Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: 4AyxZ1/RQQAKe0uf8ID9Z3dpw9y+d7QIv8oDM2f748o=
Subject key identifier: C7:3F:7E:F9:B5:DF:65:93:FE:03:A3:62:A2:9C:32:77:0C:9C:C1:2A
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 019F9090FDC0A82923FE932BE565F7E29C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 20:00:48 +0000
Manifest this update: Thu 23 Jul 2026 20:00:48 +0000
Manifest next update: Fri 24 Jul 2026 20:00:48 +0000
Files and hashes: 1: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (hash: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs=)
2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: 1KQxLm1dYybdLSqzQuFG3EIuChLzWQkDwaG4VSRDxlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:fd:c0:a8:29:23:fe:93:2b:e5:65:f7:e2:9c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Jul 23 20:00:48 2026 GMT
Not After : Jul 24 20:00:48 2026 GMT
Subject: CN=c73f7ef9b5df6593fe03a362a29c32770c9cc12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:6b:26:08:f7:fb:eb:72:40:7a:17:e2:61:
3b:c4:7f:20:53:b5:4a:56:04:b9:fc:ea:af:8f:60:
fd:15:6f:88:46:df:19:46:9b:b9:4f:b8:cd:37:6f:
67:02:52:41:a8:dd:31:f3:28:20:f8:fa:a0:79:d3:
c7:52:0a:f5:26:47:53:4d:25:1c:33:d8:5b:2d:15:
7c:39:38:2b:79:d0:c8:e1:7e:96:20:16:7c:1a:7b:
73:30:f4:a5:47:17:b2:55:39:a1:24:0d:15:c1:fe:
dc:2b:c4:1b:e0:a4:2c:a9:82:2a:e4:5f:cb:84:e5:
a9:ef:63:3d:1d:e9:48:b8:e2:b2:80:53:0b:28:fd:
89:f8:9f:88:4b:77:60:4b:0e:1d:36:e4:48:cf:df:
f3:b4:c2:93:22:1e:60:4f:2c:66:b4:9c:ee:23:ae:
40:7b:6a:b5:a5:a1:43:b5:49:d8:39:5a:7d:5f:2a:
36:bf:aa:6e:ff:38:f0:53:fd:f5:a3:a9:51:f3:85:
26:7a:63:25:9d:59:d4:f4:d5:a3:83:52:d1:49:25:
3a:a7:b1:d2:3b:18:1c:71:4e:67:15:25:ec:96:86:
f0:3d:62:36:f7:8b:21:10:95:7e:1b:d8:bf:93:23:
5a:65:8b:10:c2:57:20:67:5c:14:2b:61:d8:85:4e:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3F:7E:F9:B5:DF:65:93:FE:03:A3:62:A2:9C:32:77:0C:9C:C1:2A
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:36:bd:90:20:78:9b:d5:23:c6:3c:bd:bf:b1:ce:84:80:f2:
c9:62:dc:fc:fd:08:36:67:42:38:04:54:7e:3a:e7:57:31:17:
8a:49:1f:0f:f5:f5:bb:3a:aa:d3:9e:1f:54:36:e7:e6:a0:7e:
72:b0:95:60:28:35:5a:5a:df:05:4f:1c:f0:5d:3d:69:b2:b1:
8d:d3:6d:73:6a:21:78:8c:d7:f1:2b:9e:94:4b:6d:62:8e:1f:
e1:fa:83:9b:58:8d:68:7d:a7:89:83:2e:40:7e:56:4b:47:ae:
e7:2f:a8:e8:51:8e:30:04:fa:79:5a:dd:dd:26:43:61:fb:9c:
82:12:a6:39:31:d9:65:46:b6:48:a6:ba:3e:13:82:21:02:30:
93:59:ee:23:a8:f3:ad:fc:de:1a:ff:5a:6f:ee:c4:82:0d:72:
c1:df:2f:c7:89:dd:e4:04:4e:8b:a2:39:94:5b:bd:37:dc:36:
a8:0f:fa:d3:94:05:87:c7:e8:33:f5:00:3a:47:ca:1f:80:ac:
d4:5a:65:6d:ec:a2:9e:73:bd:f3:1a:83:83:22:3c:af:ca:43:
49:95:79:7b:a5:80:69:51:c4:15:40:c7:12:7b:d8:dd:0c:0a:
95:c1:1e:bd:53:a7:97:52:92:1b:cb:db:60:95:1b:01:73:ca:
b5:c7:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:22 2026 by rpki-client