Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier: ivKOzuPPg5RG1nRxTj3acPfmr63cFKtBE9XCHWwd0Ac=
Subject key identifier: 88:29:F0:4A:6F:6E:6A:E9:41:58:04:DD:C0:3A:2B:85:A7:71:0C:5C
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial: 019FA14D41F10C15C9401DA50721821D83A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 02:00:22 +0000
Manifest this update: Mon 27 Jul 2026 02:00:22 +0000
Manifest next update: Tue 28 Jul 2026 02:00:22 +0000
Files and hashes: 1: pbzEOsOOyDKksxCPhBhG-xag72U.roa (hash: iF4hi9XQEfO4uOx6Je7Sgz4Viq0kEg/cT2o7PAWCJTI=)
2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: d8y6GQJXGZAva1LnSOf6zJi/GM9YjTnpYDO8+kevanc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:41:f1:0c:15:c9:40:1d:a5:07:21:82:1d:83:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Validity
Not Before: Jul 27 02:00:22 2026 GMT
Not After : Jul 28 02:00:22 2026 GMT
Subject: CN=8829f04a6f6e6ae9415804ddc03a2b85a7710c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8b:9e:84:2f:3a:8e:30:d6:9b:91:df:c5:b4:
01:cc:4a:0d:0f:ab:e4:f9:6a:9c:42:8b:6f:c9:75:
cd:eb:b7:ed:25:52:4d:a1:cb:a9:a6:f2:b3:19:71:
36:4a:ac:c6:f7:2d:95:ca:c8:d9:56:3c:88:62:ab:
36:5b:b9:6a:cf:6d:f9:5c:38:f5:49:a1:11:e8:59:
a0:7d:87:e3:13:31:be:e3:ad:61:f8:bf:c6:00:bc:
aa:b9:6f:13:37:62:e9:fc:91:f4:63:90:6b:4d:25:
1f:f9:9c:7f:11:38:a5:95:e4:60:3f:b5:c1:3a:bc:
d0:be:eb:bd:bf:d5:73:0f:25:f1:69:d4:58:ac:d8:
eb:e7:14:00:6d:3c:35:5f:c7:53:48:b6:92:cb:ff:
1f:98:f4:d4:4f:f2:e9:24:e5:24:f4:da:b1:0e:45:
76:83:63:13:40:6e:76:ec:6c:86:97:6d:34:15:a4:
d6:35:af:7b:dd:1d:41:e8:58:02:5d:9e:fd:80:6a:
46:bc:51:ee:e2:ec:c2:3f:5b:46:6d:64:9f:5a:ce:
73:7d:3d:a7:d9:01:76:30:48:dd:0c:84:e5:8e:7f:
21:1d:e1:6c:8b:e3:20:8b:59:5e:a5:bf:6e:23:45:
3d:c9:2d:94:f5:76:6c:fb:fc:eb:38:aa:26:7d:b5:
dc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:29:F0:4A:6F:6E:6A:E9:41:58:04:DD:C0:3A:2B:85:A7:71:0C:5C
X509v3 Authority Key Identifier:
keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:13:55:f0:4e:da:b5:df:70:26:b2:6b:a4:78:0a:8c:d1:88:
6e:86:45:a5:ae:35:f2:83:10:4a:e5:6a:5f:00:c5:06:96:56:
b4:59:b5:cd:10:11:d5:de:31:66:43:11:ea:54:c6:00:27:60:
3d:e2:35:e1:fe:0f:6c:6e:78:b3:5e:09:c1:5f:18:ce:1b:95:
72:5c:70:42:39:9d:81:e2:fd:05:be:00:30:f1:2b:48:0a:ed:
7e:f8:58:c2:61:27:8e:77:d8:54:45:f2:57:50:6e:0a:9d:ca:
9e:d0:7e:c0:5a:17:e1:13:d5:49:7a:46:2b:97:07:f2:a7:94:
f4:fe:72:4b:67:0a:2c:db:33:93:f3:6d:f7:7e:14:d8:70:0a:
85:ae:3b:83:74:df:cd:f0:f7:2f:cd:be:85:68:4a:3f:17:ff:
e3:8f:e0:1d:58:e7:15:93:d2:6c:df:65:5a:3e:27:cd:08:c9:
3d:b1:0b:d6:fa:69:23:e9:41:c9:09:b0:93:55:40:1f:6f:6c:
2d:96:9c:91:a0:46:75:65:90:99:b1:e2:bf:58:bc:d7:7d:72:
cd:1c:28:33:fc:c7:9a:38:87:b1:29:eb:a5:28:88:e2:fe:1a:
e9:70:de:76:67:83:83:c8:65:67:df:86:00:5b:ec:58:3f:0e:
6a:66:ce:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:03 2026 by rpki-client