Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: D1LdsMQvyQ1+CukfM5ZAfaMEXd2KZ5B8p8fIjnM99uo=
Subject key identifier: 74:67:6C:30:33:D9:A3:52:90:B3:30:FF:AD:72:EA:BF:56:23:D1:E9
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 019F28ED293AE24DF2A044EF8A35255091DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 1995
Signing time: Fri 03 Jul 2026 17:00:58 +0000
Manifest this update: Fri 03 Jul 2026 17:00:58 +0000
Manifest next update: Sat 04 Jul 2026 17:00:58 +0000
Files and hashes: 1: 1iRbLYf4C0y3oJ3-4xIANjl72wA.roa (hash: UG6S1kmkOsd5y0L7phKRaWuOG6F5o7BKD1/4AyWvM5A=)
2: JjyvVDVovIRDvh2WAPN4qcYKbB8.roa (hash: YWVGU0nc40f+duH6QOCC8OFDRM3GdOHIxFuAUo2EzwY=)
3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: iQa9khQy740mrTD6CfuFoXrcVhFYVtWaOYQVOlhTF0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:ed:29:3a:e2:4d:f2:a0:44:ef:8a:35:25:50:91:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Jul 3 17:00:58 2026 GMT
Not After : Jul 4 17:00:58 2026 GMT
Subject: CN=74676c3033d9a35290b330ffad72eabf5623d1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:9d:c9:f8:6f:7d:08:41:8a:b2:7c:22:4f:
c8:7e:38:0d:4e:53:88:db:1a:81:57:3f:1a:e1:7f:
35:87:15:fd:1f:db:57:25:a0:72:6d:f4:cf:98:68:
f6:b0:42:0b:97:9a:61:ea:d2:e4:22:41:21:d6:7f:
63:cd:2b:0c:e4:f9:11:2b:9c:c4:d4:fe:bb:f0:d6:
5f:8c:07:07:5b:74:4d:1d:50:f9:b8:d4:5c:9c:a7:
56:cd:9c:a5:e9:10:05:a2:32:71:cb:63:5c:20:c2:
1a:4e:97:40:b3:a2:d2:2c:e6:1e:76:65:31:12:27:
98:89:be:1c:9a:a6:80:86:9e:ec:89:cd:f2:f0:a0:
58:7f:72:63:e1:8f:da:7e:43:93:9e:95:c4:f1:6f:
84:3c:27:a0:2f:0e:41:c1:51:b0:53:51:89:ac:dd:
ba:47:14:33:2e:a4:73:90:03:5c:c4:24:1d:27:29:
8f:7d:39:96:98:4d:3e:eb:24:f3:c0:94:99:8c:58:
40:c4:68:69:55:b2:7f:45:b4:cd:27:b5:71:ed:58:
86:f9:d0:42:54:69:d2:4d:4f:94:d9:ed:9a:60:84:
d6:c0:49:1e:76:62:2d:7e:c3:99:00:17:03:c2:97:
ef:a5:46:7b:78:de:fc:0c:3a:5a:49:ea:8c:6b:d5:
b1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:67:6C:30:33:D9:A3:52:90:B3:30:FF:AD:72:EA:BF:56:23:D1:E9
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6e:ea:fd:e0:84:15:d4:da:03:e1:0e:3d:59:9f:38:0d:1f:
01:96:eb:9c:39:f6:03:39:26:65:e3:a2:a6:be:0a:88:f7:b9:
aa:69:43:63:77:68:2c:79:bf:11:50:43:45:d6:a2:88:86:65:
70:63:d1:34:06:b2:6e:b6:4e:a4:2a:bc:02:3c:98:42:d6:25:
17:dc:55:fa:eb:fa:45:52:54:ef:c4:1d:9a:08:e9:9d:74:1a:
0d:cf:7e:2b:e7:a0:aa:32:19:5d:6a:5d:b0:75:89:6f:c5:af:
89:ef:66:42:09:2e:11:28:28:47:11:4c:cf:62:73:e8:8e:02:
d7:fe:a0:c0:47:ec:fe:85:65:93:1c:77:4e:06:0d:2b:b3:d2:
e9:de:51:c7:63:40:d6:b7:56:5d:b3:e3:f4:74:d4:c0:a7:f5:
74:07:f3:cb:03:40:09:4f:69:85:54:cd:ca:11:87:db:04:e6:
52:d0:f8:cd:6a:b4:32:64:84:d1:71:0f:ff:a5:62:21:57:23:
91:f9:4e:b8:25:bc:fe:6c:db:bc:f4:8b:ed:41:8f:00:58:b2:
d7:b3:1f:b8:95:43:20:f0:10:9e:f9:93:99:d7:bb:e1:65:43:
1f:63:61:48:2e:2e:4e:ea:c2:8d:de:96:73:4e:b0:ce:10:c4:
58:fe:27:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:47:28 2026 by rpki-client