Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: 9XT1k3qe30cBtrY97mGvMhSzVuwLqnuYOANLMeU8+vc=
Subject key identifier: 49:DA:06:10:81:11:17:0B:24:1B:F1:49:67:7C:80:08:44:1C:19:C6
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 019F11C0B912F546478340E6AA2E56D0CD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 05:01:10 +0000
Manifest this update: Mon 29 Jun 2026 05:01:10 +0000
Manifest next update: Tue 30 Jun 2026 05:01:10 +0000
Files and hashes: 1: D6JN_SUanY3VCPcy8MM0wRyWpFg.asa (hash: GO31s3wbPJQu1T3Grsa85oI8sAVmrZULl2h6J3A4Dcw=)
2: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: gzYNwGEhk55kWH7wv+a7Dg34p8IfjMU457uwu/FtCgE=)
3: iVwLg--4UDbLvJn4dxkRR2fxInw.roa (hash: wrzc6nRtbm4MeWrVh43cUfhaLyz6R8Fbv5xm23WJS0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:b9:12:f5:46:47:83:40:e6:aa:2e:56:d0:cd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Jun 29 05:01:10 2026 GMT
Not After : Jun 30 05:01:10 2026 GMT
Subject: CN=49da06108111170b241bf149677c8008441c19c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:dd:09:56:46:17:1a:1f:01:a6:22:38:8e:
ef:0e:83:20:b9:4d:e7:47:af:7f:6b:49:b7:82:36:
f1:33:a8:21:d6:01:da:d4:ef:f9:55:ba:04:b6:09:
02:d1:30:9c:ed:dc:ef:85:54:67:db:3b:f3:3d:13:
cc:1e:a4:bf:f8:18:4d:50:49:dd:55:04:b2:fc:fd:
9f:30:50:2c:4e:2d:cf:56:15:d9:8a:aa:b2:3f:e2:
2d:d0:2d:b9:b8:95:1f:e1:5f:f0:cb:25:96:98:19:
dc:c6:44:9a:2f:4b:35:2b:9f:65:a0:31:5d:9b:7b:
42:86:71:16:3f:55:39:44:98:ff:75:2d:5d:a6:4d:
06:83:d9:99:b3:eb:93:ad:5d:5a:ea:20:43:21:66:
ee:b3:46:43:39:3f:9c:5c:1f:f3:10:df:c9:68:e4:
86:f7:5f:ab:7e:eb:3d:6e:1b:b6:37:04:55:47:9d:
20:50:24:4f:40:53:d5:a1:9c:35:3d:58:63:b1:74:
5c:ab:da:4e:73:9f:32:b9:87:f4:76:dc:96:35:0a:
f8:e3:d0:d8:c5:5a:9d:e1:44:e5:d2:6d:a9:cc:d6:
c7:e8:ce:ae:40:5b:74:8f:e8:08:e0:63:12:da:c1:
5c:73:40:12:77:99:2e:84:f9:bb:26:c5:80:dd:dd:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DA:06:10:81:11:17:0B:24:1B:F1:49:67:7C:80:08:44:1C:19:C6
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2e:fc:60:bd:db:b5:d0:83:dc:81:02:58:f1:1a:3a:b6:74:
f4:25:71:e3:ab:cc:95:25:7d:81:29:37:4e:c0:c4:0f:fc:b3:
59:63:f9:62:d5:aa:38:ec:57:1d:78:9f:9d:35:ff:b8:f6:6e:
09:7b:86:b0:5c:f8:f5:aa:a2:f4:91:c7:bd:6d:9c:ac:70:52:
11:b3:5e:62:98:cb:02:7e:84:33:33:fd:4c:06:1a:03:23:98:
01:e0:4b:23:da:4c:20:99:c5:84:62:78:4b:c4:a0:48:b4:45:
26:da:2e:d9:17:de:46:6e:c7:83:11:84:df:1e:13:91:a0:46:
e5:84:9b:8b:fb:ab:78:40:29:74:d3:e1:bd:7e:b9:d0:08:1f:
be:f7:c5:a3:2d:03:94:d0:0b:ff:91:69:a4:ce:78:8d:e3:52:
6b:63:69:5c:f7:7c:10:87:c7:0b:a7:8d:9b:d1:84:bf:9c:85:
f2:7c:45:b4:45:cf:7d:a9:99:c8:7b:e2:08:62:16:2c:d2:83:
8c:c6:5f:51:1f:68:d9:66:e5:95:d6:9f:95:12:87:7e:8d:cf:
14:59:66:f8:d6:54:8f:17:ad:ea:2d:fe:c0:1f:46:76:4a:11:
3b:ad:94:ee:4f:d4:9c:19:01:86:60:fc:2a:de:20:c1:fb:5f:
b6:e7:fc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:46 2026 by rpki-client