Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
File: Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json)
Hash identifier: EUW0bHoQPiLoLmNyAmD1JdH8GMZiMA2edJReXzdJ2jE=
Subject key identifier: 64:57:D8:82:65:7D:41:0B:37:06:05:9E:E9:41:C2:DE:28:71:B1:B5
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Certificate issuer: /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial: 019F90FF42FD9880E7DA17EEC1902502E9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
Manifest number: 1958
Signing time: Thu 23 Jul 2026 22:01:15 +0000
Manifest this update: Thu 23 Jul 2026 22:01:15 +0000
Manifest next update: Fri 24 Jul 2026 22:01:15 +0000
Files and hashes: 1: DJdqiSENKGFZJ1k4CQJ0qhVj-NU.roa (hash: JPyYKilJIGfMtwMBvPqVfl8PNsFxqskM2FqefiGjuEU=)
2: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: IqAmGJLwqoyCcRZQeFVoKh76kIAkXkL6NDbFhTWdGl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:42:fd:98:80:e7:da:17:ee:c1:90:25:02:e9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Validity
Not Before: Jul 23 22:01:15 2026 GMT
Not After : Jul 24 22:01:15 2026 GMT
Subject: CN=6457d882657d410b3706059ee941c2de2871b1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:a7:9d:43:81:60:61:16:95:b1:06:61:f9:
9a:d1:5a:56:27:c4:3e:e8:6a:0b:ce:43:40:c9:c6:
cc:ad:35:46:2e:b0:89:e8:df:ff:d6:b5:99:27:31:
7b:9d:35:dd:c5:32:4d:4d:85:42:2f:76:c3:8e:19:
11:86:22:e1:46:d6:20:2b:a5:99:33:35:80:4c:b2:
91:b6:c9:12:b2:9e:66:be:3f:78:b1:69:86:3d:c7:
3f:b4:41:77:bf:2c:f0:85:43:b6:0a:65:2c:bd:b5:
ee:17:d1:a5:82:5d:3e:af:1a:8f:c8:6f:2d:a5:af:
15:4f:7a:fa:2b:cb:67:99:e1:85:4d:7b:47:6b:ba:
b7:31:e3:ad:36:23:43:62:11:53:84:8e:fe:f3:f3:
e1:04:3d:24:10:bf:9b:b1:37:b5:39:cb:df:af:98:
20:00:08:43:ae:47:65:84:e4:05:69:35:7e:60:95:
fa:78:98:94:f3:de:0e:93:58:44:fb:fe:20:0b:ac:
51:b2:e1:a0:c4:6e:20:14:44:6a:5d:a6:81:da:b1:
a4:21:ff:be:73:6d:10:a9:f4:f1:19:8d:36:b5:6e:
67:8e:25:38:aa:e7:74:34:7b:9c:49:2d:37:6c:4c:
10:41:b5:2e:a4:4c:a9:38:90:11:f5:6f:a7:a5:1c:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:57:D8:82:65:7D:41:0B:37:06:05:9E:E9:41:C2:DE:28:71:B1:B5
X509v3 Authority Key Identifier:
keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4c:68:29:9c:c3:c6:f6:ed:92:5c:8a:3d:e3:12:92:11:58:
77:b7:2d:18:5e:03:dc:a7:bd:a2:8e:16:aa:54:46:d0:6c:8d:
00:3e:42:5e:70:b5:dd:1a:16:6a:e5:5d:77:ce:d2:be:69:71:
eb:59:81:2d:81:1f:df:b2:6d:65:11:d0:d5:a4:7b:75:3d:7c:
ae:e1:8d:45:d0:33:98:0e:57:8a:5d:74:c6:8a:3d:af:99:a0:
31:94:61:ff:da:b8:12:51:59:1b:96:82:06:2a:a9:59:61:2c:
58:d4:0f:bc:89:49:43:0b:20:8b:2e:98:34:78:eb:97:bd:48:
d3:2d:60:10:c5:ef:5b:56:4e:ad:90:ed:22:c2:c1:d9:4b:68:
10:1e:aa:d4:15:6f:72:51:5e:02:78:d7:93:52:8b:9b:ae:dc:
7f:fc:ea:a1:46:4e:f6:4c:ce:88:67:07:ab:e9:c7:4d:49:90:
73:89:d1:5b:59:98:55:97:d4:98:05:5a:04:af:56:77:a5:27:
36:56:77:e2:2c:7e:15:82:10:6b:20:02:f1:6a:ec:c5:dd:0c:
38:80:a9:aa:59:3e:55:15:b5:39:eb:21:34:b1:c5:9a:2d:82:
7d:64:bc:2a:98:c1:92:f3:ae:9e:ff:cc:d7:1d:d1:a0:94:a4:
5a:17:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:34 2026 by rpki-client