Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
File: pIKPtnaRQQizohBYAGsbdGU6coQ.mft (raw, json)
Hash identifier: 0gGwy8VfWNHYdfIZufRcKwWXvstj8pOIC/Hpws+Ew0I=
Subject key identifier: C3:9A:BA:25:C3:53:BE:7B:04:BA:ED:7D:44:53:66:E6:48:68:8D:25
Authority key identifier: A4:82:8F:B6:76:91:41:08:B3:A2:10:58:00:6B:1B:74:65:3A:72:84
Certificate issuer: /CN=a4828fb676914108b3a21058006b1b74653a7284
Certificate serial: 019F935C184B661D5B6D35503D1999A9E8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:53 +0000
Manifest this update: Fri 24 Jul 2026 09:01:53 +0000
Manifest next update: Sat 25 Jul 2026 09:01:53 +0000
Files and hashes: 1: Axa_0aCzZ0jvkgs_nEgYudAvGUw.roa (hash: E8jftNtzJHRIAuWKpqpfJyJKPtiJuYowPv6GypFZ/UE=)
2: pIKPtnaRQQizohBYAGsbdGU6coQ.crl (hash: 3uO99KI8ehWCo47CSVDrE5XBbfVzBRS7sG0Bbc6U5Uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:18:4b:66:1d:5b:6d:35:50:3d:19:99:a9:e8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4828fb676914108b3a21058006b1b74653a7284
Validity
Not Before: Jul 24 09:01:53 2026 GMT
Not After : Jul 25 09:01:53 2026 GMT
Subject: CN=c39aba25c353be7b04baed7d445366e648688d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9b:aa:0b:8c:f9:ac:46:37:cd:18:71:e5:1f:
50:c5:06:ae:01:ee:3a:57:49:02:67:f8:09:46:96:
36:68:bc:4e:a4:ed:fa:8f:dc:ae:87:2b:ad:32:12:
61:1d:da:ef:f2:30:c5:a9:f9:18:ed:61:11:10:3d:
32:08:06:b1:4f:24:35:4c:0c:fe:d5:9d:56:31:ee:
f8:8d:36:68:3e:c3:b5:b6:c2:15:b5:70:2e:5e:3f:
20:28:b2:34:7b:53:c1:b5:db:aa:22:c4:65:e4:2d:
47:45:18:74:0f:09:e4:a5:6e:a6:ec:bf:49:80:a9:
ea:2c:2e:c5:01:31:ba:c6:58:6c:c0:84:f5:1d:d1:
67:4e:c6:f0:15:22:bf:d8:4b:9c:af:86:93:94:ea:
cb:78:c2:1d:07:0b:2d:3d:99:1f:98:4d:2f:6a:41:
4f:b9:2d:25:0a:7f:72:81:e4:70:a0:87:0d:ab:4f:
a6:93:72:0d:7d:56:3f:13:ce:ac:3c:18:f2:0d:a5:
b1:5e:98:10:d8:87:eb:ad:08:33:6e:35:c6:51:d7:
44:bf:fc:7e:61:a5:2f:86:c1:b7:c1:60:09:2b:65:
d2:b8:7f:22:03:64:97:83:f1:03:99:bd:b4:cd:9c:
ed:90:47:71:63:91:2e:c1:82:76:86:a8:c6:0f:e3:
79:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9A:BA:25:C3:53:BE:7B:04:BA:ED:7D:44:53:66:E6:48:68:8D:25
X509v3 Authority Key Identifier:
keyid:A4:82:8F:B6:76:91:41:08:B3:A2:10:58:00:6B:1B:74:65:3A:72:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:92:1f:d9:93:29:9d:0d:21:67:30:ba:f5:50:0b:a3:8f:11:
ec:e1:d5:26:14:62:83:af:fd:5e:3c:cf:f9:8a:a0:ea:a9:18:
ab:15:4e:b2:d5:c2:6c:21:d8:a5:bd:4d:37:bc:91:b2:6d:83:
89:c8:8a:ce:4e:3e:7e:b6:f0:b3:77:22:4e:dd:9c:9c:ab:e1:
5b:2e:61:e4:cb:7c:3a:da:df:95:aa:54:ed:c4:24:07:82:b3:
52:46:e1:a9:42:9f:53:16:b6:35:79:2a:79:71:6c:7a:55:27:
8f:bb:f7:d5:f9:d8:d5:b5:25:9d:c4:b7:e0:ad:fb:4e:3c:f6:
3b:f5:fa:dc:c6:d6:2d:60:35:ad:e7:79:11:a8:7b:3d:c7:61:
d4:f8:ce:f6:2f:e4:9c:ef:5b:79:1f:98:9f:74:8d:5c:14:74:
5e:64:6e:27:eb:b2:5c:67:00:44:11:92:78:e6:3a:9d:3b:56:
b8:61:aa:c3:d3:60:44:3b:31:be:d5:0a:5d:ca:69:7a:e9:a6:
a7:3a:77:f1:14:78:d6:08:eb:ba:49:c3:48:44:1e:20:bd:cb:
3b:88:ad:02:f9:77:14:96:93:db:88:97:4a:ad:86:ab:8e:c5:
77:01:a5:b2:ff:51:bf:62:ff:b7:5a:68:58:1f:63:b8:48:81:
77:d5:95:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:50:48 2026 by rpki-client