Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: 6mg4r9nRvn3MP4Z9oqBW1xsMe/Yu0+aTLDHtdn/a4Hk=
Subject key identifier: E3:70:42:73:CF:22:8F:30:36:BC:1D:84:15:FB:4A:D1:83:19:A5:55
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 019F95121347F6C029A862E1B27AA9C2212D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 17:00:17 +0000
Manifest this update: Fri 24 Jul 2026 17:00:17 +0000
Manifest next update: Sat 25 Jul 2026 17:00:17 +0000
Files and hashes: 1: 1iRbLYf4C0y3oJ3-4xIANjl72wA.roa (hash: UG6S1kmkOsd5y0L7phKRaWuOG6F5o7BKD1/4AyWvM5A=)
2: JjyvVDVovIRDvh2WAPN4qcYKbB8.roa (hash: YWVGU0nc40f+duH6QOCC8OFDRM3GdOHIxFuAUo2EzwY=)
3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: VtCCqwTADGg10tQDgznZKa/g6VEjT812K6bhgHTMzaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:13:47:f6:c0:29:a8:62:e1:b2:7a:a9:c2:21:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Jul 24 17:00:17 2026 GMT
Not After : Jul 25 17:00:17 2026 GMT
Subject: CN=e3704273cf228f3036bc1d8415fb4ad18319a555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:ed:6e:2d:de:cf:75:40:59:99:a2:5c:45:
df:02:23:e1:32:dc:23:e5:6e:b8:03:b9:5d:24:d6:
70:c9:88:6a:c0:1e:06:81:53:c5:9e:37:73:78:a1:
ef:f0:ab:dd:4b:5f:56:23:38:7a:ce:eb:d3:f4:3b:
af:ac:6a:3f:e8:d1:15:7b:20:99:0a:6e:3d:1a:e8:
28:ce:f4:a9:ae:ed:fd:23:78:cc:1e:5d:cd:b2:14:
aa:06:f6:16:eb:39:8d:d0:e9:b8:41:89:e9:fc:8e:
eb:1b:11:21:b6:54:fb:4c:52:26:a1:e3:f2:8e:0c:
c5:d0:37:3d:6d:e9:75:24:00:ea:a6:57:95:7f:ff:
83:f8:2c:37:f9:ac:f4:71:14:09:16:2d:2b:89:97:
b0:30:db:f6:4e:7c:fd:86:e0:98:37:49:6a:ff:f8:
fd:0d:2f:dc:ae:49:50:77:a4:9c:52:3a:4b:ab:3f:
56:51:37:7d:b4:53:ac:f5:2b:5f:6b:a0:8d:9c:38:
45:2f:32:e5:ad:ed:f9:77:fe:59:ac:3d:c0:bb:4e:
b6:f2:bb:05:19:00:5a:fa:ff:a9:03:b3:77:71:05:
7b:f2:f7:94:16:08:3a:f9:ae:f4:f2:2c:b1:75:d9:
86:5e:90:bd:2a:97:7a:97:53:9d:6e:bf:cc:30:2a:
83:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:70:42:73:CF:22:8F:30:36:BC:1D:84:15:FB:4A:D1:83:19:A5:55
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:38:73:94:ed:e9:16:54:e8:67:f7:e2:e1:fd:d1:19:2f:42:
21:e8:22:3f:66:ff:0c:e7:3c:cc:b7:91:cd:7b:f0:d9:93:2f:
e3:23:cc:5a:92:c7:55:92:b3:29:f6:ba:c7:c0:61:ec:ad:6c:
a7:72:24:57:23:d6:a1:13:2b:ec:a2:4b:9e:d6:15:18:a9:5f:
f3:50:e7:6d:29:b7:df:60:61:ce:91:cc:a5:d7:b9:cf:fa:c0:
32:02:ee:cc:53:19:f5:27:ff:b6:96:fa:6c:8c:6a:30:5d:34:
a4:b9:9d:ea:7d:9b:7e:50:c8:19:c9:c8:b6:7c:e4:a3:ab:5d:
6b:05:2b:7a:63:1f:f5:c5:ae:23:26:e0:48:9d:62:66:c9:4a:
0d:70:cd:2f:fb:30:89:e7:c8:f7:81:ca:7e:41:6c:05:d6:90:
c9:d0:77:d0:18:fe:c4:af:fc:8e:6f:1b:5e:60:16:e7:81:6a:
30:ca:78:34:86:3f:89:cb:fa:a2:f2:8e:30:7b:4a:9e:30:7c:
8a:b7:1e:e9:81:65:4f:b6:15:68:ce:2c:f4:03:17:bc:eb:50:
5e:3a:b9:75:4f:20:f5:0f:1f:bd:ff:1e:05:62:e7:20:21:e6:
97:3f:18:13:88:67:9c:92:50:4d:d6:6f:a2:d5:07:02:14:14:
36:64:c1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:50 2026 by rpki-client