Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier: eH39dsI13sUMQ8KQoZK/6TNaXVccGxgaDIRTqCV/CB8=
Subject key identifier: 72:DF:D8:4D:59:D5:4A:86:F8:6C:EC:F8:AF:EB:F3:5B:99:ED:1F:1C
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 019F91A4241A11A8C61785D1D64244F9AFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number: 1014
Signing time: Fri 24 Jul 2026 01:01:21 +0000
Manifest this update: Fri 24 Jul 2026 01:01:21 +0000
Manifest next update: Sat 25 Jul 2026 01:01:21 +0000
Files and hashes: 1: NyYE3UHHBaBD3ue76kpyUryE20o.roa (hash: FScu0FQsDxlcDVgtQ7BPeCNgRoM/ijvtnVWyLkhXy8k=)
2: PAX6Nj0vLW8qBLqlfqAOyETsCg8.roa (hash: DHoLARGZOB2XURSgRaiKkNOzlOwLsIfl2+CfGPfPwfU=)
3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: B+te/GufSrzv82bO41aRY+i3ceUCMhPT9j2uRgn8s2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:24:1a:11:a8:c6:17:85:d1:d6:42:44:f9:af:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: Jul 24 01:01:21 2026 GMT
Not After : Jul 25 01:01:21 2026 GMT
Subject: CN=72dfd84d59d54a86f86cecf8afebf35b99ed1f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:59:94:6a:48:60:a1:2f:c1:a5:15:63:07:
3e:0a:ca:c6:d2:1d:8c:6c:d1:99:6a:a1:81:eb:bb:
9a:40:9a:82:b9:f1:48:db:35:48:08:f0:fa:cc:76:
bb:2f:a7:9e:55:7e:2c:62:ac:5a:d0:97:0c:80:cc:
29:ad:fd:e2:4a:49:d7:cf:c1:e0:02:e9:eb:b0:5c:
43:80:bc:5c:e0:1b:66:cd:1a:62:b3:5d:63:ec:f6:
22:5c:2e:75:53:42:1f:c5:23:8e:c2:c2:69:51:ed:
e2:23:a4:99:2c:4b:d3:0d:01:f9:f2:c5:a9:97:b8:
c9:93:f7:30:4f:6c:d3:99:02:95:7b:83:c4:d3:79:
5c:a0:85:c9:f0:16:63:52:1d:c6:39:32:98:56:7b:
5e:c8:86:70:25:0c:e1:6f:96:37:80:0d:97:b4:fd:
7d:fc:22:22:e8:74:f0:2d:e6:c6:ed:25:2c:92:d5:
de:4d:47:43:b1:f0:82:b0:4d:12:b1:0d:56:ac:9b:
45:aa:34:99:8b:ce:a2:63:58:dd:b0:fa:2d:11:7e:
a4:b0:49:7c:48:5f:3a:3f:6b:74:71:0d:f6:14:84:
8b:5b:98:76:52:55:f3:a0:e4:3a:d5:1d:a8:d5:21:
28:17:23:78:a5:cd:10:09:eb:87:b4:37:6b:38:e5:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DF:D8:4D:59:D5:4A:86:F8:6C:EC:F8:AF:EB:F3:5B:99:ED:1F:1C
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:02:e9:09:ed:40:9f:3f:11:6d:b1:06:df:25:50:92:7a:69:
d9:58:4f:01:b5:7a:a8:d1:90:c9:40:8a:c7:93:de:c1:85:f4:
c2:09:c8:67:d7:07:66:22:fc:5e:7d:5c:07:59:01:c4:25:a1:
c4:eb:0a:02:16:c4:54:35:fd:6e:ed:3d:07:69:42:d9:68:9f:
f3:15:c4:8e:e5:59:d8:c2:b6:e8:10:6e:3d:be:37:2e:e9:cc:
58:a8:97:62:ae:b2:e6:38:07:c6:2b:70:1f:3f:b1:12:99:01:
a7:d5:46:b6:e6:b8:24:3f:4b:16:7d:6d:2d:77:c9:61:ed:92:
03:85:a3:75:a5:41:02:36:a7:2f:b8:a4:54:95:41:80:19:6e:
37:bc:06:db:00:65:9f:89:4d:1e:ed:8c:95:24:61:13:b2:7e:
f0:1f:dc:75:26:5c:6d:31:a2:16:fe:07:b9:65:d5:0a:be:ec:
22:ad:d6:08:f3:98:34:97:d8:24:f4:5d:1e:6d:10:d9:f8:d2:
26:49:32:9d:cb:86:05:8d:3d:ff:1f:cb:9b:69:25:7c:99:5c:
74:e9:97:9e:3d:8c:94:f6:24:50:28:e2:93:27:57:4b:bc:34:
f9:da:af:a0:24:1e:44:8c:1f:99:7f:36:55:e1:5c:89:5e:e8:
f7:0b:9a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:30 2026 by rpki-client