Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: AWtUD9mSqYsBSbsso8g+ewnCaN34lEID0Km8mg7fC6U=
Subject key identifier: 29:69:78:D6:86:F4:8E:8E:88:4B:01:7F:B0:51:3C:A2:1E:EE:60:10
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 019F834339D1509BDE33CA61D4E94DFE96E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 1950
Signing time: Tue 21 Jul 2026 06:00:48 +0000
Manifest this update: Tue 21 Jul 2026 06:00:48 +0000
Manifest next update: Wed 22 Jul 2026 06:00:48 +0000
Files and hashes: 1: RI1PUJj0Q_MD3P8uweukuXuYhlU.roa (hash: Udb4Yel6QV6x+EojTVD0SPU2vkANJh/DkSOzlaEFuOQ=)
2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: VWjhYM8GKenF6tCWNesCh6tdTvEPUhgW6g7Zig7tN58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:43:39:d1:50:9b:de:33:ca:61:d4:e9:4d:fe:96:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Jul 21 06:00:48 2026 GMT
Not After : Jul 22 06:00:48 2026 GMT
Subject: CN=296978d686f48e8e884b017fb0513ca21eee6010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:88:0e:c1:38:fb:59:40:93:8d:60:ed:0b:
57:b0:35:85:6c:57:cb:65:a6:91:5d:a5:be:74:7b:
ef:e7:ee:ea:5b:3a:9a:5a:e0:44:ca:be:d1:6e:1e:
0b:db:2f:03:35:8d:a0:6f:7e:e9:9e:a8:10:fb:1e:
a3:8b:e1:81:f5:32:96:89:65:ba:53:38:11:e0:ed:
e7:9d:bf:ed:28:25:a2:cd:34:45:bb:7d:6e:84:3a:
96:82:d9:55:57:4f:b4:c5:bf:64:7a:41:8c:b0:fc:
6f:60:1e:8e:d3:ec:c1:c6:89:0e:69:ff:86:42:d7:
71:45:f4:88:45:0a:98:cb:8b:33:2c:53:cd:30:b2:
39:31:99:57:c2:cd:20:77:6e:69:6e:8f:2a:fc:a3:
2d:6e:7f:77:24:9b:e5:fd:aa:16:75:04:b8:56:32:
68:34:e4:0b:f7:d8:c7:71:8e:0d:0a:15:16:11:c2:
95:0e:61:e3:7d:bd:be:fa:81:c2:bc:60:89:74:76:
cc:a1:2c:c8:5c:80:af:71:d1:c4:8d:c4:43:33:0d:
72:58:71:de:31:e8:a1:ce:0a:1b:f7:26:9f:40:9d:
c8:cf:2e:6b:83:4a:b7:0a:a3:80:ba:96:00:05:1f:
8e:5f:65:47:f0:8a:53:b9:bc:a5:61:93:72:e9:66:
47:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:69:78:D6:86:F4:8E:8E:88:4B:01:7F:B0:51:3C:A2:1E:EE:60:10
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:76:77:aa:0e:a5:94:3e:16:9f:a3:82:6a:22:3d:da:f3:79:
4c:d3:1c:72:06:a3:5c:3f:75:f3:80:32:14:82:88:0d:7f:3c:
a5:ee:18:9e:56:81:cf:b4:34:11:4a:9a:7c:7d:bf:42:95:64:
4b:25:64:51:7a:a2:0f:13:9f:40:c8:cb:45:ee:95:35:29:a8:
08:b5:3c:46:5d:22:bd:4c:e4:05:f0:11:65:40:7b:ad:18:c4:
d8:f0:3c:52:ed:03:53:24:5e:e9:1e:50:86:d7:c6:b6:8b:fd:
f6:61:78:6a:dc:4b:17:36:af:d6:3c:f2:d9:7a:f8:f5:21:98:
43:a5:c7:b5:ad:59:dc:a8:4e:95:da:ff:e3:d7:28:83:cb:d4:
11:fe:c8:53:85:6f:aa:49:68:c1:3a:b0:88:e6:d7:e5:c1:0b:
61:f0:05:7c:69:4d:59:67:7a:9c:17:76:95:da:ad:e6:65:aa:
fc:65:d9:df:87:5b:77:f7:dc:16:b4:68:2f:39:49:40:0b:85:
f5:8a:28:8c:93:b0:c0:df:7d:b7:d8:97:5d:42:85:13:77:05:
d3:91:6c:93:03:cf:94:fc:2e:6e:c3:78:81:f2:c8:0d:0a:1e:
d5:8b:9f:48:ee:91:dc:89:08:91:09:36:1e:11:09:b7:d3:b7:
cd:21:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:50:31 2026 by rpki-client