Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
File: p4kEQNrxw6w4dz6FIVES90twYjI.mft (raw, json)
Hash identifier: PKn/edmp/xx2OkefJ3HQp8IMcVc19Xvcne2Fsncgta0=
Subject key identifier: F2:00:E9:DC:F8:8C:73:08:86:EF:9A:C1:B6:1D:27:BB:7A:B5:E7:F3
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 019F92117BECE63BF59F6602C3832D1837E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
Manifest number: 017F
Signing time: Fri 24 Jul 2026 03:00:47 +0000
Manifest this update: Fri 24 Jul 2026 03:00:47 +0000
Manifest next update: Sat 25 Jul 2026 03:00:47 +0000
Files and hashes: 1: TgSCC5KwM7742j8mJJTq-gFMwHE.roa (hash: +wOhWzlwLpRhzaq75+/ZOhGg3xC9QggYBfkia2ut1YM=)
2: jcRzJUg7IUVEUlfjHqL1NEbulJY.roa (hash: 043yV8J6dMsTpPpYvQ/xWssybIOO8FTRI8kOXFFcDXA=)
3: p4kEQNrxw6w4dz6FIVES90twYjI.crl (hash: 87p/xMP6hk1+qUGd/C2Tr0uX797Cpo3zscKeC9QyNr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:7b:ec:e6:3b:f5:9f:66:02:c3:83:2d:18:37:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Jul 24 03:00:47 2026 GMT
Not After : Jul 25 03:00:47 2026 GMT
Subject: CN=f200e9dcf88c730886ef9ac1b61d27bb7ab5e7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:d0:63:4a:b3:aa:20:1e:68:b6:7f:a2:aa:
37:f0:6c:db:5b:8d:d9:50:d9:4a:6b:3a:f4:92:fe:
d6:62:51:ab:45:ba:05:2d:9e:04:ec:54:82:73:72:
4f:b1:74:3a:b4:26:05:c0:37:86:93:57:11:3e:08:
00:aa:2b:9a:ee:98:f9:48:b5:d0:67:87:96:89:1c:
c6:a8:66:31:1f:a5:60:85:5e:7e:6b:a0:1f:ed:f9:
d5:ab:84:ae:22:22:90:e8:01:ef:15:3b:37:da:e2:
06:15:45:aa:13:10:f1:37:77:74:25:1b:8b:6a:01:
75:29:df:fe:84:1b:31:29:f2:c1:16:9b:03:9f:00:
90:f2:00:e7:94:72:b2:ac:85:5a:c5:34:e9:b1:e3:
02:c0:b1:f4:f4:b6:ac:57:72:68:93:45:ef:aa:c8:
e1:ec:51:3e:eb:66:b0:94:f1:f8:ff:4e:3a:02:03:
0e:07:c5:82:d9:f0:ba:51:29:eb:91:79:ea:4d:ca:
6b:cb:74:eb:13:34:c3:5e:38:d5:64:b5:b4:f4:08:
9d:97:d8:26:03:23:42:e1:76:82:6b:d8:a9:7b:3f:
9e:9b:bd:95:af:27:c9:60:20:97:a2:d9:ca:9a:6c:
45:b0:38:82:15:a3:da:92:03:39:28:59:97:ab:88:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:00:E9:DC:F8:8C:73:08:86:EF:9A:C1:B6:1D:27:BB:7A:B5:E7:F3
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:81:7b:19:86:ca:37:0b:8f:01:a9:a5:1b:81:c3:8f:2f:c9:
d7:f2:f4:71:34:c1:14:21:bc:3a:bb:cc:89:df:2b:c3:46:d3:
23:20:f1:b4:77:e8:80:13:9c:18:85:5e:3d:bb:ca:4c:a7:0d:
8c:e3:50:5d:a7:07:a1:7a:e6:c4:a7:7d:60:d2:5c:82:b2:db:
7b:be:04:b1:01:b3:8a:46:0e:36:48:36:bb:9b:29:ec:34:71:
c6:b0:7a:a7:e8:23:fa:6f:76:37:89:f1:b9:75:a3:80:40:0f:
f6:66:ef:94:b9:bd:1a:74:84:8e:cc:1b:2b:7f:08:f0:9b:87:
b6:c1:2b:ee:d9:96:c5:28:bd:2d:25:1b:bf:bc:8d:78:df:13:
95:b4:9b:cf:90:b3:9c:cf:f8:56:fb:b8:ff:d4:12:63:bd:0e:
af:fb:e4:45:8b:58:b5:a5:ec:55:1b:24:ac:3c:a5:b4:cd:3d:
0f:7b:33:e1:a0:d8:85:bc:3a:2a:ea:f3:78:19:88:42:11:2a:
19:1c:c5:ed:bc:7d:4d:12:38:2b:9b:fb:40:01:d6:53:ea:28:
b1:37:30:2d:37:49:d8:59:ac:66:f5:c9:bd:63:35:a5:da:30:
73:e2:a2:24:79:c0:b8:b7:3b:85:b9:b5:12:48:63:6d:73:61:
37:6d:11:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:21:35 2026 by rpki-client