Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File: C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier: iuOXzg/IlKevLjfdJnEbAjwUcaZvSsqdqOt53W4jo3A=
Subject key identifier: D2:FD:D6:2D:35:32:22:00:3B:32:D5:13:F6:88:E9:DA:BB:80:E6:A9
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer: /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial: 019F8F7ED5346C97AA46922B5C0FB30BD9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number: 19CE
Signing time: Thu 23 Jul 2026 15:01:21 +0000
Manifest this update: Thu 23 Jul 2026 15:01:21 +0000
Manifest next update: Fri 24 Jul 2026 15:01:21 +0000
Files and hashes: 1: Booj1ASQ-cXKqkh-r2x7fAQ_0Uw.roa (hash: zF9nqvpnqLrzZFWAUgKZQIRUSTlgxgEW6M1SkVs+U8w=)
2: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: LgCRjb+1emB1znYSGkqE4VDXSBko8sC2gHeoIlXjDqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:d5:34:6c:97:aa:46:92:2b:5c:0f:b3:0b:d9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
Validity
Not Before: Jul 23 15:01:21 2026 GMT
Not After : Jul 24 15:01:21 2026 GMT
Subject: CN=d2fdd62d353222003b32d513f688e9dabb80e6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:6a:7d:a0:69:18:44:05:ce:af:87:30:73:
f7:d9:c4:ae:79:8b:31:7d:b0:c8:84:ac:e0:57:1a:
25:fd:00:fe:32:e0:5a:6a:2b:52:73:09:fb:d3:28:
23:b9:ea:d9:ff:6b:72:50:12:d6:a4:bf:a6:6a:db:
c6:65:3e:02:f8:d8:29:72:db:47:c9:6a:81:5e:3a:
e6:21:72:bc:89:b9:4a:3a:42:c4:a3:44:07:e6:73:
99:a8:d7:a2:54:9b:e4:b8:d3:23:98:9e:56:c1:c2:
52:2a:5c:77:fb:77:c9:3a:17:ba:6c:7e:d5:a2:65:
e3:f5:35:d8:c7:38:a7:4c:ac:8e:c4:6a:5d:bd:7f:
7e:4f:dc:95:70:c0:d0:58:bc:48:bb:48:8a:03:4b:
0e:6b:24:16:bf:8e:e7:70:96:c5:3b:e0:47:25:88:
f4:5d:b1:9b:db:b2:1e:fd:85:8d:22:8d:5c:a8:56:
a4:4b:4a:75:d8:c6:10:ed:dd:fe:cc:9d:db:ff:33:
39:7b:0d:12:93:50:d8:0d:f7:b7:98:d4:a4:78:db:
ca:2b:97:b1:93:7c:2d:ac:9e:46:bc:07:84:26:b3:
6c:53:ac:20:5e:bd:07:f0:b0:cf:db:63:ac:98:02:
81:56:92:c6:7b:54:12:ac:f3:33:10:24:30:df:45:
48:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FD:D6:2D:35:32:22:00:3B:32:D5:13:F6:88:E9:DA:BB:80:E6:A9
X509v3 Authority Key Identifier:
keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7d:0a:12:b2:ed:d1:83:1e:7b:d9:94:2a:16:13:b9:30:d7:
0c:13:b1:2a:78:e6:06:f2:59:74:f8:29:9d:47:52:2c:af:97:
b2:ea:e3:19:21:e5:4e:f1:15:b3:3f:f7:8c:be:be:85:bf:81:
3e:02:62:33:8d:b9:58:51:2b:17:2e:19:c1:b2:df:d3:aa:b7:
9c:bf:6a:91:c5:97:15:4f:25:2c:c7:b3:bd:6e:f2:1e:89:6a:
74:8c:77:c8:6e:7c:cc:fe:2c:17:00:e5:2e:9a:d0:06:24:76:
d8:c8:62:fe:2f:ab:69:a1:f3:ef:7d:6f:75:ce:4b:ce:ac:53:
68:a9:aa:fd:72:56:98:40:55:88:f5:ad:b5:57:04:40:f1:a6:
f0:cf:ff:5c:23:6a:17:62:37:c1:95:49:e6:92:8e:9e:fc:8f:
5b:a9:6f:d0:3a:6d:cf:0b:fc:0a:fd:cb:f1:f5:05:d6:12:83:
8f:57:43:ee:b9:9f:68:f8:40:87:6b:3a:23:2b:af:1c:c8:3c:
bb:60:14:42:c3:9d:48:38:a8:df:2c:cc:fe:6e:ab:af:3b:61:
e0:71:59:6a:5a:c1:68:2c:c0:96:3f:0b:b2:3e:18:4c:01:1a:
8b:4a:17:c3:a0:05:2d:ef:c1:5e:3a:d3:6e:4f:92:c0:ff:58:
77:e1:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:49 2026 by rpki-client