Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
File: PNVhnbjXcXN5lW1Op1t22ybRwck.mft (raw, json)
Hash identifier: g6Y77vUGAdTYl9xO/JQ3hXtXFy7lHR+Xu88OlEeGktk=
Subject key identifier: 52:80:0E:9F:1D:12:43:1E:D1:4C:FF:4B:51:33:A2:CE:A7:AC:95:D1
Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
Certificate issuer: /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Certificate serial: 019FA22902B269F9B25A196975B1BB48E8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 06:00:24 +0000
Manifest this update: Mon 27 Jul 2026 06:00:24 +0000
Manifest next update: Tue 28 Jul 2026 06:00:24 +0000
Files and hashes: 1: PNVhnbjXcXN5lW1Op1t22ybRwck.crl (hash: 0M9O8J8yatLpoh+1nuCLfxQCkrdCuwJy0H78bwwm/7U=)
2: W2_YVtahS9AF_suIxs_GQQbdje4.roa (hash: tnC0EkMLLcLXQXoDsLNC9jDbiWksa5OYi1IQus+om1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:02:b2:69:f9:b2:5a:19:69:75:b1:bb:48:e8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Validity
Not Before: Jul 27 06:00:24 2026 GMT
Not After : Jul 28 06:00:24 2026 GMT
Subject: CN=52800e9f1d12431ed14cff4b5133a2cea7ac95d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:10:7d:45:be:4f:63:e9:64:f1:dc:03:61:
bb:28:c2:f0:4b:4d:28:f1:35:0e:bf:c4:8b:bd:a8:
fa:6b:68:5c:8e:e4:dd:74:64:e1:0d:bc:b0:69:8b:
53:f5:7e:55:34:6b:60:b4:25:10:e9:5e:15:b7:81:
f5:0e:46:48:bb:d9:8b:2b:c7:b9:d5:82:25:e0:86:
4f:82:ff:9d:fd:06:bd:f4:55:46:dd:33:09:f6:af:
a9:84:c5:1c:2a:e2:97:68:cf:ed:e0:5f:45:8b:16:
d4:bb:e1:6d:68:c1:5f:6f:01:8b:c9:a0:98:ed:59:
ab:78:38:b2:58:b6:4a:bb:fd:ff:39:ae:c8:2c:d9:
ef:87:df:c6:8f:24:25:72:d5:6f:91:cc:49:14:fe:
4b:c4:9c:a1:0b:80:b4:78:e8:63:0a:21:6b:d7:40:
df:41:3c:e9:dd:a6:f7:f5:39:8c:ab:ba:23:10:b2:
1b:0f:4a:fb:e8:d4:1e:95:16:70:0d:8d:65:3e:fe:
a1:23:e5:61:f3:7a:54:b7:cf:b0:a6:c6:9b:2f:f7:
49:6e:bb:5b:86:c4:95:d9:59:fc:a9:fd:8d:43:93:
f8:43:af:c6:dd:6e:e6:62:e5:e0:00:07:05:fb:cb:
df:f1:6c:ec:b9:2e:ca:85:b7:d9:83:f6:76:06:80:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:80:0E:9F:1D:12:43:1E:D1:4C:FF:4B:51:33:A2:CE:A7:AC:95:D1
X509v3 Authority Key Identifier:
keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1e:21:b6:25:1c:ac:3a:0d:ec:dc:4f:46:c0:c6:31:bf:8a:
1d:30:48:fc:37:8b:70:f2:86:50:a7:be:9a:77:7d:6e:74:5c:
5b:86:4e:65:a9:1a:e8:97:d3:1d:23:49:8d:1a:6c:07:ad:ce:
c2:04:fa:36:fb:ce:46:42:32:27:9d:cf:e7:0d:b6:d8:6a:b9:
da:0e:25:43:ac:f9:7f:eb:86:22:28:fe:d6:8c:66:53:5e:bf:
6d:32:f4:ac:02:5d:1e:be:d9:92:ec:dd:c0:bf:42:4b:70:52:
89:a9:17:c2:3c:cd:7d:a9:ac:68:2e:d3:b1:15:63:bc:9f:10:
e8:d0:93:ed:04:b5:ca:60:10:7f:6d:fe:77:cb:e9:f8:27:5b:
91:de:e3:71:ba:fd:00:99:2b:aa:89:5c:1a:13:b9:a4:2e:6a:
03:ff:a1:0a:b1:34:6f:de:2f:a7:9e:08:04:4f:df:8e:6d:d8:
11:d3:33:2a:7d:40:bc:c5:20:27:99:de:3a:31:4a:9e:6d:4c:
5c:89:e3:9f:57:2e:2c:54:d0:cb:c2:67:9d:a8:9b:d9:0e:cc:
0c:d1:45:9a:d8:cd:a5:06:c3:56:6b:ef:fe:7e:91:6d:f0:f6:
e2:46:3d:27:fc:f1:b1:cb:a1:78:06:46:52:76:72:ec:67:ef:
c1:2a:8e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:03:10 2026 by rpki-client