Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: TO5++8g8oeWy7WRbN4uxCnBmsZSeUxPlKOj5ScKGFWM=
Subject key identifier: 69:3E:C4:83:BF:2F:8F:14:30:65:0B:9B:FF:90:95:8A:0C:86:EE:67
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 019F984A5FA0C2CDABAA11E8B6F320FE6094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 19CC
Signing time: Sat 25 Jul 2026 08:00:38 +0000
Manifest this update: Sat 25 Jul 2026 08:00:38 +0000
Manifest next update: Sun 26 Jul 2026 08:00:38 +0000
Files and hashes: 1: Svs8WaYMaBYooAK5Llbdr0Xwf0o.roa (hash: ulklpVL+jocMv3vi7VJBHLEzxNJlxmy7adHjaQUdJa4=)
2: liNOwl4ffjTNwLOg4lX3c6vkVXc.roa (hash: ec9XZ/8wZUP1CTV/xvGoOKI7TsGIEdOECU3xzYakfZA=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: nhAFjp+YvQ16F7wwEAnsXtSaA93vnIpRu5IccAF892A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:4a:5f:a0:c2:cd:ab:aa:11:e8:b6:f3:20:fe:60:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Jul 25 08:00:38 2026 GMT
Not After : Jul 26 08:00:38 2026 GMT
Subject: CN=693ec483bf2f8f1430650b9bff90958a0c86ee67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9d:af:00:57:8d:18:b9:9d:48:d1:65:66:78:
eb:7c:ce:9a:c5:cc:fe:e4:65:5a:54:46:49:3a:b6:
2d:23:31:44:33:f9:a7:cc:e1:67:e3:a1:0e:eb:68:
1a:68:23:4f:f7:0b:ca:35:76:47:0a:26:b8:4d:9a:
27:3a:17:37:24:32:c8:6e:14:7e:08:2b:6a:da:31:
ff:d7:f9:51:d9:20:7b:c5:83:31:ca:75:22:db:5c:
6e:ab:72:c4:b1:bc:2f:e4:c5:65:9b:99:42:ad:5c:
3f:c7:67:4a:32:4f:b8:61:ed:d4:fe:bd:b6:d7:ee:
cc:11:56:e4:f5:a7:05:aa:71:0d:6d:b0:5e:ca:f2:
f4:a2:0f:37:75:26:3d:df:ee:75:7e:c8:c6:51:5e:
76:4d:58:0f:0e:5e:56:be:08:b9:d2:fb:96:bb:ce:
f1:e6:bf:7b:61:bc:60:3e:7e:98:44:38:85:66:78:
34:5f:f1:0f:45:7c:09:16:2f:96:81:ad:65:2a:73:
e8:4e:c4:d5:57:d2:19:d2:ce:d3:a0:d4:86:7c:25:
34:9b:af:bd:e9:7c:6a:49:b7:da:6d:cc:75:c7:da:
2c:5e:c7:21:cd:29:26:cf:ea:2e:d9:3e:91:56:7c:
95:0f:26:a6:fb:dd:f0:e6:45:9b:bb:70:0e:19:74:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3E:C4:83:BF:2F:8F:14:30:65:0B:9B:FF:90:95:8A:0C:86:EE:67
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:02:ef:ef:17:f2:0c:73:3f:63:ab:1f:d2:27:cb:ac:60:59:
94:73:10:f8:13:6d:d2:51:0c:98:9a:d1:f8:c4:65:7e:8a:8c:
72:dd:8e:e3:dd:31:e8:8e:74:79:1c:81:5a:34:07:d9:34:b3:
a0:10:5b:c4:26:49:ec:12:da:eb:49:f4:06:7b:25:24:49:6d:
f4:d5:a1:2f:1a:a3:6a:50:d8:df:c0:2f:6d:61:07:ae:a3:02:
3b:12:8d:a0:75:ae:f6:4a:b4:4a:75:b0:27:bc:93:dd:d2:cc:
bc:c3:97:b5:c8:f0:81:0a:df:5d:e0:0b:c0:48:73:2f:01:6d:
23:2c:49:60:fb:a0:0f:7e:63:66:cd:7b:d1:b1:d7:58:81:93:
aa:0b:bb:cb:86:89:56:96:31:c3:66:29:ea:f5:5d:be:1d:10:
05:94:f7:95:1d:9b:43:61:15:ec:62:32:6b:6a:63:71:d0:b3:
bc:3d:64:4d:ec:05:26:b6:43:27:f4:a0:06:3a:c2:ae:c7:39:
53:4b:8d:0b:24:11:70:82:27:4d:c3:33:de:cd:d1:07:d4:69:
d9:55:03:82:ec:ff:8d:75:61:7c:85:36:27:05:e0:d4:d5:51:
7b:4c:04:cb:38:7a:d2:85:ec:87:eb:40:73:c5:0f:c1:41:67:
c8:74:3d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 10:07:24 2026 by rpki-client