Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: Ft4CvHtr3X/gjoQyGHCCFfvQSEd/zlNGlx9xicdyXhs=
Subject key identifier: AA:A9:FD:03:82:41:FB:14:DB:B9:87:A9:00:8F:FF:7E:DD:D2:41:AD
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 019F92119BAAC603DE4C5FE88AE4303F8CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 19D3
Signing time: Fri 24 Jul 2026 03:00:55 +0000
Manifest this update: Fri 24 Jul 2026 03:00:55 +0000
Manifest next update: Sat 25 Jul 2026 03:00:55 +0000
Files and hashes: 1: A9RfQpBK4Lmi6Tmx0CejQJ3i_6g.roa (hash: /ml6WX65AwyNhLXMSn8MV5ORhWu+aykCZ+qTwwwxX9g=)
2: Uxztf7U023GXGEUScmTqEO_gfGo.roa (hash: gGrsr7XyuRi6jd4l0HrWabkhCAVylFI6zYe23gYxDXw=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: KNciUj46+evU+CUAnV9Ps2TEMCUVWTLQcJqgnQXOZyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:9b:aa:c6:03:de:4c:5f:e8:8a:e4:30:3f:8c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Jul 24 03:00:55 2026 GMT
Not After : Jul 25 03:00:55 2026 GMT
Subject: CN=aaa9fd038241fb14dbb987a9008fff7eddd241ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:d0:b0:46:51:99:92:b4:35:d2:9a:65:9b:
86:69:23:17:93:87:bb:64:96:0f:bd:5b:7d:51:c2:
7d:4b:db:18:63:96:c7:83:03:fa:97:69:0f:69:24:
db:71:18:b1:97:ab:4f:b9:3d:45:c8:9b:d3:94:b1:
7b:10:76:6b:8a:44:45:3e:d2:8e:e9:54:59:74:d1:
05:1a:eb:52:63:2b:97:a1:cf:76:17:ba:48:1a:35:
3f:80:ef:8b:6a:bd:c8:85:c9:b9:71:f0:c7:df:2c:
a6:53:fc:ad:30:67:c9:bb:c9:2a:36:5c:ed:41:2a:
60:73:fb:00:1a:5d:d0:87:3c:ad:c8:04:d7:6a:d7:
c5:96:46:0b:5b:24:e0:e2:8f:10:1e:95:b1:f8:48:
86:53:26:9e:e2:71:ba:62:89:3d:fd:9e:1c:84:de:
74:ab:77:e9:99:3e:6e:25:cd:1b:e2:1b:76:52:1f:
29:f7:f5:14:47:e6:a7:68:2b:24:4b:d9:ac:87:0a:
bc:1d:81:76:ba:51:bb:9c:65:23:6f:05:f4:1a:f3:
5b:5b:fe:71:24:51:52:e7:3d:3d:ad:4a:09:7d:34:
67:a4:89:41:4c:cd:be:b0:a6:f8:8b:4a:1c:84:ce:
2f:6c:a0:63:cb:9c:01:81:5e:07:85:78:fb:c6:c4:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A9:FD:03:82:41:FB:14:DB:B9:87:A9:00:8F:FF:7E:DD:D2:41:AD
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ee:9e:a3:96:c4:da:1b:70:0c:e0:60:6f:d7:41:b4:40:14:
9d:0e:18:42:c4:27:2a:70:70:74:50:4b:df:ad:56:ee:f5:b1:
73:e7:46:c2:26:94:61:a1:05:2a:7d:9a:1a:bb:73:ba:17:80:
13:ef:d6:4c:ac:f5:dc:98:4b:53:fd:f7:ea:8c:c4:58:75:af:
ef:0c:f3:90:6e:b4:b3:74:91:af:09:57:24:1b:a0:3c:c4:b2:
41:27:3d:be:43:91:11:12:51:6a:f9:28:8b:ce:13:c4:ee:66:
9a:91:ad:78:70:d2:fc:5e:77:c9:aa:44:12:25:8f:6d:52:89:
62:df:88:81:a0:fc:5b:28:39:40:26:d4:80:e7:55:2f:cc:ca:
76:44:77:69:8d:c4:68:f9:32:13:bc:bb:c9:43:da:98:67:8d:
7b:ad:96:e3:4e:02:6f:db:f8:70:d2:1c:88:1a:b9:70:42:b0:
10:f4:4f:ea:d8:46:e2:42:16:e2:7f:be:09:6f:20:dd:0e:ac:
a4:84:17:4f:53:af:33:46:9f:a0:c0:c4:d4:f6:05:e4:15:9e:
10:c9:80:ea:6c:af:0e:61:ab:b5:7d:fd:67:4c:11:19:da:83:
16:c2:6a:e1:87:8a:01:85:b6:94:d3:98:a9:37:c3:11:73:3f:
dc:37:f4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:49 2026 by rpki-client