Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: IXDzca81+sD0mw/9gPuY7vsQhiGyWNmXwTpPxlJN2vA=
Subject key identifier: 35:23:B8:85:42:ED:24:0E:AE:16:4A:72:7F:56:D1:7C:A4:05:88:71
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 019F152F16A1242261606A0553EC9CC71177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 21:00:35 +0000
Manifest this update: Mon 29 Jun 2026 21:00:35 +0000
Manifest next update: Tue 30 Jun 2026 21:00:35 +0000
Files and hashes: 1: JPBii3Hqcq30q25CjK9-h-C44rw.roa (hash: 0nYkKiEoyllpIK9/qO7+AH5OvjbE8XnCXRin+xPio6U=)
2: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: doNbZ6xZGxBluKzd4evlav1moIg+VrJsJHyPliHQi0Y=)
3: qVXn2mio2xGIpazTfAYClCM2JZM.roa (hash: utP7O671cytqXjasGTBwll6HaIxFO1XJW1EluiUhDqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:2f:16:a1:24:22:61:60:6a:05:53:ec:9c:c7:11:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Jun 29 21:00:35 2026 GMT
Not After : Jun 30 21:00:35 2026 GMT
Subject: CN=3523b88542ed240eae164a727f56d17ca4058871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:83:5b:f8:53:13:29:6e:81:35:cc:f8:d1:
c0:6a:9f:d6:09:13:44:33:6e:11:46:9f:86:dc:7b:
26:d4:41:53:4f:5b:58:5a:ec:b5:c1:38:4a:f0:6f:
d8:6c:e9:91:96:83:00:02:1b:58:62:5d:bf:17:9b:
f2:a2:28:d0:c2:2b:5f:4f:0f:98:14:38:ea:70:27:
69:61:de:ec:cc:17:73:b1:b1:90:21:12:36:0a:1a:
0b:12:51:58:31:0a:7a:51:05:f5:e3:e8:b5:60:2c:
7b:17:24:17:7a:21:f2:41:4c:c4:a1:e2:67:45:29:
6b:1a:a4:32:5f:48:bf:c7:22:43:f6:7c:0c:40:33:
07:dd:88:00:82:cd:08:f7:53:da:16:70:44:1f:39:
14:8b:8d:32:ef:5c:ef:6b:0b:6b:ce:a3:22:69:ec:
27:7e:f9:fd:c9:2b:5f:17:b7:c8:4c:6f:44:02:13:
78:84:ac:fb:f0:6c:aa:70:67:32:6a:b9:a0:52:74:
65:1f:ff:aa:8d:60:73:9e:a6:8d:e5:f6:f1:f8:5e:
d4:14:fe:3e:05:8d:e5:e3:85:3f:cf:51:a0:38:f8:
07:9b:3b:28:b1:c5:ee:a1:b8:bd:83:dc:6f:5e:34:
ea:bc:7f:46:43:4d:e2:7f:55:a8:a1:54:a3:07:3b:
2c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:23:B8:85:42:ED:24:0E:AE:16:4A:72:7F:56:D1:7C:A4:05:88:71
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:33:e7:11:a3:ea:67:96:b1:a9:e6:d7:6f:3f:5c:58:ff:3d:
8d:8b:e1:4c:6b:12:24:88:ab:30:3b:09:64:ef:a2:de:d9:6e:
2b:88:50:69:c2:76:5f:6c:95:f7:3d:57:4a:2d:8e:fa:a8:de:
df:53:96:73:4d:a2:af:76:48:7b:4f:55:fe:38:26:8b:95:20:
33:b2:63:8c:39:13:6d:b9:8b:c4:51:ff:db:1b:95:af:94:7a:
99:81:28:08:5c:c7:d1:a2:6f:09:86:ef:2a:8e:55:43:fa:e9:
7e:9b:18:ce:20:03:07:4a:27:b6:17:86:bc:15:df:ac:7f:26:
5f:65:64:0c:2d:66:4e:79:be:ac:bc:82:f7:cd:ed:f7:8e:11:
e9:a8:ff:ea:e5:61:d5:f8:b0:21:e4:84:f8:e1:ed:53:e8:c8:
5b:0f:a6:5a:cc:25:cb:19:ef:ad:56:1b:84:64:c5:34:37:4c:
f7:c1:e9:49:0c:49:d8:a4:d0:40:c6:64:c6:cd:a6:b7:82:dd:
21:f3:30:b6:bc:d5:c9:08:ee:5f:e5:a1:31:56:12:be:e9:f9:
9b:e5:17:68:d5:e9:e4:72:c4:aa:52:7c:59:9b:5b:aa:39:4e:
d0:4f:21:4a:b4:5c:12:75:3d:44:13:ca:8f:4a:5a:f5:39:a1:
23:63:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 00:07:57 2026 by rpki-client