Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: 3UlKL166fLhEIlqwujKewz6awdfUvShQPM1gVVJtDL8=
Subject key identifier: 3D:D5:EE:45:99:63:96:39:58:A7:66:42:09:2C:95:FE:07:C4:17:B0
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 019FA00428839431ECA9A30E215FA6902BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 20:00:54 +0000
Manifest this update: Sun 26 Jul 2026 20:00:54 +0000
Manifest next update: Mon 27 Jul 2026 20:00:54 +0000
Files and hashes: 1: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (hash: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs=)
2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: BewzVUSZ5DnmFf0YWBHjZHByIJpXx28HmYfO3XF0ojU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:28:83:94:31:ec:a9:a3:0e:21:5f:a6:90:2b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Jul 26 20:00:54 2026 GMT
Not After : Jul 27 20:00:54 2026 GMT
Subject: CN=3dd5ee459963963958a76642092c95fe07c417b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:98:14:73:d8:33:6c:4d:57:19:90:93:54:
f5:ed:cd:db:d2:2e:27:8a:a5:d1:2e:8f:a8:b1:5c:
86:b0:2c:10:da:92:45:45:d4:11:a8:b2:c5:fe:c2:
27:01:e0:9a:b8:3f:b7:5b:4f:27:92:5e:d9:c9:43:
f1:b0:e9:84:06:95:2b:f6:78:72:a2:1e:df:b3:b4:
12:d8:f9:77:5b:ac:80:85:16:e0:84:3a:51:b9:0e:
55:ef:37:4e:d1:5a:85:f0:65:47:57:99:d1:fe:99:
f5:a2:75:b3:44:90:a2:1d:f8:38:99:68:b3:9a:53:
34:61:b8:3e:52:22:d9:9d:b4:bb:b0:04:a5:48:d0:
1f:2b:7d:d0:00:4f:70:2f:7a:db:49:dd:74:1e:aa:
df:e0:7b:fa:86:52:61:aa:79:b1:8d:17:7e:22:82:
6c:90:90:ed:6e:cc:ad:d5:6f:13:cc:9d:b2:7a:79:
44:4a:0e:49:d2:a3:bf:70:07:aa:93:ec:cd:dc:da:
ed:dd:6d:68:53:d4:43:83:98:6e:e8:f4:2c:b9:48:
75:3a:78:56:ae:a3:41:4d:9c:93:fc:04:53:34:da:
8b:5c:40:e0:a1:0a:90:35:79:fe:a2:a9:40:73:26:
8e:5d:59:d3:87:05:64:6a:bf:94:ec:57:c7:be:bc:
87:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D5:EE:45:99:63:96:39:58:A7:66:42:09:2C:95:FE:07:C4:17:B0
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:30:bc:30:6a:45:1d:f4:67:e4:98:e9:d4:82:cb:f2:e6:cb:
28:6b:76:c0:57:15:e0:9b:ea:47:0e:f2:a3:b4:f7:4d:31:ab:
0a:b7:ed:f0:c2:af:81:e5:e0:b0:14:6d:20:29:43:1b:50:ac:
23:9e:4c:9e:23:fa:18:37:36:97:23:39:6c:3c:72:90:8c:78:
c0:15:da:67:33:36:ca:32:57:dc:07:6e:04:e3:25:14:b3:fe:
e5:25:f4:3c:e4:a9:6e:b7:12:a2:b0:d9:58:62:ee:c1:87:7c:
10:1b:00:c4:70:a4:cb:44:61:ce:c6:7a:9f:73:cb:df:bc:54:
b9:f5:bb:7c:fc:d5:6e:56:06:a2:74:69:2f:4b:27:e4:c2:a8:
81:53:77:ec:f8:1f:94:bd:43:38:28:7c:89:cf:d7:5f:59:4b:
5e:85:17:23:a8:cf:46:73:95:01:e0:87:37:dc:af:b9:dc:95:
0f:0c:b2:75:13:8e:b2:c2:d8:93:80:c7:64:5c:62:7d:ca:5a:
67:3a:cd:19:48:f1:1e:a7:ec:b7:af:13:ab:03:09:e7:c2:d3:
e2:8d:9a:8f:08:5b:d9:7a:58:42:26:9c:fa:af:79:aa:32:1d:
db:4e:d8:df:00:bd:f1:0a:78:8e:72:09:8e:4a:a4:56:8c:37:
1c:03:3c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:54:09 2026 by rpki-client