Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
File: pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json)
Hash identifier: llpIxo1/3ASDVlmOg7F1igwAROTbSqzmiytcBSUJPyw=
Subject key identifier: 97:D5:4A:88:90:99:05:FF:F8:0E:44:8E:4C:72:1A:98:E5:B5:12:90
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial: 019FA003CAFD7FC0B4F81872045EFBC57405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
Manifest number: 19D0
Signing time: Sun 26 Jul 2026 20:00:30 +0000
Manifest this update: Sun 26 Jul 2026 20:00:30 +0000
Manifest next update: Mon 27 Jul 2026 20:00:30 +0000
Files and hashes: 1: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: rMHkxuZNXLwWY0d2uzxezmdWS2FzglhdjWiQ9p3XnW0=)
2: sFhaHiuTZkyPvfZGeitPsQ50uDY.roa (hash: A+Ir0fHumCJtAvIDD0Uq1l9aMQ2n7on4GhmvbKyT6iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:03:ca:fd:7f:c0:b4:f8:18:72:04:5e:fb:c5:74:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Validity
Not Before: Jul 26 20:00:30 2026 GMT
Not After : Jul 27 20:00:30 2026 GMT
Subject: CN=97d54a88909905fff80e448e4c721a98e5b51290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:8f:47:29:a7:68:59:33:09:9f:b5:56:e2:
20:52:94:48:06:8d:69:ec:29:9a:fa:d7:5e:c8:21:
e1:8f:19:9b:82:40:5c:7b:af:3f:f1:7c:60:e9:ea:
bf:da:7e:c4:b5:42:b1:3a:0c:c3:cc:cd:80:93:5a:
c9:59:eb:ae:f6:2f:f9:be:a0:a8:8d:ee:6e:b6:67:
b1:df:46:1b:30:88:4f:05:da:17:bd:dd:95:e8:50:
2d:2d:c3:6f:36:8c:75:c7:d4:2d:4b:e3:af:e8:c8:
db:23:a8:ae:a5:d9:c8:47:6a:d0:cc:2b:84:ed:c0:
9e:64:05:70:97:e3:2f:ca:0a:1f:0d:0f:bd:a9:b8:
57:18:da:37:56:89:cd:4f:5b:12:36:9d:85:81:9b:
93:d3:26:84:fa:61:42:47:3f:a0:ff:50:4d:85:ab:
1a:66:81:79:5c:d6:62:fb:b3:02:1d:89:5e:8a:a1:
2b:e4:4d:eb:9a:d5:cb:fb:29:93:04:bf:bf:3a:0f:
8a:5d:f8:60:10:aa:48:4f:6e:50:d7:80:b9:bc:d0:
1f:06:74:c3:7e:0f:45:21:7c:5c:23:ab:3b:de:86:
00:66:9a:77:65:95:7f:bf:b5:01:44:b5:49:0d:49:
30:fd:a7:bf:c8:94:13:37:3e:3a:cf:28:dc:4f:bf:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D5:4A:88:90:99:05:FF:F8:0E:44:8E:4C:72:1A:98:E5:B5:12:90
X509v3 Authority Key Identifier:
keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5e:65:2b:8e:80:30:d7:6e:95:fa:67:14:28:65:2d:a5:f3:
c3:80:6e:f5:cb:a9:03:66:cb:82:09:19:19:a9:13:ce:39:50:
ce:1a:ac:5a:96:69:75:17:66:76:68:fc:fa:af:1d:67:55:60:
cc:43:5f:89:89:fe:3d:2b:79:86:2b:ac:f8:7e:ec:a1:e6:8a:
05:74:dc:16:2e:b7:9b:3a:fe:1a:7a:77:35:42:05:1e:60:c9:
ef:29:29:2f:ff:58:7d:66:81:0f:1e:a9:9d:27:cc:7f:0b:a8:
cf:2e:ea:e2:02:ca:9e:f1:a8:b2:ee:ec:29:32:06:9b:69:bf:
19:91:11:06:f6:72:1c:49:f2:82:69:9e:8f:8c:81:8a:54:ac:
d3:80:6f:00:7f:e8:48:65:15:40:b1:3e:c6:65:33:7d:b9:c1:
cb:e5:f2:19:fe:2a:78:4f:f5:dd:c9:71:2c:ed:fb:d0:49:e2:
83:e5:c5:7b:2d:39:dd:66:22:0f:d7:e5:b7:ee:53:ec:94:20:
34:ba:66:dd:39:0d:ac:dd:d5:6f:0a:12:2b:aa:96:ac:d8:a7:
b8:ae:a7:ea:0b:07:21:c0:2e:d2:c3:8d:c9:8b:68:00:a5:d7:
14:f9:3b:55:30:a4:c6:fd:97:d2:a7:00:b7:97:9f:95:20:eb:
81:95:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:58:27 2026 by rpki-client