Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: R+0wmH5FQFB+Rez+knpekMD0uULesqgrUXTKHoNLBxo=
Subject key identifier: BB:AF:E6:56:68:5E:43:F3:C9:23:C2:28:9E:F0:34:12:48:14:3F:EA
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 019FD316756B231CE3C9CFCEB3794373ED0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 19F0
Signing time: Wed 05 Aug 2026 18:01:32 +0000
Manifest this update: Wed 05 Aug 2026 18:01:32 +0000
Manifest next update: Thu 06 Aug 2026 18:01:32 +0000
Files and hashes: 1: 8MCnCiuGbqnzU7k4AiuuVxxMVjI.roa (hash: 3AKQoBBhnfUzI34hMZSnvSfZtjxdcBOFKymfp/vwl0g=)
2: MnRpYakEEH_3YM8B7YjpXHZCSHs.roa (hash: As4Z8EIpoOCvUeHagBG0PnKSVumw3phPbQAL1UT50X8=)
3: Xw_Yrbs6dG8gOuv7i9EZQhlPhlw.roa (hash: EFAh20ucPzMb4NyAoN8tNqkVM4vbiB7eJqswxMwPTCU=)
4: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: Ub50ECbFh6BFeIlfRGn+2taZ66+78/WRLr27F6EbsE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:16:75:6b:23:1c:e3:c9:cf:ce:b3:79:43:73:ed:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Aug 5 18:01:32 2026 GMT
Not After : Aug 6 18:01:32 2026 GMT
Subject: CN=bbafe656685e43f3c923c2289ef0341248143fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7c:39:12:93:e8:63:55:0e:ab:e7:56:ff:c0:
90:e5:91:ab:23:38:8e:75:1a:18:4d:26:d9:69:7b:
d1:5d:a5:5d:53:04:4b:97:77:84:29:ef:6a:c4:78:
b0:f6:89:36:a5:03:2e:92:fc:94:19:9e:c6:77:d6:
36:d6:bf:ca:67:6a:b3:33:ba:c9:25:f2:ee:2a:98:
05:6b:ae:ae:98:3c:3e:05:e7:17:17:86:52:f8:b5:
02:6c:06:c2:d1:56:cd:40:9a:a3:b5:fc:ee:8c:10:
b6:01:3d:9f:83:a5:0b:5e:b3:7f:4c:6a:3b:bc:3a:
14:00:98:85:e8:ff:f6:2a:78:b2:2d:ba:30:b4:a8:
1d:85:6b:9c:51:53:04:f7:52:17:e2:bf:87:df:72:
37:2b:6c:90:cf:7b:84:09:41:51:5b:05:a9:8e:ce:
94:ab:cb:1d:a8:e4:00:94:22:28:2b:19:c5:8a:6f:
2d:57:78:87:07:01:08:e5:4e:f0:e6:62:29:a3:4e:
35:cb:30:1f:c0:78:ae:97:ec:eb:e1:43:89:7e:98:
76:b4:e7:4e:7b:40:f5:8a:a4:28:17:99:71:6d:39:
12:fb:5c:bd:88:a6:16:7d:39:49:1c:98:e6:90:37:
b7:ea:91:51:b9:e7:e8:00:e6:18:e5:5b:c5:e8:7f:
37:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AF:E6:56:68:5E:43:F3:C9:23:C2:28:9E:F0:34:12:48:14:3F:EA
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:08:1c:6b:ac:8e:b6:b6:8e:9b:19:5e:3b:7f:76:66:c7:ad:
4c:22:66:3e:b7:ee:8b:ce:23:6c:ad:1d:02:63:21:c5:4a:52:
da:95:6c:66:67:78:9f:af:18:2f:ea:a7:68:04:22:c4:c9:d8:
c0:d5:e2:ba:81:6a:d3:c8:67:5c:33:57:db:f1:b8:e1:ce:6b:
a3:75:8d:c6:6c:c1:6a:f7:cf:c2:4f:90:51:05:83:80:2f:42:
c5:91:87:4e:ac:90:52:d2:8f:57:df:22:d4:21:c1:7c:ac:11:
3b:ec:d1:e2:d2:ec:11:67:43:29:27:01:70:fa:8c:55:1c:a9:
28:c3:1e:ed:d5:a2:44:6a:72:62:1c:69:19:42:ad:8f:23:b1:
fb:19:cd:74:18:42:b3:6b:03:7e:73:a3:89:d5:da:d3:a9:de:
13:cf:ca:be:b3:ed:64:44:ff:40:2f:95:62:ca:bd:61:da:23:
e1:56:77:cc:f2:03:45:d6:8e:63:3c:45:39:ec:92:a1:6b:50:
1e:d9:44:16:fb:77:b4:19:37:2f:07:7d:80:78:1d:d4:80:4d:
3b:23:8d:ae:65:f4:b2:48:91:6a:ac:ee:26:a0:6e:54:43:ca:
b7:ff:90:cb:fe:dd:07:db:c6:2f:02:d3:53:41:37:7b:fc:f8:
5a:b9:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 20:10:48 2026 by rpki-client