Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File: PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier: B6bExDmDzZHnk1PAbHXNPD6oUcYg7YCpvjW8/xtUpsU=
Subject key identifier: 85:B1:03:B5:A2:8E:D4:87:29:BE:61:59:FF:E3:08:43:9D:3C:B0:DF
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 019E1DFE2DC3D7EFF096A43677C67663D626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number: 1916
Signing time: Tue 12 May 2026 21:00:57 +0000
Manifest this update: Tue 12 May 2026 21:00:57 +0000
Manifest next update: Wed 13 May 2026 21:00:57 +0000
Files and hashes: 1: 5ktFpVoHtcv-4PVj4xQGVTm6rZs.roa (hash: Zqkw6KvI8acX/aUr49KfIKqTAKRlHDvQQG+hF6oNumM=)
2: L1LuXNyLmddWoquATgiWDCkvIvc.roa (hash: 4bMlcyRakC1GsgwgHN92wea/CUU4Dqc8/FL+CIWH9ng=)
3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: HCiz4LlDMZq0+MsDYZMfNl1BsJS99WmxcY9UZC1a4ZY=)
4: buVJFABq-VX2RQkDd31Tz6ZBBxg.roa (hash: 8On1Egu0eUygZ7HokkyA20vdkdxcvN29qQbkjTPI5rE=)
5: o5xjwD3RHYwZb8BGUpI8BsGBfV0.roa (hash: GZFTwMUyNntUts8RndeOn9OC9VYkHxusfe9yub/gTL4=)
6: t48mXkmHCqZPmvOXE_EaAv0d4IU.roa (hash: kn+opPbME6YgDhBuXcQLf7UfJNA4/7anLklPax/nt4w=)
7: tl_q-hSPqgL5VpoDk8C2Ua5xTVc.roa (hash: P7Vo08T4BVo4faac/Yk9jWiigRql2vSCBoh+fxrW89w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:2d:c3:d7:ef:f0:96:a4:36:77:c6:76:63:d6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: May 12 21:00:57 2026 GMT
Not After : May 13 21:00:57 2026 GMT
Subject: CN=85b103b5a28ed48729be6159ffe308439d3cb0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:ed:2a:d6:46:31:fd:5d:50:40:5f:d4:1b:
a4:a7:86:54:8e:87:a1:01:4e:c1:87:fe:1f:e4:d2:
f3:43:73:45:9f:4b:b0:52:a4:9d:5f:d0:18:f5:0e:
ec:15:d7:db:74:12:27:e7:a6:46:43:15:0e:55:bd:
d0:f6:0c:23:64:99:4c:36:24:96:f2:da:90:81:0c:
4f:b5:d7:99:70:64:3a:dc:57:87:f5:a0:4e:4e:67:
b8:97:92:7c:e6:82:d1:17:b6:7a:32:c6:48:fa:6c:
7e:d1:4c:96:07:8f:11:07:ed:de:2e:23:f4:e5:36:
a0:11:19:ec:04:a0:5e:b0:16:d4:94:95:3d:ce:dd:
4f:dc:8b:79:2f:b8:06:ce:1d:c5:5a:c7:a3:4e:3e:
fb:d0:89:d8:13:b7:e6:cd:1e:c4:5f:d8:bb:d9:3c:
ad:e3:b7:a2:66:85:1e:ea:0d:9c:01:1e:de:08:73:
6e:a6:a0:11:4d:88:1b:fc:33:12:d7:87:0c:8f:bc:
d6:48:7b:22:37:64:e7:6d:f0:ec:c7:27:56:f3:40:
aa:ca:58:4e:e3:05:8c:6a:cb:59:96:9c:87:c9:b8:
a5:8e:de:dd:56:a7:1e:e6:60:77:06:1c:a7:99:f5:
34:c2:5d:90:4a:c6:3a:28:a8:cd:03:27:d2:7c:4a:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B1:03:B5:A2:8E:D4:87:29:BE:61:59:FF:E3:08:43:9D:3C:B0:DF
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:92:35:ad:19:98:e3:e7:c0:b1:4a:5a:f3:fd:4b:97:72:f5:
e9:9c:ae:08:5e:43:13:fd:0b:4e:25:ac:b7:56:e2:54:5a:19:
4f:46:3d:31:96:be:5c:96:9c:f0:8c:e2:f6:1a:dc:f9:1e:3f:
2b:19:a7:f7:6e:7d:4c:85:52:8d:5e:1a:9e:1f:87:6e:ef:de:
0c:3e:5d:ae:fd:8c:44:1c:16:07:c6:23:cd:7e:ca:f0:b8:43:
54:bb:31:6f:6f:c2:05:a6:8e:1d:cd:4b:31:d2:88:3e:97:8e:
9d:b8:7d:1e:1b:bc:49:09:af:d0:91:e7:8f:c0:34:cc:db:ea:
5d:82:51:a5:58:45:e7:85:15:b8:ca:2d:28:6d:8e:ed:ce:d7:
ad:05:e6:e5:e7:73:cc:f7:89:54:c1:bb:40:00:ca:c6:68:90:
cc:b6:e3:6a:ac:00:1b:91:df:37:e8:a6:ec:1f:0c:ce:02:3b:
a5:82:e3:af:e8:52:b1:dd:b6:77:5d:4c:90:6b:ac:21:4d:0a:
61:a0:6d:90:99:f0:d6:c0:c1:25:66:0d:fd:41:1a:93:24:40:
71:a2:93:da:4d:55:93:c0:fb:fe:3c:07:d0:b6:af:16:26:6e:
97:6f:8f:c5:60:e8:eb:5a:b8:ea:e9:f8:44:34:20:b1:89:7b:
af:10:32:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:01:27 2026 by rpki-client