Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: CnikI47oXSoq5vyi9cIGd5PUXAQS/wR/O0DnOG3TBKE=
Subject key identifier: 68:45:82:FF:FF:56:B9:3B:47:8A:EC:71:99:7D:92:AB:4A:F4:4A:31
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 019FA0720309D0F584F8B1E4E745DA19A859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 19D2
Signing time: Sun 26 Jul 2026 22:00:54 +0000
Manifest this update: Sun 26 Jul 2026 22:00:54 +0000
Manifest next update: Mon 27 Jul 2026 22:00:54 +0000
Files and hashes: 1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: 74TT9iGASQL22ZwyPw7VWrvw/398KOwcQ9M2Wosqv/8=)
3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:03:09:d0:f5:84:f8:b1:e4:e7:45:da:19:a8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Jul 26 22:00:54 2026 GMT
Not After : Jul 27 22:00:54 2026 GMT
Subject: CN=684582ffff56b93b478aec71997d92ab4af44a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:43:3d:f6:8c:85:20:f5:51:f5:39:cc:9f:
22:b6:b5:a9:42:11:08:98:a1:0f:87:e8:d6:29:1d:
71:46:8c:da:31:0d:6b:93:dd:ac:06:2e:4f:06:fa:
68:1a:e6:54:b0:51:50:ad:f3:30:43:c6:c8:3f:8e:
cc:ed:26:2f:e5:f5:c2:c9:1f:6c:a6:18:42:41:b0:
a1:37:db:a3:2b:33:75:fa:f1:28:14:1b:cc:3d:f7:
5f:23:3a:2a:88:43:c2:4d:ef:07:e0:8a:69:27:da:
18:39:8a:f6:df:33:5c:37:98:0a:14:c2:21:ed:d1:
f7:65:f4:96:d2:fd:34:22:7c:dd:a4:b7:ad:3a:3c:
82:74:87:d8:2f:e1:c7:6c:6f:8f:04:8c:0d:b2:6b:
bf:a5:3a:07:4b:6f:e7:54:b0:d7:39:81:75:dc:b5:
df:49:1e:57:30:79:62:de:47:e3:f1:92:51:ab:bd:
bc:40:a7:fd:4e:25:15:5f:43:44:29:dc:47:db:63:
24:0c:d5:f8:8c:71:ef:68:2b:15:76:2b:89:b7:1b:
5f:ac:06:0a:21:46:7d:05:85:ad:25:8b:b4:97:e7:
2c:5b:71:14:ff:73:20:78:b1:92:c1:f0:29:c1:dd:
e3:f8:52:3d:5b:06:4a:54:8d:49:06:94:60:ed:27:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:45:82:FF:FF:56:B9:3B:47:8A:EC:71:99:7D:92:AB:4A:F4:4A:31
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f1:45:1a:c4:a0:2f:6e:f8:8b:5f:f6:5f:5f:21:e2:fe:04:
fd:4c:c3:c7:7c:ea:5b:a1:04:3f:57:73:b8:cc:40:33:82:3a:
24:46:3f:a7:43:ed:c9:ba:7f:95:98:72:47:73:ab:e1:e3:15:
c6:21:24:c0:99:db:16:48:47:5a:eb:df:7b:bb:1c:85:85:91:
f4:09:1e:fb:d9:cd:9e:0a:b9:c2:ae:29:b8:68:06:2f:1f:f4:
8c:a4:ee:95:90:8c:e2:f3:29:aa:bc:57:80:c3:8c:67:0d:69:
fb:61:dc:44:dc:8b:04:31:41:73:97:25:3e:1b:9b:f9:9f:00:
b7:4d:1d:a0:de:49:b9:66:76:0b:31:8e:92:6e:2e:46:a0:b7:
9c:66:df:0a:86:da:45:6c:60:57:98:35:53:3d:3d:79:a9:0c:
1e:8e:7f:af:59:ff:ed:9c:57:cc:fb:4d:78:05:84:b8:67:e3:
34:a6:6a:df:64:c7:65:0a:db:bb:16:ac:28:1a:1c:9a:31:ac:
7e:d1:79:67:e2:ca:8a:27:2a:34:ca:08:43:bb:f9:b9:21:ee:
ea:cb:f5:33:86:4c:b2:e5:4e:7a:ab:85:74:4d:b7:b9:47:02:
a9:c8:ad:dc:70:e9:af:1c:32:19:ce:f9:85:fb:7e:72:11:4d:
ea:26:c9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:57:49 2026 by rpki-client