Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: FTZr3XLwfgGvib3yRQZ1sdaDPupGmaGaAxhijChM5MI=
Subject key identifier: 93:A6:C7:E7:35:DE:24:AB:4C:78:6D:F2:BC:F6:17:1C:F3:10:9B:14
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 019F90C7C5C5F04087989B43D01062E29653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 1957
Signing time: Thu 23 Jul 2026 21:00:39 +0000
Manifest this update: Thu 23 Jul 2026 21:00:39 +0000
Manifest next update: Fri 24 Jul 2026 21:00:39 +0000
Files and hashes: 1: RI1PUJj0Q_MD3P8uweukuXuYhlU.roa (hash: Udb4Yel6QV6x+EojTVD0SPU2vkANJh/DkSOzlaEFuOQ=)
2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: vnJhNNdV/Z6NcMMIxFl4FxNju0rM9wGyk5ez/dJ7NsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:c5:c5:f0:40:87:98:9b:43:d0:10:62:e2:96:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Jul 23 21:00:39 2026 GMT
Not After : Jul 24 21:00:39 2026 GMT
Subject: CN=93a6c7e735de24ab4c786df2bcf6171cf3109b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:68:c2:b9:f3:55:28:c2:cc:70:78:f3:0a:45:
ec:e5:09:fb:bf:5a:91:62:84:34:07:84:89:ea:a8:
43:2f:31:10:2c:91:f1:64:90:3d:f8:1c:b1:d0:61:
c9:f7:e9:84:09:17:43:3b:bd:40:a3:61:e9:13:fd:
50:01:13:e1:b9:5c:0f:b2:eb:7c:26:5c:3e:7a:ab:
69:41:7d:fd:1f:d2:56:cc:d2:ad:4f:b2:b6:98:4c:
e9:8a:fc:6c:d6:70:fd:c1:91:af:78:6f:5f:a5:81:
1a:c8:84:b8:27:78:a5:4a:a9:d9:20:ee:5b:0a:1c:
c1:f0:f4:3f:d5:38:a7:61:c2:15:60:57:78:0b:a3:
de:04:67:0f:b3:f8:31:53:56:af:30:a8:c9:75:06:
69:ad:04:8e:46:43:10:89:fb:61:4f:71:b3:45:62:
a4:79:59:cc:0e:1a:15:1d:df:53:19:0c:5a:4b:0a:
ae:63:39:00:ce:fe:51:3c:5b:2a:7f:b5:9d:e1:2f:
2e:40:2d:eb:fc:99:09:1d:15:b0:5e:14:52:22:7e:
e0:35:66:da:d0:04:c7:bf:37:cd:02:81:98:3f:7d:
14:4a:5b:f7:ff:67:12:df:c2:a2:fc:51:af:47:6d:
52:f7:24:3e:8a:05:f5:ea:f7:2b:c3:b8:70:7b:45:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A6:C7:E7:35:DE:24:AB:4C:78:6D:F2:BC:F6:17:1C:F3:10:9B:14
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:82:cf:1b:bf:94:69:86:04:e3:ef:8f:35:82:a8:68:c4:59:
1c:5b:fe:ec:11:5c:e7:b8:14:81:1a:27:4b:44:de:6d:6c:17:
c8:a0:67:b9:6e:e2:5d:4c:1c:59:c8:c1:a1:4f:a9:e8:89:3e:
85:8e:77:8f:05:93:3c:6c:b8:43:9e:62:18:35:2a:37:a4:4a:
e8:5f:11:8f:e0:39:4a:7e:65:50:f3:2e:64:c1:4d:f4:f5:23:
9e:5b:39:64:f2:29:35:ed:fb:8a:ba:06:4f:19:02:46:19:5d:
43:ab:92:65:95:02:41:76:28:e6:0c:56:cb:5b:93:36:83:47:
ac:19:df:09:d3:7d:cc:9c:c2:24:0b:ed:a6:54:d7:9e:84:9d:
db:a7:67:ac:53:c1:64:6e:b7:3d:60:e6:5b:fa:8c:16:4e:27:
fa:e5:94:26:64:3b:b3:f0:3d:71:7f:72:4e:0c:0b:c0:cf:27:
2c:8a:b2:44:1b:01:80:8b:a6:54:4e:62:e1:bb:30:e0:20:97:
cf:b8:63:f9:82:1a:6a:25:ba:01:b1:e0:cf:8c:c4:09:24:5e:
2c:e6:d7:90:4a:3a:b3:04:f9:d1:5e:c5:99:b5:d1:c8:c5:5d:
47:76:4e:d3:0b:bd:fb:9c:bd:72:2c:c9:5c:e9:27:cf:7d:ae:
31:4d:a8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:20 2026 by rpki-client