
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: FsjwFl9MgBwrD3C7J1G35YADt92ppjHnMwyzHHTrzLI=
Subject key identifier: 0B:BB:08:45:32:B4:C5:A7:9E:93:2D:F5:58:5C:CB:C6:3C:EB:19:45
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019F9135D053FB9D1FDB5F873D3F53A8CA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 1407
Signing time: Thu 23 Jul 2026 23:00:50 +0000
Manifest this update: Thu 23 Jul 2026 23:00:50 +0000
Manifest next update: Fri 24 Jul 2026 23:00:50 +0000
Files and hashes: 1: Owu-o7JvEybmXtpQNjtKXjhH9ug.roa (hash: 89sGeUxvhpVypElkHwSDvmrZnRJHBtaKeL9yMz7nC6U=)
2: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: upNceXy62qtGUzE0W0YJH7WTJU8lVas5nRT84H1J/zg=)
3: _b_jh41DtvYlyJbVt2vmUxy_03c.roa (hash: Y4f7kKKKelGhsZykUm6x2Et6p6M+4yMQNJ8fkfC21Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:d0:53:fb:9d:1f:db:5f:87:3d:3f:53:a8:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Jul 23 23:00:50 2026 GMT
Not After : Jul 24 23:00:50 2026 GMT
Subject: CN=0bbb084532b4c5a79e932df5585ccbc63ceb1945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:b0:9a:2b:73:d3:4c:30:e1:84:7b:9f:ea:
7b:91:13:27:22:ea:28:77:ea:ba:d0:13:c4:20:1b:
df:5e:05:3e:54:98:b1:3e:87:bf:e0:08:d1:17:51:
1c:c5:03:0d:8c:d5:8d:22:c5:72:cf:5a:22:8c:25:
f2:77:be:b3:56:be:03:0d:08:1e:03:ca:49:1f:b4:
95:8b:fa:08:47:5b:d3:78:c8:63:a9:3f:0a:ca:49:
da:ae:2a:46:4b:91:1a:b7:61:7c:ea:7d:29:ba:79:
e2:92:a7:be:b2:fe:8a:e0:6b:33:d2:d4:94:7c:1f:
f3:bc:dd:3b:50:bf:28:8e:69:e3:9f:e3:6c:74:fa:
54:d1:2e:d7:fc:8e:00:da:25:a8:52:e0:7b:05:69:
53:e3:6c:f8:50:ff:dd:76:39:a4:43:4e:cf:88:f5:
ca:76:06:d1:75:3d:f0:7a:ca:33:1f:89:3c:b5:cb:
fa:d2:ed:8f:b6:de:22:fa:40:0f:f8:3d:21:63:e6:
8a:48:bd:57:f2:21:27:a6:8b:ed:8c:c6:09:b5:83:
c2:6d:32:f3:34:dd:61:7f:a9:85:68:d0:df:f5:19:
d5:2d:05:94:2f:00:f1:c4:29:80:e4:35:ca:58:a8:
68:19:f3:53:d8:92:1b:a8:12:8a:3b:df:4b:f1:70:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BB:08:45:32:B4:C5:A7:9E:93:2D:F5:58:5C:CB:C6:3C:EB:19:45
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f2:a7:e2:9e:98:f5:d0:01:2f:f5:2b:c0:b6:71:97:2c:49:
d5:eb:cd:f0:b9:6d:b0:5b:20:c2:77:ad:84:a6:04:18:36:02:
f9:09:a3:6f:f5:5f:18:2f:ae:af:81:b9:1f:20:71:ea:f2:0c:
fb:eb:61:be:ef:95:cd:dd:92:47:92:b4:27:5a:20:b2:84:00:
4e:29:b5:21:6b:95:10:92:53:05:58:45:bc:05:c3:ed:5b:9c:
95:22:6b:8b:d9:0a:ff:b3:d9:7d:ce:53:4b:38:8e:db:c1:9c:
d9:43:28:f4:1c:f2:bd:9b:28:3f:b0:1b:74:e3:6b:91:9e:d5:
3d:f3:ae:12:47:a6:a9:08:09:ba:60:33:d2:89:55:bb:7f:f8:
bd:67:13:42:0e:2c:f1:7c:95:ca:81:34:18:84:cd:b6:3e:f1:
d6:f0:d5:a5:91:b2:76:bc:f5:83:e7:6a:c0:5a:ae:4a:0e:a5:
2a:2b:6b:53:d0:a8:98:5a:57:c9:2b:74:05:34:8e:f8:65:77:
bb:f6:d7:86:70:4d:aa:0e:61:a8:1e:ba:d3:95:ee:fd:96:cb:
07:0b:0d:f4:a5:64:bf:8a:b1:b0:2d:a7:26:8c:eb:6b:d2:0c:
90:d7:35:6f:cc:d5:9b:b0:34:3d:e3:f6:53:65:b9:b6:86:de:
ac:fc:05:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:47:06 2026 by rpki-client