Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: sH/7OKdvllPyi2LxIFuN5be9kq6GQBbwb1Xza+1Qv2g=
Subject key identifier: F2:55:02:E8:E4:8F:4F:9B:71:28:08:10:3B:B9:35:7D:1E:09:82:15
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 019F90231C23BAF0868F112FC5112A9C7D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 0DEF
Signing time: Thu 23 Jul 2026 18:00:47 +0000
Manifest this update: Thu 23 Jul 2026 18:00:47 +0000
Manifest next update: Fri 24 Jul 2026 18:00:47 +0000
Files and hashes: 1: 1-m2fud3k5EzmiZRoBhOtqfySzmI.roa (hash: HOvFww4yxsynh17q+d5C89mxcrHn4M7iS7z+Y3frs9U=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: uFaJnvK9vdrael8z1/v11t/KqAHJfy5bMyj/oE0/0Mo=)
3: e89SBhBBaL18qejVEfgQtSemlB0.roa (hash: Gc/uVJGxURscBi9WA9foLpSF+kUOEix1bWq345u58KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:1c:23:ba:f0:86:8f:11:2f:c5:11:2a:9c:7d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Jul 23 18:00:47 2026 GMT
Not After : Jul 24 18:00:47 2026 GMT
Subject: CN=f25502e8e48f4f9b712808103bb9357d1e098215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:35:3d:01:24:8a:b0:fa:62:ed:c7:be:67:
29:2c:8d:0c:aa:d2:df:30:37:30:4f:e1:72:e7:3b:
47:f0:6c:7e:bc:23:73:13:85:52:eb:93:c2:51:69:
1b:d6:74:b7:94:a8:b0:e0:36:20:d6:35:e4:93:90:
4c:87:70:1a:26:f5:96:a8:22:89:9c:ff:b7:96:4b:
09:45:ad:c0:5d:a0:8a:31:bc:46:3c:85:e8:ab:57:
35:25:0f:bf:cf:da:1e:38:b1:95:9f:30:38:1c:8e:
82:0d:b6:14:fa:c2:fb:1f:70:ce:8d:ef:e7:ef:05:
89:6c:71:e1:d9:51:83:a4:11:72:8c:dc:3b:5f:f7:
43:29:b8:0e:6d:5c:be:28:07:6c:08:16:fb:06:41:
79:fd:8d:4c:80:63:18:93:a4:91:f0:68:e2:7e:ce:
73:ea:ed:86:50:9c:d6:6d:7c:c4:b9:5b:f2:1d:79:
f4:f2:d6:9c:15:30:74:87:78:20:d1:8c:e6:4b:dc:
c8:a1:6a:c9:a9:69:9b:dd:15:c6:05:64:d5:13:bc:
cb:f4:e7:a2:4d:58:90:50:1e:66:38:63:64:55:df:
2f:3c:85:33:d1:f1:81:df:09:60:ca:2c:33:5c:fc:
4e:66:86:c8:a5:a6:5c:a8:55:f4:e6:85:d6:4c:9c:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:55:02:E8:E4:8F:4F:9B:71:28:08:10:3B:B9:35:7D:1E:09:82:15
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:46:f3:58:77:96:9a:9f:50:36:a5:d1:1a:64:6e:b8:e7:9f:
f8:b9:a1:af:89:6c:02:ef:e4:a0:d5:0c:7f:54:1f:bf:6d:51:
c7:65:6c:22:3b:2b:26:3a:39:06:ae:08:42:56:18:89:d1:ca:
6b:f2:48:cc:53:7c:bc:b8:f0:fc:14:e3:5c:93:91:73:9e:4d:
fa:05:b1:49:5e:10:70:9d:92:5c:7b:a4:9d:c9:3c:ce:e5:f2:
1d:45:56:00:8e:a6:cd:76:a3:01:26:df:42:2c:ff:b7:fa:c6:
de:98:85:e2:d9:8e:5f:bb:13:a3:df:c8:d2:ec:7d:06:d6:a9:
68:40:c0:59:84:ac:af:f6:ca:7d:1c:f0:f6:3e:69:22:47:0c:
2b:91:14:e4:2b:a8:f4:31:de:68:84:68:b7:85:2a:e8:ea:31:
a7:96:92:5c:a5:b2:a2:99:29:29:aa:fe:64:bc:ca:87:72:15:
f3:4f:4e:61:e2:76:00:28:bc:42:f1:9a:86:cf:a8:2f:aa:dc:
61:1b:44:47:13:e9:ab:e9:b5:5a:b4:01:70:e7:eb:23:87:ce:
e8:5e:93:b0:55:b9:51:ff:f1:1a:e1:3d:76:29:47:fa:be:e7:
db:43:cf:82:f8:5a:70:16:c2:57:44:64:8c:74:4b:b3:10:bc:
60:74:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:25 2026 by rpki-client