Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: /LwvWW6zPblzsXw8XMTGg7A/VVP6NJaocclPIjUhIZc=
Subject key identifier: 0E:EE:55:4E:FD:36:14:52:24:C3:89:9D:21:9B:70:7B:53:75:1C:42
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 019F848CC037941F74271B9F3788960BE528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 0DE9
Signing time: Tue 21 Jul 2026 12:00:44 +0000
Manifest this update: Tue 21 Jul 2026 12:00:44 +0000
Manifest next update: Wed 22 Jul 2026 12:00:44 +0000
Files and hashes: 1: 1-m2fud3k5EzmiZRoBhOtqfySzmI.roa (hash: HOvFww4yxsynh17q+d5C89mxcrHn4M7iS7z+Y3frs9U=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: NBI71Efqa5apHBk/Jtcj4UPJHjdXLZqj3OpPr7za9mM=)
3: e89SBhBBaL18qejVEfgQtSemlB0.roa (hash: Gc/uVJGxURscBi9WA9foLpSF+kUOEix1bWq345u58KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:c0:37:94:1f:74:27:1b:9f:37:88:96:0b:e5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Jul 21 12:00:44 2026 GMT
Not After : Jul 22 12:00:44 2026 GMT
Subject: CN=0eee554efd36145224c3899d219b707b53751c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:e6:18:3e:b4:39:8c:89:e6:a7:79:75:59:
ec:08:de:ac:37:de:25:e6:ae:7e:92:00:ef:ad:61:
a2:38:c8:ff:4e:94:f0:26:c7:97:61:a7:b7:b1:4f:
d2:f4:9d:17:50:cf:7a:bc:64:e2:8b:f4:27:bf:be:
92:cc:27:65:ec:a5:bc:ce:b1:44:4a:2f:20:c5:fe:
99:88:94:21:0f:f3:6f:48:31:f9:81:7d:78:18:8f:
34:9f:54:ef:a1:dd:c2:db:ee:dd:6f:e8:cf:ca:32:
f6:13:04:69:22:2d:ac:12:76:db:37:3e:fa:74:3a:
17:84:cd:9f:4c:64:64:07:b6:02:b7:fb:b6:89:0c:
24:69:66:38:71:37:db:39:a1:25:06:16:cc:0d:b3:
fd:73:da:c4:db:be:fe:69:44:fd:8f:ee:fe:d7:91:
45:77:94:cc:40:e5:56:aa:b1:8f:2c:b1:c9:35:82:
2d:cf:e4:a9:8b:e6:a2:5f:f7:06:25:d9:73:f5:46:
ad:9a:01:03:f4:ba:13:3b:59:7d:c9:2c:81:95:7e:
ff:48:3e:b3:e5:c2:1e:76:e9:03:a1:f6:ad:4a:a5:
3d:c5:79:48:7d:b7:09:55:8f:e7:11:14:c4:cc:5e:
09:11:5f:40:56:3d:8f:41:73:8d:45:d9:68:63:99:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:55:4E:FD:36:14:52:24:C3:89:9D:21:9B:70:7B:53:75:1C:42
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ff:3c:43:4d:ae:f7:ee:3d:fb:ea:d6:76:cb:70:8d:b1:a3:
c4:d1:d7:64:5c:b2:7f:c0:8e:bb:e2:46:57:72:5d:30:2d:62:
ac:4a:d4:60:cb:b2:56:d6:a7:3b:39:8d:88:fb:42:22:28:0a:
ef:0b:2b:36:8d:84:e1:18:ae:f2:c6:7a:8f:1a:b9:1b:08:15:
00:7c:71:66:db:a6:07:67:ae:8d:0f:05:b7:91:71:34:34:33:
ff:11:7a:a2:1e:f4:c8:46:96:c2:18:6d:92:bd:c2:61:b0:f5:
0c:0f:c1:3e:bf:8b:73:9c:c2:db:4d:5c:5d:bd:da:09:89:4a:
3d:e1:94:bc:a0:70:5b:b1:07:ef:b6:8f:7a:bf:28:51:5a:72:
1b:0c:8a:8a:fc:cf:26:8b:61:59:8d:15:b3:8d:d0:44:9d:b9:
80:a2:3c:a0:ca:68:1e:03:83:0e:fd:78:12:ef:18:99:af:16:
e4:ad:63:7a:db:03:be:40:82:14:94:3b:38:ed:ba:56:9d:50:
a4:ea:63:a6:af:94:74:99:3e:0a:6c:43:55:fd:1a:59:01:86:
23:22:f8:55:ac:e4:ed:87:6f:95:63:59:bf:5d:75:f7:8a:2f:
f8:63:cf:7b:12:a1:5f:44:bd:de:3c:d6:37:40:11:76:aa:8f:
18:79:e5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:05:06 2026 by rpki-client