Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
File: pMqKz4g4TsU94Z4om10mQqEf9_0.mft (raw, json)
Hash identifier: vVd3mGrRo9JG2x72tAILqgGuNsxsXpBcnnjxzp1iZVM=
Subject key identifier: 67:B6:CF:7D:21:25:90:DE:F3:08:73:D4:74:AD:60:F3:B4:51:91:C6
Authority key identifier: A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD
Certificate issuer: /CN=a4ca8acf88384ec53de19e289b5d2642a11ff7fd
Certificate serial: 019FA14DDD5E6B8E086FB4D625D9B7963434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
Manifest number: 07A0
Signing time: Mon 27 Jul 2026 02:01:02 +0000
Manifest this update: Mon 27 Jul 2026 02:01:02 +0000
Manifest next update: Tue 28 Jul 2026 02:01:02 +0000
Files and hashes: 1: pMqKz4g4TsU94Z4om10mQqEf9_0.crl (hash: kfplUlyxIXz5JrvTVgoO0h1GwzB4CrLt182VYntLtlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:dd:5e:6b:8e:08:6f:b4:d6:25:d9:b7:96:34:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ca8acf88384ec53de19e289b5d2642a11ff7fd
Validity
Not Before: Jul 27 02:01:02 2026 GMT
Not After : Jul 28 02:01:02 2026 GMT
Subject: CN=67b6cf7d212590def30873d474ad60f3b45191c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4a:70:f7:3c:f4:76:98:cf:bf:0c:00:e4:ab:
55:10:b4:82:90:3f:81:89:a0:21:40:7d:bd:97:44:
fb:6b:62:72:77:fb:32:e2:49:79:51:e8:b4:98:6b:
64:82:11:cb:89:5f:8a:71:08:96:db:58:77:b0:2b:
89:9f:a6:15:a7:ab:c4:30:39:40:0c:53:dd:c5:ed:
23:33:30:b3:d7:a8:71:2a:ec:8e:fb:7d:c7:61:b8:
32:55:38:0c:6e:67:f2:49:65:40:8c:a3:e1:e1:b2:
2f:eb:cc:e7:e0:fd:cb:32:06:82:b6:c2:b9:1c:ec:
3c:1e:13:22:af:9a:d4:ab:5b:b7:06:fe:c2:05:1a:
9c:11:47:d8:e8:f8:8b:3f:dd:b0:18:f3:a2:32:56:
1f:15:d2:9f:af:fb:be:b7:e1:66:13:78:96:18:a0:
84:5c:25:3f:90:be:e0:09:34:52:0a:09:e3:96:74:
05:4c:3f:f8:ef:10:3e:00:58:65:e8:af:24:5f:c1:
b5:98:b5:66:82:44:52:1a:15:34:0c:fa:72:69:bf:
94:48:05:ee:42:0f:be:26:df:44:a7:60:3a:d6:d4:
c2:aa:17:c3:78:ac:a2:62:58:f3:b4:6a:55:16:50:
2d:4b:b6:aa:05:87:e1:0e:f0:19:10:15:cc:b9:5f:
f2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B6:CF:7D:21:25:90:DE:F3:08:73:D4:74:AD:60:F3:B4:51:91:C6
X509v3 Authority Key Identifier:
keyid:A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4e:0e:8f:dc:c5:88:aa:69:35:66:35:2d:07:c0:9d:46:d5:
dd:62:bc:da:00:ef:f4:51:21:5e:60:34:40:f1:bf:8f:62:0c:
af:55:e0:65:5e:6e:3a:bc:ab:21:ea:ce:0f:70:6c:29:a5:05:
03:46:78:dc:3d:1d:c1:a7:c7:28:e8:e3:08:ef:79:08:7a:2d:
79:85:c4:5c:50:62:79:ea:07:0d:2a:a6:fd:5e:3e:16:69:12:
5a:2c:62:2b:e5:c0:2d:45:34:7e:66:83:aa:30:1b:57:03:08:
35:70:39:d9:29:7d:8d:b1:50:cd:70:af:80:12:d1:d5:4b:fc:
f5:2d:1a:a8:26:59:bb:ef:b0:fe:68:cc:ad:d9:31:15:e2:ef:
20:06:cf:c5:c8:7d:99:0a:1e:91:5e:53:c6:fe:5f:3c:e9:33:
00:18:b8:18:3e:8e:91:38:ab:1b:b1:62:e0:c4:01:de:3f:b6:
ba:1d:de:3a:9c:bd:54:5c:2f:d5:4e:9c:34:f7:e7:21:63:5e:
ea:a3:a3:63:b8:ff:71:c8:27:08:16:0a:43:49:85:7b:e3:34:
7c:85:0f:85:9f:24:2e:2d:d9:c3:2e:55:a6:d9:9c:1f:f7:5d:
0c:3d:08:c9:43:08:7e:5d:d4:6c:d7:f7:d8:7f:6e:32:8b:a6:
9f:48:ee:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:18:30 2026 by rpki-client