Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: 5tuzoOfYVdq8H4k54pua7K/bRH0RL0XzVYEZ3ck/yIw=
Subject key identifier: 5D:04:5C:81:5D:AB:49:AE:CC:E1:AE:7D:C6:F5:48:8D:94:33:6C:6F
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 019FA7186A9AEA3C7BFF6EBCF9257DE24C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 0DC5
Signing time: Tue 28 Jul 2026 05:00:22 +0000
Manifest this update: Tue 28 Jul 2026 05:00:22 +0000
Manifest next update: Wed 29 Jul 2026 05:00:22 +0000
Files and hashes: 1: jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa (hash: heA9ElftnVcEx/Z56cUQXfy2JpdBhi/Gw5ToPa737lc=)
2: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: 5Jrd4vHgHq1ecthGQDbw4mAt5VVXrXNhKiSrPAMwuPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:18:6a:9a:ea:3c:7b:ff:6e:bc:f9:25:7d:e2:4c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Jul 28 05:00:22 2026 GMT
Not After : Jul 29 05:00:22 2026 GMT
Subject: CN=5d045c815dab49aecce1ae7dc6f5488d94336c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:bd:86:75:a6:50:72:39:59:4e:15:e2:ee:
8c:56:9b:6e:f5:15:e2:07:d6:30:84:6f:78:33:9e:
94:0b:41:fc:ed:12:9b:8d:ad:a1:8a:de:d1:7f:c3:
df:49:e2:cf:73:c5:63:70:12:8d:ba:82:51:00:95:
09:cb:2c:e2:a1:35:3a:7d:f2:b2:8c:e4:a1:91:5d:
c0:e0:20:4b:a2:42:1e:d9:74:3b:73:51:ed:92:be:
31:97:77:8b:fb:47:18:21:c7:bb:ed:72:76:92:94:
bd:ae:28:ea:5e:9e:df:63:a5:ef:6a:5a:34:9e:09:
79:0b:1a:b1:98:76:30:2d:f9:d8:a7:c6:47:a0:67:
5d:48:5b:cb:14:dc:5f:99:4b:bd:1d:e7:c5:6d:ec:
b2:6f:d7:81:c7:0b:9b:7f:ae:47:48:a8:0a:89:e5:
d2:8d:77:bb:eb:6a:49:f4:60:68:c2:b0:da:07:c0:
da:a1:50:98:76:b4:d7:bd:f6:1e:eb:c3:19:14:b2:
bb:38:a6:38:63:bd:c5:81:5a:a1:96:a4:54:ca:b0:
48:43:a3:0f:00:2d:9e:6f:15:fe:f7:73:a8:3d:e9:
fe:6e:62:16:87:cd:59:16:9c:7c:cd:40:33:3d:73:
9c:f3:d3:19:14:94:07:5a:4d:a8:12:9f:f8:c6:19:
87:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:04:5C:81:5D:AB:49:AE:CC:E1:AE:7D:C6:F5:48:8D:94:33:6C:6F
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:13:00:38:eb:cd:e9:50:c8:83:11:ba:64:43:76:a4:91:25:
31:e2:2b:9b:5f:3f:77:5d:08:e5:e8:be:9c:66:67:80:e8:14:
da:48:b4:6b:24:6d:a7:3b:93:6b:7e:7b:51:f1:1b:f1:dd:2d:
bb:a9:4d:c6:a5:d8:ef:b5:31:b0:69:a7:2e:8c:3b:b6:7c:12:
05:70:d1:45:d1:6d:c8:d2:02:35:d8:2f:fb:62:54:d5:4e:2e:
9b:2e:e8:83:60:75:65:0b:12:e4:fb:a2:c0:55:cd:e2:c4:95:
e4:3f:71:ab:60:55:3b:7c:13:d6:15:e6:5f:45:c1:98:4a:0c:
7f:64:fe:a5:d9:da:58:82:90:43:57:65:9c:c7:a7:1f:ba:77:
5a:ee:25:3a:59:cb:44:5c:87:30:06:e8:cb:f9:c2:05:a7:0a:
08:c6:56:7e:86:aa:56:73:93:18:27:66:39:66:4a:d8:cb:9a:
8a:d6:a2:84:bf:b8:13:d1:ff:99:f0:28:0e:ad:bb:4e:8d:83:
d0:8f:15:35:7c:f8:e5:36:f2:0f:aa:5b:f0:48:9d:e5:1b:ed:
58:28:2f:40:fa:39:3f:13:a7:76:6e:5d:3b:32:b9:ee:dc:ce:
a1:74:9d:75:0c:bd:fc:66:e6:85:66:a1:85:fe:60:a5:97:a1:
76:61:dc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 10:33:29 2026 by rpki-client