4D16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:09 +0000
Manifest this update: Tue 21 Jul 2026 18:01:09 +0000
Manifest next update: Wed 22 Jul 2026 18:01:09 +0000
Files and hashes: 1: Axa_0aCzZ0jvkgs_nEgYudAvGUw.roa (hash: E8jftNtzJHRIAuWKpqpfJyJKPtiJuYowPv6GypFZ/UE=)
2: pIKPtnaRQQizohBYAGsbdGU6coQ.crl (hash: UbCSwB870l0kgLwJ/19rXflqA9ZqSE3i4Z6vdKGdEu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:ba:ba:01:37:39:48:aa:32:6f:05:fa:a4:d1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4828fb676914108b3a21058006b1b74653a7284
Validity
Not Before: Jul 21 18:01:09 2026 GMT
Not After : Jul 22 18:01:09 2026 GMT
Subject: CN=37772eb35c26d8fa91eb31fac1d0bb56149a3ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:30:99:ba:12:50:39:a0:4d:75:56:53:f3:
09:47:27:74:57:7b:ba:0c:bb:8e:4e:e3:37:5b:7b:
d8:87:96:c9:a1:b7:56:d6:20:10:b6:c8:7b:c8:76:
f9:06:de:8d:05:ea:cb:c0:c9:f2:35:c7:9d:ed:7e:
61:d2:e1:2c:96:d0:c6:63:57:e1:d6:e3:81:bd:a1:
bd:0e:c8:32:7e:28:c7:9c:a5:df:51:f4:ba:5c:a5:
8a:01:57:69:ab:55:45:63:d1:6d:0d:e5:ab:9a:11:
b5:a3:55:12:7a:ea:a5:fe:ff:e1:78:79:fd:1a:e9:
ec:d8:04:4f:ac:57:25:b2:f0:ca:e9:22:89:f0:a3:
4e:c1:89:50:43:f1:90:d3:ef:8f:5e:99:65:6a:9a:
75:d7:96:84:a9:4c:37:d0:b4:53:4f:56:ba:7d:da:
80:6e:e3:65:f8:77:eb:eb:0e:47:0d:73:0a:f5:ab:
a8:70:6d:6a:e1:70:68:41:e8:3a:48:68:bd:9c:47:
60:cf:c1:53:8c:98:1b:79:e5:2f:1b:b6:c3:12:89:
f7:bf:fe:c6:78:05:8f:87:3b:30:a8:ba:b4:22:c6:
0d:ec:63:06:28:70:a6:b8:4f:aa:25:58:e0:e8:40:
ca:a8:00:0f:0d:28:1a:1a:72:c7:ac:34:d0:34:e0:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:77:2E:B3:5C:26:D8:FA:91:EB:31:FA:C1:D0:BB:56:14:9A:3C:EB
X509v3 Authority Key Identifier:
keyid:A4:82:8F:B6:76:91:41:08:B3:A2:10:58:00:6B:1B:74:65:3A:72:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:26:ed:53:85:3c:ee:c1:c7:04:d7:20:a5:b4:ac:74:65:14:
08:6a:03:14:82:41:29:e4:f0:68:af:89:c7:99:73:34:4b:4a:
8b:dd:01:75:16:29:0f:bd:3c:a7:e1:00:b5:c1:e8:35:26:82:
71:b3:af:fa:d0:6e:59:d8:09:33:7c:5e:0b:f3:85:e1:32:3c:
60:20:b5:57:83:31:ea:e3:61:6c:b2:d9:e4:ba:4f:bd:04:84:
2c:a4:f3:42:6f:4c:39:24:70:9c:af:e1:33:1e:33:78:0f:88:
94:0a:58:74:80:f0:7f:2b:1a:e8:56:8f:bd:85:ad:7e:a0:a2:
a7:7e:b6:79:2b:96:f3:48:26:8d:27:b4:02:02:3a:ab:7b:84:
87:c0:18:e9:4b:eb:2f:c9:4d:e0:9c:ab:e8:44:34:f7:1a:05:
01:20:f7:d3:ed:ed:79:1d:c2:4b:7f:93:c3:87:c4:7b:bc:f3:
8f:96:fa:82:dc:f6:39:d6:47:53:a0:a6:23:b2:b5:f2:12:07:
ac:ff:2f:d5:46:88:ac:42:72:4a:1c:1f:8e:0c:81:dd:7b:31:
d6:1e:fc:ee:06:63:19:8a:e2:75:74:ac:18:cb:3d:b3:d2:98:
9e:0d:8b:26:c5:b1:81:c2:08:72:46:3f:00:74:09:f5:aa:19:
a0:5a:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:08:46 2026 by rpki-client