Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File: Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier: MXG92Wj/GLpADj1E9YofbUbb31MEUTRIgFzmyNfrh/g=
Subject key identifier: AF:AB:CA:45:5A:4E:82:5C:B7:5A:D5:5F:62:E6:85:2F:C9:0F:B8:B2
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer: /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial: 019F9211B9DF129AC72045FDF155543C0144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number: 165C
Signing time: Fri 24 Jul 2026 03:01:02 +0000
Manifest this update: Fri 24 Jul 2026 03:01:02 +0000
Manifest next update: Sat 25 Jul 2026 03:01:02 +0000
Files and hashes: 1: N0lWMYy9L6tUgt5C_ALrdVgjFpM.roa (hash: 3TxHIvizHgvT9zapL1jqZMumyRmsqmWLMCRlhTI/E5A=)
2: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: ml4fEN/T3dnzzH8XLX7svLrG6+zVtugsVWY+9LMhZxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:b9:df:12:9a:c7:20:45:fd:f1:55:54:3c:01:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
Validity
Not Before: Jul 24 03:01:02 2026 GMT
Not After : Jul 25 03:01:02 2026 GMT
Subject: CN=afabca455a4e825cb75ad55f62e6852fc90fb8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:b7:70:01:67:56:66:c7:4b:e1:78:86:4c:
8a:b0:ac:80:f8:53:60:39:6e:93:6a:90:80:00:10:
29:19:23:cb:fb:48:35:d9:00:d0:8c:02:28:2a:1e:
08:7f:b0:15:8f:89:f3:db:e7:60:19:08:c4:92:f3:
a0:21:3f:d6:b3:bf:cd:da:da:39:73:0d:e3:6d:62:
01:6e:9b:fc:16:c5:5a:09:7f:80:f2:88:95:27:12:
42:3a:bc:68:e1:d0:97:9e:47:59:ae:56:c5:d0:01:
f8:37:cb:c3:f2:c7:b4:24:6a:bd:b5:f6:43:3c:8c:
13:9f:07:fb:09:a9:b8:d5:83:0e:9e:69:3f:f7:2e:
3d:5b:c4:23:02:0d:cf:c1:83:d8:3e:84:9e:cf:45:
2b:e3:30:39:eb:7a:a5:d3:14:23:56:10:67:0d:13:
d2:bc:19:34:dd:1a:c1:db:e7:eb:6c:43:39:39:50:
6a:2c:7c:de:73:d4:72:bf:b5:f4:12:20:0b:d9:c6:
e5:cd:a5:d2:1c:66:51:1d:b7:81:36:10:b4:84:ee:
a3:81:4f:b3:ba:b5:2c:68:88:52:fc:d1:ee:47:b2:
c1:c6:b7:78:c4:70:44:0d:9f:d4:4c:c5:ed:30:46:
95:e7:76:a6:6a:dd:aa:e0:fa:63:c5:25:89:84:47:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AB:CA:45:5A:4E:82:5C:B7:5A:D5:5F:62:E6:85:2F:C9:0F:B8:B2
X509v3 Authority Key Identifier:
keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9d:73:25:24:e2:85:1f:eb:df:e3:66:2f:d6:c4:81:50:1b:
75:19:60:18:a6:5e:4a:39:d7:13:2c:22:78:88:27:c0:73:3c:
96:d7:4e:ed:03:1e:a2:73:b6:05:46:3c:65:47:0a:96:d1:1f:
96:94:72:d6:54:c8:9f:16:db:eb:6c:83:10:89:f7:c8:2a:96:
b7:6e:5f:54:c4:8f:cb:46:49:51:49:a7:dc:7a:87:86:23:cb:
a4:82:2d:1c:fd:88:ec:1f:5f:36:c8:fc:a0:17:51:34:a0:47:
80:87:ab:78:aa:ae:8d:f3:01:0b:17:27:8f:34:c9:ea:60:d5:
bf:98:27:49:1f:82:77:4d:65:67:0e:5b:27:ae:a3:1f:87:24:
35:85:1d:97:b0:ff:40:b9:13:91:9e:ac:06:43:f0:b7:f8:77:
4a:c9:bd:a4:cb:bc:ea:95:1f:da:62:9d:0f:6d:d0:60:5d:e5:
17:8d:52:77:44:94:7f:df:18:a7:5a:69:55:21:35:72:80:e5:
8d:ec:9d:55:83:75:03:b5:79:70:57:ff:28:30:8d:58:dd:7b:
90:23:b2:8e:14:f3:a6:61:cb:ec:fb:fe:14:7a:88:14:16:1d:
5c:83:f6:96:d2:8c:be:98:b6:1f:b9:62:a7:78:ea:f6:63:6b:
36:cc:00:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:46 2026 by rpki-client