
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
File: pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json)
Hash identifier: oZr1UV4U5ebHK08eg1l9tabtRMe2f79QBpaJ1blV868=
Subject key identifier: B0:06:27:E6:CA:0E:09:04:B2:15:21:AF:7A:71:AE:E1:9F:B1:21:E9
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 019F7218DDBC6920C3087EA003B5DD613902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
Manifest number: 19BA
Signing time: Fri 17 Jul 2026 22:01:00 +0000
Manifest this update: Fri 17 Jul 2026 22:01:00 +0000
Manifest next update: Sat 18 Jul 2026 22:01:00 +0000
Files and hashes: 1: IwmQjZUfdYPhFC1XFVEaDl2crNc.roa (hash: GjZxnW1gzHRN+UqmaVQ0ZwFiCbXVNJT18u7noxRI/WE=)
2: gQlaDrKaYvl0-C-DyFPVtl0u3B4.roa (hash: A/ZwZg8++NTunxUO1oyToOusbEjGDF79YcXv8xOqsQM=)
3: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: MuFvI4FpChs2c45IF3DAAHa5IxnI8HCdCpxNLgjrVfw=)
4: qhrFDF2N9P-DSl7QdTShxOTMpGA.roa (hash: Su+QNGIdR5cFHBOaO84honpjK8HUibgIUYb7+1xR83U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:18:dd:bc:69:20:c3:08:7e:a0:03:b5:dd:61:39:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Jul 17 22:01:00 2026 GMT
Not After : Jul 18 22:01:00 2026 GMT
Subject: CN=b00627e6ca0e0904b21521af7a71aee19fb121e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:3a:2b:80:7f:01:f5:2e:0f:0b:48:02:b8:
73:74:56:f1:3e:37:f2:52:01:91:93:22:f2:80:25:
93:13:9a:0c:ac:05:9a:a4:41:00:3c:da:f2:4f:2f:
92:21:13:d9:83:65:f3:01:35:17:ae:ad:d5:fb:ae:
33:bf:3d:79:93:73:95:22:7c:2d:fd:86:df:42:3d:
65:3f:e9:ff:2c:11:85:f3:93:a7:98:bc:57:92:00:
f9:81:e3:a1:bd:9d:41:74:66:c2:3e:c6:e6:9a:24:
4f:65:e0:1f:54:cc:77:56:9a:ff:f4:1e:82:b0:45:
27:e6:8b:60:e5:4d:59:df:b1:44:74:e8:92:eb:33:
16:2b:d7:ba:e6:1d:0b:e5:b5:08:4b:fb:37:2b:63:
e3:14:ba:b2:e8:ff:6e:45:9f:ca:5a:9e:43:bd:74:
15:e5:43:44:78:69:d4:0e:0d:37:ac:0a:45:12:e1:
ac:ff:9a:72:85:78:92:b0:a5:a5:fd:5c:2a:2f:7b:
eb:61:ea:fe:fb:82:35:31:37:50:4c:a0:f0:50:66:
c5:86:91:dd:f6:cb:c1:bf:43:55:ef:31:f2:a0:45:
08:6f:54:8b:76:a7:ee:c6:8d:de:0f:12:e3:22:bf:
31:c5:bd:14:1a:c7:55:48:27:a4:0f:ff:21:39:c7:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:06:27:E6:CA:0E:09:04:B2:15:21:AF:7A:71:AE:E1:9F:B1:21:E9
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5d:f7:1b:3f:8f:8b:3a:df:73:dd:d3:d3:12:c9:e5:ea:9d:
68:89:9f:97:aa:77:04:0e:97:a2:77:8d:94:b4:16:aa:bf:52:
b9:7a:9a:79:10:4f:7c:1b:f4:df:6b:b6:56:73:6f:ab:6b:ae:
3e:d9:7c:d1:f4:12:5d:ba:57:91:cc:ac:b4:df:a5:32:8a:61:
06:11:13:4e:cc:bd:20:95:06:d9:d1:c6:77:7c:fd:cf:be:17:
89:4a:a7:28:a7:7e:5b:d8:41:30:f3:ad:83:00:58:30:b3:dd:
14:eb:24:c0:46:32:f9:59:be:46:6f:16:13:46:b4:dc:ea:49:
f6:c5:80:44:9e:e6:0f:35:c4:3b:08:e7:e2:d8:16:5c:5b:4e:
cb:5f:84:4f:c8:4e:4c:e3:3b:47:7c:25:89:53:32:02:fc:0b:
40:a2:c8:83:09:9a:30:8c:ad:99:bf:cc:2f:53:71:1d:64:53:
24:13:7e:0f:95:c3:e6:bf:b4:7b:f6:94:72:df:74:59:ac:ee:
9c:64:86:0e:8d:ef:66:05:95:8d:54:96:4e:48:27:42:72:67:
6b:ec:84:96:04:e7:d3:f1:b3:3d:89:64:8d:5a:62:00:b5:b3:
ae:a2:53:27:be:45:0a:e8:6f:39:c0:6e:56:79:fd:4d:28:e1:
5c:25:a4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:55:59 2026 by rpki-client