Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: lJhxPOpSkkU5pDz2QMnGuMbiLOQcbe9D3kWHpQa/b5U=
Subject key identifier: BB:56:B8:EF:0F:64:24:80:A6:6F:9E:86:D9:47:8D:48:E1:91:DD:80
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 019FA14D4D6F2EE0D1E1AA8FE03B2E3CA333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0E30
Signing time: Mon 27 Jul 2026 02:00:25 +0000
Manifest this update: Mon 27 Jul 2026 02:00:25 +0000
Manifest next update: Tue 28 Jul 2026 02:00:25 +0000
Files and hashes: 1: UycNDBh6XIKJ82eOMM9nsWm3RUU.roa (hash: j5CuV0Ecvfd3t9K7/xrfKK4OIBdyHHKPYNpzUJ5l9jc=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: QdtPuU/VN6UdTrbAG+8HuhzKI3gloFcjCXxCcjWrnnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:4d:6f:2e:e0:d1:e1:aa:8f:e0:3b:2e:3c:a3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Jul 27 02:00:25 2026 GMT
Not After : Jul 28 02:00:25 2026 GMT
Subject: CN=bb56b8ef0f642480a66f9e86d9478d48e191dd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:a3:3d:e6:ff:a2:f1:2e:99:7b:bc:13:48:
65:3a:53:1c:84:7a:54:c4:da:28:e1:40:23:52:b6:
86:86:a3:a9:1a:7c:aa:6b:7e:11:d6:dc:b9:66:a3:
57:80:ef:ea:f9:46:d8:8a:06:86:b6:1c:4c:2c:04:
17:89:ed:84:9a:47:b1:1d:7b:8e:a8:ac:fb:49:39:
38:71:3b:c2:20:48:55:f5:71:e7:30:35:8e:e9:92:
40:06:64:ca:cc:b1:48:16:43:d6:db:2a:8b:f9:86:
15:a7:fb:b1:b0:5e:4c:bc:bc:25:fa:f3:b4:92:20:
69:35:a8:aa:00:8e:44:7f:03:fe:a7:5c:47:d0:ca:
e2:bc:09:18:12:f3:b3:13:45:13:08:df:45:1e:43:
e8:c4:bd:ce:63:5d:f8:d8:48:36:55:af:24:15:97:
48:8c:b3:78:28:12:11:e5:8a:c7:e0:83:10:a0:bd:
03:32:42:39:35:de:42:62:04:11:d4:fb:85:7f:cf:
2b:a4:68:1e:94:07:a8:7f:93:6d:f4:5b:35:cd:95:
82:60:7a:52:5f:04:d6:a9:0f:8b:44:99:22:18:8b:
a4:f2:48:d8:42:19:d8:10:e0:49:b6:2a:17:c8:42:
cb:c0:7a:31:ec:1e:f1:d8:28:53:08:8d:9c:d1:48:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:56:B8:EF:0F:64:24:80:A6:6F:9E:86:D9:47:8D:48:E1:91:DD:80
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:96:7e:26:d5:ab:52:7e:69:73:eb:b2:c0:63:36:db:46:95:
05:00:92:c2:7b:d9:c6:55:c8:75:0a:2d:f6:2b:54:ac:fc:d9:
8b:14:d9:36:dd:64:d7:e9:b9:4a:5e:e3:5f:87:a4:d4:a1:75:
f1:dc:6e:10:65:b5:dc:3a:86:ef:2e:52:7d:fc:eb:66:d4:8e:
6a:86:42:75:b9:99:a3:71:7e:14:b1:45:f8:51:7b:cd:49:5f:
eb:a0:5b:fb:e1:8b:30:5e:5b:49:5a:bb:4a:ed:f3:1f:8c:e9:
5b:7f:e8:f7:b1:15:d1:f6:36:7b:03:c4:ab:8c:1a:74:14:c7:
be:c0:c8:6a:65:f6:f8:54:2e:6a:87:d5:4a:6c:27:2b:9e:73:
e2:07:eb:34:3c:e8:85:3f:93:c5:93:34:a5:d3:60:41:ec:2c:
ba:a2:4c:f7:01:f7:ef:fc:ea:00:6a:ec:a5:c2:21:0c:71:6e:
02:73:be:10:c2:af:f5:60:2a:82:79:28:e7:ad:fd:f3:b6:46:
de:e6:d9:8b:7e:d3:87:be:cc:44:93:a6:24:35:45:76:b0:1b:
dc:66:d5:27:fe:55:45:67:83:56:14:62:f6:ab:48:68:ce:ac:
61:07:41:4a:12:d0:42:b1:44:8d:d0:97:97:79:38:3e:1a:a0:
4d:eb:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:05:46 2026 by rpki-client