Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier: YGPzZhf18rybfr5el7W9qod9+BBWjZtVZxqrN/n6kf0=
Subject key identifier: 19:76:24:E9:37:EC:53:A5:0D:57:DF:81:58:F1:FE:A9:26:9A:91:80
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 019FA14D385144CE7702E78F6508112A10E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number: 19D6
Signing time: Mon 27 Jul 2026 02:00:20 +0000
Manifest this update: Mon 27 Jul 2026 02:00:20 +0000
Manifest next update: Tue 28 Jul 2026 02:00:20 +0000
Files and hashes: 1: 7UycSOA2fNBupvFy-hFdJV1v7Io.roa (hash: 5kwOqNqNs3Py67MnZDjj6z2WyhVaijv3n26KPo38psM=)
2: EUznPNdi1RBuO_YCf9akt2u9WRY.roa (hash: LZ23fGDWAJm3pcS6NWs5vwLClCe20PqadqZJEm5+Myk=)
3: VHAZMRbuJy6K49Zh7bvrBNs8QHU.asa (hash: erFKugp76cbDaqZL6jbZ+AatD/saCuONTcWq0wMAJBI=)
4: arHeDdPCjS_AVATAetTx45LL1Dk.roa (hash: wzrmHuwOdDJUETKg+nffMJxHljjlvyXkAo4P+Hrjp2w=)
5: bhbbDS-1fRi0YZYd4HQcXgCmraM.roa (hash: Oc1LIi9fo5CXFk5Nkm2KdL+/MECS7o+E4CeQBySDINk=)
6: gugoFb8q0SHtyIBkY0PLePdn0z4.roa (hash: PfJgvUjin+qon9RPc3E2cAaH5BLLpJd7HD9BJAEBX68=)
7: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: E5NmOgQZSMKrKTL+FMWTeEV0x+8L3Y+Gq5CncbGXUyw=)
8: xoRDajz4eJy11O_J5fLAv4U4v9E.roa (hash: CkGw0sLJe5mjxRbSsZKMcGEgfVdDoPyOYU+L3J4izT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:38:51:44:ce:77:02:e7:8f:65:08:11:2a:10:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Jul 27 02:00:20 2026 GMT
Not After : Jul 28 02:00:20 2026 GMT
Subject: CN=197624e937ec53a50d57df8158f1fea9269a9180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:cb:29:47:06:47:ca:0c:65:b6:14:4c:b0:
bf:90:2b:b7:2e:f8:d8:28:a3:1c:3c:49:ff:d0:b1:
c4:6b:8a:2a:83:23:39:52:0b:33:f0:24:8e:7b:0f:
3a:ae:ac:ac:6b:4c:2f:43:62:d5:d8:54:d4:15:ae:
e4:4f:bd:4e:9d:ba:05:48:4b:60:20:59:7f:86:fa:
e6:68:6a:14:76:cf:92:59:d4:e7:f1:5f:0f:da:1c:
16:96:b8:58:8a:cf:a3:d6:4f:1e:47:46:ae:36:75:
4b:9b:d6:3a:d0:ae:b8:08:89:5a:1b:83:27:84:11:
95:6f:98:46:b5:0e:77:d5:b0:db:b7:8b:e7:bc:b6:
cd:56:96:2f:9d:44:89:d7:85:b5:14:1c:24:82:97:
74:bf:a3:3f:65:45:98:d1:6a:e5:80:5a:e5:ad:6e:
e7:b5:bf:8b:7e:10:bd:dd:7d:f0:77:d5:6c:07:2c:
3b:a4:4c:76:66:3a:f4:14:77:8d:b9:60:f4:ab:9f:
cf:7e:ef:e5:a7:59:39:9d:68:22:ad:e0:fb:83:c4:
58:20:64:00:28:9a:13:7c:5f:29:5f:12:82:4e:e6:
dc:b8:e7:ee:89:35:f8:df:fe:dd:d4:c8:97:7b:1c:
1d:fb:21:96:bc:4a:2c:8c:4f:61:03:2e:a7:d3:89:
96:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:76:24:E9:37:EC:53:A5:0D:57:DF:81:58:F1:FE:A9:26:9A:91:80
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:51:4b:e7:af:fa:2f:cb:cf:f7:08:78:f5:ef:2a:b0:98:21:
f7:6b:42:2d:f4:5a:c5:f7:2d:ee:cc:43:ed:ef:26:10:45:bd:
fb:a5:49:bb:71:b3:76:8c:65:49:01:46:44:30:8b:b0:d7:db:
1b:7d:13:bb:e9:f8:d2:db:5f:3f:84:e6:9f:9f:ad:9a:65:41:
4f:ca:80:74:29:b7:b5:22:98:14:54:53:6e:e0:8d:f2:6f:78:
ed:83:b0:86:be:87:09:42:26:33:98:73:27:49:7e:f7:e5:b8:
a3:16:e2:11:50:db:20:6e:b0:6e:70:7e:fe:c2:09:1b:c6:14:
3c:b7:5d:18:23:46:f5:0c:60:86:4c:dd:f7:52:8f:d4:54:32:
46:ab:fb:d5:58:f7:69:05:d8:f1:ea:f4:c2:0b:4a:f0:4a:1c:
6e:3e:2b:ba:cc:ad:da:4b:b6:88:64:63:f9:99:f8:64:60:a3:
f5:d2:f9:5c:3b:9f:73:78:5f:5a:c3:6e:56:8e:7a:6c:4c:27:
ef:38:21:de:9e:40:27:9f:c7:ff:bb:85:e5:09:f0:88:30:a3:
1e:41:5d:50:ec:ea:1b:de:16:0b:1c:f2:4f:0d:0f:89:7c:ba:
7a:ed:cc:6d:f5:e0:21:f3:9c:bd:a5:f9:a5:44:9c:70:b5:91:
4d:74:37:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:43:00 2026 by rpki-client