
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File: Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier: /QEPCd7r76SYYVeh3qtm/BsekRXHohyA3pAY2QvWj0I=
Subject key identifier: 4B:49:4A:C9:8C:55:C2:DB:11:AE:E1:05:0E:CE:CB:97:76:8E:DA:45
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer: /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial: 019E1D596917DF85766AB77A69EEC1FC30C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number: 159B
Signing time: Tue 12 May 2026 18:00:59 +0000
Manifest this update: Tue 12 May 2026 18:00:59 +0000
Manifest next update: Wed 13 May 2026 18:00:59 +0000
Files and hashes: 1: N0lWMYy9L6tUgt5C_ALrdVgjFpM.roa (hash: 3TxHIvizHgvT9zapL1jqZMumyRmsqmWLMCRlhTI/E5A=)
2: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: OGqIIyS1UUP2YTlMhUElxH098z62foyjTZzKAtp0Bco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:69:17:df:85:76:6a:b7:7a:69:ee:c1:fc:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
Validity
Not Before: May 12 18:00:59 2026 GMT
Not After : May 13 18:00:59 2026 GMT
Subject: CN=4b494ac98c55c2db11aee1050ececb97768eda45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:55:8c:52:1a:7e:95:0e:c9:d5:3b:00:2a:
5b:f7:45:6e:d6:1e:3a:e6:9c:99:25:75:46:9e:3e:
00:dd:ca:fd:3c:c4:54:41:cd:71:bb:d9:42:b1:91:
c5:3b:e7:f4:7e:dd:2f:7d:73:34:c4:ac:3e:84:b6:
fd:96:db:ed:68:c9:4b:ab:89:4d:ff:7d:0a:db:e0:
8e:32:07:20:19:e2:b3:e2:c5:95:65:5e:ab:75:4f:
46:af:f5:68:8f:d9:bc:d1:76:ad:8d:8b:b7:6a:36:
0d:6f:f1:2b:5f:41:ef:82:6d:d2:6e:73:92:a2:96:
e4:7e:2b:2e:ce:eb:08:24:0a:25:d5:f9:fc:88:a1:
a7:71:29:dc:04:db:13:bf:7c:44:ff:52:3f:0c:cc:
24:82:bf:45:b0:cb:9d:1a:9d:d6:d1:7d:78:54:5f:
1f:7d:3e:b0:57:f6:6f:3e:cf:2e:d4:54:b7:6a:b1:
58:11:dd:6b:91:6d:cd:a5:1e:0d:f9:d0:ea:79:de:
7e:0e:54:b7:32:2b:d8:fa:54:a0:c6:d2:f2:60:1f:
fc:7a:cd:62:ef:21:48:02:96:50:1b:5c:67:90:1e:
77:b1:7a:de:5b:86:59:91:07:0b:14:38:e3:9d:19:
60:50:d1:0f:76:7c:17:0a:95:62:cc:41:4e:aa:2f:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:49:4A:C9:8C:55:C2:DB:11:AE:E1:05:0E:CE:CB:97:76:8E:DA:45
X509v3 Authority Key Identifier:
keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ad:b2:d7:ca:bf:53:6a:ff:75:a5:ec:52:39:46:6a:74:3e:
7c:3a:e8:1d:d6:9f:30:34:06:a1:ed:7c:1a:d8:8c:d2:15:8d:
eb:55:da:d0:2d:a6:57:ba:8f:fa:9a:70:48:27:56:65:34:31:
70:30:c0:fb:41:71:e2:97:00:fd:94:11:27:d9:31:a1:3b:ce:
4f:c8:79:4a:29:6d:e9:c0:1a:d7:12:91:fe:34:eb:10:5d:9d:
30:c3:2c:32:fd:35:c7:7a:fd:4f:58:3e:38:f0:af:88:b7:9f:
66:b7:ee:c6:be:63:5c:09:65:cb:c9:1c:81:20:7e:39:5e:a8:
57:8f:b8:36:bd:a0:cc:79:da:0c:21:ac:c5:45:0e:23:d4:30:
df:06:a2:85:4c:0f:ba:bb:d6:3a:11:2c:34:ad:b2:5a:48:06:
2a:52:dd:7e:2e:dd:e0:41:12:ef:10:67:05:9e:4c:f6:2c:6d:
f2:e6:ee:92:fe:b0:a2:7c:51:17:42:b1:1b:66:9d:94:af:77:
78:92:b2:d2:fa:83:6b:87:9a:ea:c2:44:4d:e9:39:7b:5e:f0:
dd:b5:7e:18:c4:a2:7f:c7:fc:68:aa:35:fa:27:72:94:74:1f:
7e:7f:da:36:f1:ee:4b:39:cd:2e:c6:81:30:ac:ef:9e:4d:fc:
77:c4:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:35 2026 by rpki-client