Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: b98kGMEJtcjECkXk75uqHt0uNU4gLrxSzgYzsyxdJgM=
Subject key identifier: D8:E7:04:01:DC:AF:98:F8:9C:38:D3:A0:B8:9B:E4:EF:EF:C9:C1:5D
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 01A03D163E1D69F8F5602FC178916690CB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 1A22
Signing time: Wed 26 Aug 2026 08:01:02 +0000
Manifest this update: Wed 26 Aug 2026 08:01:02 +0000
Manifest next update: Thu 27 Aug 2026 08:01:02 +0000
Files and hashes: 1: D6JN_SUanY3VCPcy8MM0wRyWpFg.asa (hash: GO31s3wbPJQu1T3Grsa85oI8sAVmrZULl2h6J3A4Dcw=)
2: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: 2tRDyMABxKqM8acAI92ikxRcMKUop5qmc+qOuaGsTds=)
3: iVwLg--4UDbLvJn4dxkRR2fxInw.roa (hash: wrzc6nRtbm4MeWrVh43cUfhaLyz6R8Fbv5xm23WJS0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:16:3e:1d:69:f8:f5:60:2f:c1:78:91:66:90:cb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Aug 26 08:01:02 2026 GMT
Not After : Aug 27 08:01:02 2026 GMT
Subject: CN=d8e70401dcaf98f89c38d3a0b89be4efefc9c15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d1:fa:73:2e:2f:7b:5d:a7:c9:ed:5c:a9:27:
79:df:70:0a:81:e7:db:7f:4a:93:de:4a:e4:3a:43:
80:40:e7:8d:71:30:9c:4e:88:d7:b4:9d:fe:78:c5:
f7:ad:0a:08:aa:a4:0f:e6:6c:3c:c3:32:96:aa:96:
12:53:9f:55:f8:17:6c:da:e2:f2:05:7f:32:9d:15:
88:8e:16:69:5d:d4:ad:f9:b2:17:c1:0b:fc:d9:00:
25:1e:75:f8:63:d7:e5:62:f2:06:80:90:cc:3f:62:
07:0b:6b:99:a6:e7:6d:1e:96:6b:7f:8c:60:bf:ef:
96:9d:17:db:bd:e9:14:56:54:fc:98:a4:12:f9:d0:
31:9a:2d:f6:ae:46:5b:03:96:2c:52:46:61:8a:cf:
12:b3:04:db:74:2e:c8:29:38:84:c3:b0:c2:d1:fd:
b3:b3:66:4d:33:56:77:0f:2a:e4:b5:5f:5f:d6:1e:
b6:6c:94:f6:4e:e8:e3:89:87:58:7b:6b:79:99:c3:
77:18:62:be:1e:4c:1b:3d:5b:1b:ab:c3:da:1b:49:
13:99:16:13:63:9c:06:cc:bd:f6:d9:bc:0c:9f:61:
f6:85:86:c1:f3:ce:4a:57:58:a4:b8:fd:17:13:c4:
03:6b:93:9a:f5:ce:57:86:9a:98:29:9d:a6:bc:60:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:04:01:DC:AF:98:F8:9C:38:D3:A0:B8:9B:E4:EF:EF:C9:C1:5D
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a7:f7:70:2a:74:ca:79:55:43:b6:20:2f:00:bf:b4:b7:b2:
a0:22:17:fa:12:ca:a1:cb:e3:01:49:46:0b:0b:d9:10:dc:f7:
10:4e:40:82:2d:40:56:35:11:10:24:1a:ab:bf:30:05:84:c9:
70:d8:af:d6:1b:8e:0a:5a:18:ad:81:fe:13:7f:a4:a0:2b:07:
5e:8d:78:78:50:58:2c:39:b6:fb:c2:e7:54:5d:dd:db:aa:92:
6a:9a:ec:c4:d2:b3:49:42:4a:a4:ce:27:fe:ad:4c:46:96:34:
39:55:d2:97:3c:c7:71:81:b5:fd:8d:63:9d:10:54:19:40:c7:
08:a9:19:87:4d:04:4b:42:2c:a9:74:a3:e1:ea:d1:71:ff:e3:
b0:bf:75:15:88:3e:80:0c:c3:00:9f:60:a0:6b:fb:2f:5d:df:
09:13:55:a0:04:10:d3:b6:25:a1:e5:2e:60:ef:b8:06:86:3b:
6e:2a:2e:56:5a:82:cd:78:e5:39:f4:09:3b:cf:4e:2a:a2:12:
bd:fd:b5:ef:7d:6c:82:31:6c:ea:99:f2:ac:c7:43:1d:22:3e:
2f:7c:37:60:ab:d6:15:d0:6d:bb:4b:f4:44:3c:a5:ad:46:64:
c0:eb:4d:e1:f5:82:f5:6b:be:0a:a4:7e:5c:12:61:7c:e9:2e:
ce:5d:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 14:09:22 2026 by rpki-client