Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: 3kZzJOXyxFvaf2nXxYNpCks4+2MQbkoowhSzgFshB8E=
Subject key identifier: 53:F3:EC:7E:C8:55:85:2A:98:F0:24:5B:74:C1:24:53:B2:75:A7:CF
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 019F84C360AC9994DF9D6BCC6C326A3C9445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 19D8
Signing time: Tue 21 Jul 2026 13:00:24 +0000
Manifest this update: Tue 21 Jul 2026 13:00:24 +0000
Manifest next update: Wed 22 Jul 2026 13:00:24 +0000
Files and hashes: 1: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: UQBAQsEHWKlzd/R73dwTtOMfFLRG+yjzHJMN20FptxM=)
2: r1BhnEtrGRHSnduVeLfXI1g7D8E.roa (hash: rXhnnWAjarg7mZ42xlNMXXH5o5Am7aLxQUdcs4vzEJg=)
3: zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa (hash: 2I/sSelw5VmBQuf5YaJq9EbH4rTmj1lcBC5rreXqiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:60:ac:99:94:df:9d:6b:cc:6c:32:6a:3c:94:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Jul 21 13:00:24 2026 GMT
Not After : Jul 22 13:00:24 2026 GMT
Subject: CN=53f3ec7ec855852a98f0245b74c12453b275a7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f8:34:64:57:c8:40:45:98:1d:2b:ff:46:ee:
94:dc:e3:d3:de:b1:2c:4f:b9:83:08:17:e2:ad:49:
75:08:c5:97:0e:1f:e2:0f:8f:db:aa:1e:f3:d4:77:
b5:47:d2:b2:8c:5c:b1:dc:39:73:43:83:c8:86:ae:
e5:6b:c7:20:4a:7d:ab:ba:b3:07:b2:92:92:9d:05:
bf:e5:bc:4c:8f:03:de:a7:b5:c4:c2:6c:07:5f:7e:
9c:5c:03:74:e8:61:2f:84:cb:f1:26:e9:09:4e:d8:
ee:bf:fb:13:3d:8a:36:bd:01:00:e3:ed:76:c7:89:
b8:26:05:eb:29:a7:b6:80:15:84:36:1a:47:cc:96:
ac:15:de:49:d3:83:c6:b3:73:84:d9:ce:cb:29:38:
7b:f3:c0:76:a3:09:f2:ba:89:1b:9f:a7:43:d2:74:
fe:13:0c:2f:59:b1:03:20:68:fd:08:27:8b:ec:93:
af:76:17:ee:7a:22:cc:97:d6:f3:45:6f:83:61:eb:
6f:b3:94:8a:d9:7e:97:40:dd:c0:73:c3:37:17:f9:
14:45:0c:c1:47:3d:b2:55:90:15:4a:02:a8:e4:d1:
b5:67:1e:0b:63:d3:00:d7:24:57:e6:a5:c0:f3:7e:
d7:56:6e:bc:b5:1d:9f:68:2b:9c:c1:fa:d6:1c:d2:
a7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F3:EC:7E:C8:55:85:2A:98:F0:24:5B:74:C1:24:53:B2:75:A7:CF
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3f:2c:b7:b4:26:47:8b:4a:2f:11:c8:ad:20:dc:18:1e:11:
e9:69:15:07:05:53:61:53:3b:de:96:9a:66:3b:6b:b0:ad:71:
c8:f8:1b:cf:02:f3:ec:ae:c3:bd:38:69:16:07:77:a5:5f:33:
52:bb:fa:7a:ae:c0:96:fe:be:75:30:d3:5a:81:49:d2:ff:a5:
85:b2:e8:72:94:76:0c:0e:d8:a4:c5:f2:8d:77:19:61:0b:92:
d9:ad:d3:df:9e:b0:fc:b8:39:0b:70:d4:0b:8a:f8:e9:a1:13:
22:72:2e:c2:a8:3d:b1:62:e4:89:90:a7:1c:ca:b5:2e:f5:11:
8c:05:b0:83:fb:d0:2d:39:47:2b:06:6e:d0:15:d8:0a:a7:e5:
3e:65:6f:a0:06:c0:cb:68:e8:9f:61:5c:a9:e7:9a:94:32:e1:
fe:36:c5:7c:98:0b:ad:d8:a4:70:80:f8:d2:cf:f5:49:c9:c8:
e9:12:2a:94:dd:8a:5d:6f:87:58:7b:24:a4:8e:53:de:e3:ee:
6a:6e:d5:0c:30:c3:4d:8e:d1:be:61:75:c0:5e:ef:51:5f:f6:
2c:d3:88:49:73:24:08:99:6f:8b:d5:e1:10:42:4e:7d:60:5c:
44:e0:de:41:db:9f:cc:0b:cf:76:25:23:39:8a:4b:52:f5:5a:
27:51:db:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:27:55 2026 by rpki-client