Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: l9wDjCMctB+UCIWI6pEQB5WNMLHcS2xre/mT3UeEa/c=
Subject key identifier: B9:72:0E:A1:0B:59:E9:3D:E6:DA:2C:C2:8D:54:9E:71:6C:28:C4:A4
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 019F3829C2B7B7856F418F57AC79D7D8B9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 086E
Signing time: Mon 06 Jul 2026 16:01:28 +0000
Manifest this update: Mon 06 Jul 2026 16:01:28 +0000
Manifest next update: Tue 07 Jul 2026 16:01:28 +0000
Files and hashes: 1: 1FR5ZpZwPSxvOqUqxpmnyVdoI2Y.roa (hash: Uc2np6So5kLYsA5QE2lGHUyNPrOYT/fABQqkzzDnXDo=)
2: Z48YcacIdaFOrbU7hl0nBrBdOnE.roa (hash: mNCCj8yHct24e5aYcSn4spJlToJ33LdwEpzI7Aa7J4o=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: JuJzb3Hk/D1gyb5s07npiXtiQVTE5BZuIYShP9CYMaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:29:c2:b7:b7:85:6f:41:8f:57:ac:79:d7:d8:b9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Jul 6 16:01:28 2026 GMT
Not After : Jul 7 16:01:28 2026 GMT
Subject: CN=b9720ea10b59e93de6da2cc28d549e716c28c4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:8d:9d:51:97:43:c8:19:2a:01:e4:a5:f9:
73:59:49:5b:2c:dd:d8:d1:c7:63:94:c4:5c:e8:7e:
44:67:68:f2:90:ba:af:69:98:27:65:bd:f8:7f:f4:
7c:59:0b:9b:db:e6:61:d0:d3:bf:9a:4e:d0:fc:e5:
39:4d:38:a6:c8:36:ea:3c:df:99:fa:3a:71:bc:17:
9b:33:b1:ef:85:b4:cf:2a:a4:98:6f:3a:2d:cb:fc:
4e:30:08:16:be:b9:a8:9b:7e:1d:36:f1:a3:cc:0b:
e1:33:89:55:22:b3:c2:51:60:fb:37:30:ca:4c:3f:
d8:4f:57:80:c2:fb:a4:d5:ed:f5:f5:ed:b9:1d:e9:
b9:5e:a9:27:e7:c2:1f:60:fa:9b:a5:e8:dd:60:2f:
fe:f0:30:6a:0d:d5:43:c8:e8:83:d5:bb:59:cd:85:
0d:e0:ef:25:c0:3e:b7:31:77:19:78:df:ae:2a:5f:
a8:35:20:5c:ab:3b:a9:98:4c:84:8c:c0:40:ae:39:
d4:16:65:32:a6:61:6a:fd:6f:74:75:50:82:63:76:
e7:d9:28:ba:6e:93:47:57:d8:24:87:eb:ac:f4:08:
7a:e7:b4:26:5f:14:3c:d9:06:b5:a7:85:85:76:14:
a2:60:2b:b5:39:e8:94:79:87:69:2f:dc:ee:ed:56:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:72:0E:A1:0B:59:E9:3D:E6:DA:2C:C2:8D:54:9E:71:6C:28:C4:A4
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a6:41:74:77:74:e6:78:b9:82:59:f3:7c:38:da:da:b9:16:
00:8d:30:28:f4:79:76:1b:03:25:33:e8:ce:ff:0c:19:66:7f:
a6:e2:8b:97:2c:8a:ed:ab:fa:b4:07:73:42:c6:b6:9c:6d:c2:
ab:3b:ab:cd:e5:fe:19:76:81:d7:4b:2a:c3:4c:dc:e8:3c:c7:
8b:d7:d8:97:ca:29:7c:7c:2e:e7:e3:30:e6:b0:e0:41:24:1f:
b3:8c:86:19:da:99:a0:22:27:28:5d:8b:fb:08:54:e4:1e:78:
53:8a:1f:4e:38:5e:e9:cb:49:01:91:3a:48:f1:04:87:d1:aa:
7d:56:36:8a:c0:52:f4:18:7b:bf:5b:80:6b:fa:a9:cc:f2:a8:
37:4e:15:2b:0c:93:40:e8:f5:0b:6a:7f:47:3e:a1:a2:83:a1:
8c:29:0e:e4:9f:24:71:6e:51:39:06:91:42:76:8f:bb:10:e0:
47:3f:32:fe:8d:9f:41:de:27:c7:4d:37:16:8f:40:43:d3:8e:
73:97:ce:a3:77:e3:e2:60:52:71:8c:71:93:34:9e:9c:63:3c:
77:59:ef:f5:d6:e7:78:23:33:1a:11:20:73:e1:a2:01:03:ce:
3a:bc:23:8a:76:33:a2:a4:1d:39:4a:bf:2d:cd:1d:84:32:82:
dc:59:fb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:32:11 2026 by rpki-client