Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: AQLUIyPjmmFDPflGLp9QuymkmTTuWY0DZxazgKI1E0M=
Subject key identifier: 19:AD:41:98:85:33:35:1C:53:2D:23:47:4C:1A:3A:29:36:3E:57:CA
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 019F853132A87EE96E0C52459419C5192609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 15:00:21 +0000
Manifest this update: Tue 21 Jul 2026 15:00:21 +0000
Manifest next update: Wed 22 Jul 2026 15:00:21 +0000
Files and hashes: 1: 0ZH3kxew36RRFzQg_mo4-7q2H4U.roa (hash: k3MKGbvdmLnbLs9zehodMhvSl8HPr3KY+BJ978CUfo8=)
2: AydP7XNvWxhhDMLSuOqc0Oa5dE0.roa (hash: jUVgcjRvFoEADtpRITq72Z8KeRsnl4848PEL4Me2SIw=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: lcU9gXHO6qlpcILoW3Cohha9m/CD0cLL+WTkImSLXxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:32:a8:7e:e9:6e:0c:52:45:94:19:c5:19:26:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Jul 21 15:00:21 2026 GMT
Not After : Jul 22 15:00:21 2026 GMT
Subject: CN=19ad41988533351c532d23474c1a3a29363e57ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:56:ad:6d:3b:b9:99:6b:31:13:88:e1:a0:89:
d7:36:0e:f1:1e:c1:b5:27:53:dc:7e:07:e0:82:fd:
6f:5c:41:79:ff:0d:65:e4:4a:90:c4:8e:60:3a:e8:
65:ef:0b:5d:5b:d8:f9:37:cc:6b:9c:b4:20:df:61:
1e:54:ed:c4:55:99:75:9a:99:33:02:c6:18:65:15:
f0:6f:ac:02:f1:45:09:7f:e4:20:73:07:8d:74:ed:
cb:2b:82:9e:fc:63:ed:b3:bd:8b:e3:1a:f3:0e:25:
fb:45:3a:60:08:07:c2:b8:db:37:ab:e5:f4:ec:20:
57:c6:1a:3e:21:8d:22:1b:4f:01:33:25:46:a5:c7:
51:a4:51:14:dd:d2:5d:a9:b1:81:88:7d:59:48:3a:
ba:1e:9c:23:7f:9b:20:ff:67:77:91:18:2e:3d:20:
79:53:9c:14:09:ca:00:02:33:64:d7:18:39:8b:36:
d2:cb:fc:3d:fe:f2:37:1c:42:bb:4f:c9:ab:8d:ff:
a8:bd:01:7b:ab:7f:a6:6a:b5:8b:04:d7:98:07:e6:
b0:18:a9:4c:ca:7b:a3:0f:65:ad:a7:d1:3a:9c:92:
60:43:01:66:33:88:f7:1e:c2:22:3c:8b:77:49:91:
43:d9:77:85:78:e1:bf:93:b8:e1:17:c7:31:63:f0:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AD:41:98:85:33:35:1C:53:2D:23:47:4C:1A:3A:29:36:3E:57:CA
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9f:f3:59:8a:29:06:2d:d1:b9:8d:b6:08:47:50:27:fe:34:
bb:16:29:61:1b:07:29:79:00:49:6e:82:a6:08:3d:df:3c:40:
d9:fe:10:dc:f3:a5:86:ae:84:7a:fd:c5:16:32:20:28:28:fc:
b7:bc:b5:ad:16:4f:b2:c1:ff:20:11:36:24:0b:b2:dd:34:a3:
7a:be:a6:b9:cd:90:f2:c9:06:22:cc:a9:47:f4:6d:2c:21:56:
e9:37:8c:e0:f6:85:3e:68:95:0c:52:e3:45:f6:bc:48:02:03:
00:da:e8:e0:ad:e0:be:44:7d:90:fa:73:d6:3b:93:02:f8:3e:
ef:a1:f6:b5:02:11:97:dd:1b:b7:5a:8d:0e:da:5d:e9:88:c1:
74:23:a1:cc:13:72:be:3d:24:57:e4:af:de:e8:fd:7d:38:23:
ee:1e:18:5d:fb:42:0b:3c:70:de:f5:38:43:6e:24:e6:61:1b:
e1:76:cd:0c:ee:da:31:92:3b:76:e3:04:98:b7:c5:3e:94:e3:
19:51:6f:12:35:1a:e1:ab:1d:0d:b1:83:89:68:a3:3a:38:c1:
61:60:e4:54:25:b7:7d:da:cb:b9:2e:92:2a:fc:ea:30:b8:52:
df:70:e5:30:32:de:85:80:9b:f3:04:f3:48:76:5a:5f:cc:f2:
47:4f:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:19:52 2026 by rpki-client