Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
File: PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft (raw, json)
Hash identifier: qBTFve8bxRYMLzo6lSvlTovyZViRNM7KmN/YOVVh7ZQ=
Subject key identifier: 55:55:60:D3:67:F3:F0:D5:9E:58:90:33:D3:9F:CD:0C:4A:82:60:6A
Authority key identifier: 3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73
Certificate issuer: /CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773
Certificate serial: 019F94366AA2951367FC819EC51B6AB71315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
Manifest number: 0C8F
Signing time: Fri 24 Jul 2026 13:00:21 +0000
Manifest this update: Fri 24 Jul 2026 13:00:21 +0000
Manifest next update: Sat 25 Jul 2026 13:00:21 +0000
Files and hashes: 1: 0kteYDEknBDxG9W3J3cL9QhFRvc.roa (hash: 1XWojZWd6G7wDLkk3o7HBTuYxtsrR+gEZcfWZE2ZhEU=)
2: PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl (hash: 1Msf+4Nkcpo5Ge2UR2lsEQvzHMcmqRhx4miIgc6MoVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:6a:a2:95:13:67:fc:81:9e:c5:1b:6a:b7:13:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773
Validity
Not Before: Jul 24 13:00:21 2026 GMT
Not After : Jul 25 13:00:21 2026 GMT
Subject: CN=555560d367f3f0d59e589033d39fcd0c4a82606a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:47:c3:e1:ed:6f:62:c5:90:1d:75:81:ef:
65:3f:71:5b:67:0a:c6:91:2d:99:4a:c6:15:1d:0b:
0d:30:fe:be:f5:bf:0a:2a:c9:35:66:7a:52:e7:4d:
c9:61:aa:49:4d:89:7d:4b:87:c1:1b:3d:7e:50:09:
af:44:d2:e0:4d:1e:9f:60:6a:28:32:d1:97:2c:ff:
e2:1a:0d:e2:0b:b2:ad:b9:4e:01:f1:fb:10:44:d7:
f9:10:a3:a2:b7:b6:ac:ad:aa:ac:7a:a0:7d:3e:d8:
8b:c4:ce:56:69:3d:c5:0f:98:15:50:31:42:9c:59:
84:c4:f6:65:76:f6:14:f8:74:5a:71:0a:1d:ad:e6:
68:a1:1f:3b:5f:26:92:05:ad:92:4d:e6:e0:4b:58:
33:e8:36:c9:cf:99:20:ea:4b:e1:02:5d:18:62:9c:
5f:88:41:83:49:2e:de:a4:17:36:b9:61:66:23:8d:
d2:fe:68:03:96:a2:80:b5:dc:b2:e5:62:e5:2c:24:
32:bf:26:8a:40:03:c8:18:4f:0f:d5:1e:d3:14:94:
ca:a3:73:d4:1a:32:61:3e:9e:e9:f8:d6:94:01:70:
5a:6b:a1:03:af:70:89:6a:bb:5a:e8:d7:ec:e2:6b:
9e:d6:80:ab:6e:97:68:b3:20:66:14:06:19:43:6a:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:55:60:D3:67:F3:F0:D5:9E:58:90:33:D3:9F:CD:0C:4A:82:60:6A
X509v3 Authority Key Identifier:
keyid:3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1e:3f:b7:b7:11:b7:64:ff:30:d6:5a:b0:16:cd:da:4e:fb:
ab:0b:89:34:b6:d5:0c:c6:5d:08:b7:5f:2a:29:ac:61:b6:76:
38:9f:81:3f:1f:81:4a:2a:d1:5b:f6:23:46:3b:39:75:a2:82:
a6:66:4a:07:5e:75:80:94:2b:0e:b7:f7:42:65:74:ec:c6:2d:
93:7a:7c:c4:1a:37:14:d8:91:76:63:db:07:d2:b7:f1:73:54:
9a:02:77:bf:7c:a5:1a:32:55:1c:bf:08:99:6c:df:f5:0f:e4:
a9:5e:ff:0a:ea:3a:3c:94:f6:6f:2b:3d:1c:cb:cf:1f:59:11:
ea:99:76:76:7c:68:0d:02:e2:5b:64:a2:15:2a:54:ab:3f:68:
0f:9b:18:9e:94:36:bf:69:aa:3e:fe:2f:93:15:b9:c9:0b:31:
bc:2f:03:9f:ed:71:4f:1e:0b:fc:82:90:f6:65:8c:f2:03:60:
52:99:8c:13:8a:e9:62:e4:1b:6e:df:ab:55:0e:cc:9d:ba:c5:
d4:48:4c:35:6f:92:d5:7e:65:1c:24:83:cf:a9:35:db:e9:8e:
5c:6a:72:83:2f:50:03:7b:f8:8c:f2:e5:e2:6b:af:78:3b:4b:
4c:72:ae:ec:09:e1:fc:15:81:2c:38:46:4b:22:f7:7a:dd:7d:
75:c7:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:37:15 2026 by rpki-client