Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
File: pTi7DCtB76jDsCBk68UvupLCNiY.mft (raw, json)
Hash identifier: iSUKWsFxm6aUlhHDvXuTUvTGNJdix9EAc5njpkhrhgw=
Subject key identifier: F4:E8:2B:36:23:67:D2:1E:D4:25:7E:E5:BF:3D:58:89:6D:CD:C2:0C
Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Certificate serial: 019F9392660159865BE711BC60A60DF69579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
Manifest number: 15B2
Signing time: Fri 24 Jul 2026 10:01:12 +0000
Manifest this update: Fri 24 Jul 2026 10:01:12 +0000
Manifest next update: Sat 25 Jul 2026 10:01:12 +0000
Files and hashes: 1: CPVxDc_aZPt8p2hD-fQ5EY3ek5w.roa (hash: YSCCvnapCyu6BSWmfyyXkWgH96EnMt+2gyVUr+pHUOM=)
2: cxSAbl9AGDjuAytpRHVKIsDfitI.roa (hash: 6VeXR5AotX5hFxSi1IUjWsyHhQBxezCmfN4HLADcz8c=)
3: pTi7DCtB76jDsCBk68UvupLCNiY.crl (hash: cSAtePQdD1dplFy/+lthTYZhgfs9WPod0+xLInijHKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:66:01:59:86:5b:e7:11:bc:60:a6:0d:f6:95:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Validity
Not Before: Jul 24 10:01:12 2026 GMT
Not After : Jul 25 10:01:12 2026 GMT
Subject: CN=f4e82b362367d21ed4257ee5bf3d58896dcdc20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:4c:c9:5a:ed:c5:32:41:83:13:75:cc:9b:
62:b5:5e:3a:27:c4:ee:f0:04:f7:be:17:8d:ca:54:
94:e4:0f:aa:b9:c0:58:d2:1e:c1:28:91:4b:08:f5:
77:0f:f5:87:ba:df:a3:68:e2:ed:f4:3d:c2:2b:29:
4d:c6:02:b7:fe:d1:4c:c7:44:cc:b4:d3:85:f1:dc:
db:a2:3e:a4:79:96:19:00:83:d2:3e:ff:81:5b:76:
cd:af:e3:84:e2:10:ad:3a:10:b9:dd:0b:4b:62:a4:
00:7c:ad:98:39:78:e5:7e:10:32:a3:87:1f:22:37:
7e:03:f4:06:ef:fb:77:72:a0:84:48:8b:11:48:8f:
04:0c:b7:f7:6c:c4:5d:de:8a:c7:7d:c3:22:86:c4:
be:03:93:99:e8:bf:6f:17:ab:59:8a:c7:d3:52:4e:
39:56:e5:c4:e5:b0:ac:ff:86:b2:94:a6:65:cf:23:
d6:79:80:2d:59:a2:17:f3:b4:d7:ca:ed:e5:34:77:
99:19:95:31:8a:ca:51:df:e9:07:77:83:1a:05:6c:
ce:6d:6a:c1:e3:11:68:40:ac:37:e2:e3:a6:50:e3:
9e:cc:98:9d:59:6a:42:68:63:a3:65:45:e1:eb:32:
5c:fb:d1:12:8b:fd:5b:7f:3c:a9:73:13:4f:61:2c:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E8:2B:36:23:67:D2:1E:D4:25:7E:E5:BF:3D:58:89:6D:CD:C2:0C
X509v3 Authority Key Identifier:
keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2f:6c:aa:05:03:50:e4:f6:90:e6:40:d4:e1:86:e8:eb:a2:
5e:f5:a8:58:50:87:2d:7a:d8:88:60:7b:e7:f1:82:c6:cf:34:
3e:61:f5:6b:95:e5:73:93:da:c5:ad:53:ec:5f:db:f9:15:2f:
e8:4c:17:f7:3b:66:91:2b:db:56:91:96:3a:52:30:e9:87:3b:
be:00:07:1e:cb:85:28:9b:d9:33:ce:6d:ed:93:d9:52:5a:f6:
af:e9:04:34:a2:63:c7:28:00:06:2c:27:2b:93:3e:26:7e:ae:
8f:8b:2b:46:6c:ca:86:d8:b6:a9:1b:53:71:71:f2:4c:fa:d4:
d1:b1:51:af:8f:2a:78:0b:20:df:78:be:41:c0:3e:7d:4f:f4:
bf:bd:50:67:8e:1e:ef:9b:4c:41:02:1c:a0:d7:97:e4:c8:32:
03:e8:a2:57:78:a7:0b:81:1d:62:0e:f0:1a:f6:06:bc:b6:21:
6e:8b:af:f0:ae:3d:25:05:2c:39:2b:e4:b3:90:d8:4c:d8:13:
3a:f5:02:94:48:65:a1:7d:3d:6f:cc:4a:38:60:cc:69:7f:26:
9f:10:e5:f0:da:94:51:d2:55:94:54:02:43:e8:23:09:d8:04:
f1:14:41:b5:ca:89:a3:ba:bc:9a:f5:b9:36:7f:6c:eb:b9:e4:
2b:5f:05:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:45 2026 by rpki-client