Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: ZUJiwJ4kl3T+icgVOT+MVdMZTzAi3VNS6TFAnBqcVDs=
Subject key identifier: 76:F8:94:8A:F3:D8:6A:88:54:81:CE:56:30:B3:43:66:A6:CF:44:13
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 019F9E4C28E53890A8E9E563288BE11557CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 19D2
Signing time: Sun 26 Jul 2026 12:00:19 +0000
Manifest this update: Sun 26 Jul 2026 12:00:19 +0000
Manifest next update: Mon 27 Jul 2026 12:00:19 +0000
Files and hashes: 1: OxD51mZyUSy88WgP3TSafX3fVSM.roa (hash: ZUvDT5JmZoKJbZ2aaD6n8DqRqPOQ2yLOsnmhPBma0XE=)
2: Rqp6q80V5Lqgy6fApQicG0uIkYM.roa (hash: MiTXHdLJkzTFAdsQjyFK17euaeb3+FVSMfPmJuUxhJ8=)
3: lM0ykYh8wCH6poD1ByzZO951DOs.roa (hash: O0xjxg/OZFV2+IIvgGtT77zr81ND+/n3L2jks1YfEO4=)
4: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: l78I7HtupJwPjF5iwqYfn5KrHjTt5L48VTCKL+vgBfU=)
5: tVTj2VfcWC8MlPPtw5H08Ah033c.roa (hash: vnVztEiFiRrUOyK2US2Elxv/6sJ52wKVTB11SJJl2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:4c:28:e5:38:90:a8:e9:e5:63:28:8b:e1:15:57:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Jul 26 12:00:19 2026 GMT
Not After : Jul 27 12:00:19 2026 GMT
Subject: CN=76f8948af3d86a885481ce5630b34366a6cf4413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:37:d4:2e:d8:22:20:b7:12:e3:2a:50:9e:
9f:58:1f:1f:53:26:47:40:dc:f9:7f:80:e6:8d:d1:
7b:2b:5e:dc:92:c9:99:ba:b2:a4:eb:22:de:91:fa:
e2:92:96:39:56:8f:1e:54:d1:ea:3c:f8:c1:7b:f2:
98:74:05:4e:9b:2d:8f:19:60:fc:f7:78:4d:68:ee:
50:f5:af:b3:34:76:b5:d6:94:27:0c:92:b9:b9:87:
55:43:f7:b3:43:60:ca:30:49:4b:bb:4c:7c:02:41:
52:be:cc:ab:3d:e9:86:4a:ab:f2:59:fb:f6:de:6e:
e9:8f:b1:31:b4:f4:fe:ef:fd:15:9c:33:3b:59:fe:
f4:0e:82:54:80:71:a9:e3:c9:2f:ce:5a:fb:53:55:
aa:bc:51:37:c4:bd:3f:4c:2e:d4:14:b8:f3:9a:06:
b1:12:3e:27:a2:9a:88:89:05:9c:6d:99:68:02:4d:
a3:6c:0e:43:6b:86:5b:9e:ac:e8:b5:68:1e:36:ac:
0d:5a:11:06:60:3d:2b:6c:64:f6:34:7d:7b:fd:9c:
08:2a:a3:49:cc:21:3c:e2:99:75:98:f8:67:8c:c8:
18:f8:31:88:c3:1d:b2:f1:1c:50:1b:6b:0c:b3:ff:
bc:3f:9e:fc:11:24:14:2b:73:ce:50:34:58:fd:17:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F8:94:8A:F3:D8:6A:88:54:81:CE:56:30:B3:43:66:A6:CF:44:13
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7c:44:d8:88:1f:3e:62:b7:91:f4:71:a2:86:57:26:45:50:
ad:ff:6d:2a:05:bb:f1:95:48:93:c4:bd:d9:5b:ec:33:2f:2b:
ed:84:a9:87:df:4f:9c:15:e7:7f:9f:24:48:ae:68:3a:16:58:
bc:98:c0:18:6d:9d:1e:60:7e:bd:0e:47:30:be:c1:cd:c0:f1:
fb:dd:a4:95:ae:2c:c3:49:3e:df:f2:a3:25:9d:f8:66:6f:19:
d9:b0:4b:b0:4c:9a:3d:4f:0d:b5:03:2c:66:d3:8b:39:f2:6e:
e3:ce:80:07:10:93:86:27:73:1d:b8:ea:61:6c:d8:8f:ba:95:
56:dd:c3:5d:f0:94:68:f8:c5:48:f4:32:c8:ba:c8:be:17:52:
45:00:e5:7d:f5:a6:75:bd:08:89:da:20:bd:c9:33:45:93:7a:
7c:a8:6e:2f:38:07:2f:8f:ee:ee:1c:3f:55:64:18:9d:a6:61:
50:cb:75:78:73:85:90:a0:6b:2b:f4:40:bf:96:dc:3b:c8:d7:
8d:c9:a4:26:f4:b3:a2:e1:ab:19:af:b1:83:7a:e2:ab:2c:92:
ef:27:79:2a:f1:72:42:5a:5f:ed:c1:d9:77:fb:93:86:eb:af:
33:bb:63:7f:83:db:fb:b0:6b:4b:26:23:88:a5:88:5f:ab:e5:
98:ea:7c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:35:37 2026 by rpki-client