Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: X+053cB45vHzcxVCb2OhoTChI8ibGArGuAtUlTdGzJs=
Subject key identifier: AF:21:83:3A:9D:96:6B:CF:41:4F:7E:09:FB:6E:53:46:8F:89:5D:B8
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 019F8F4780BEA6B3F629767F2298A38D92CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 14:00:55 +0000
Manifest this update: Thu 23 Jul 2026 14:00:55 +0000
Manifest next update: Fri 24 Jul 2026 14:00:55 +0000
Files and hashes: 1: D6JN_SUanY3VCPcy8MM0wRyWpFg.asa (hash: GO31s3wbPJQu1T3Grsa85oI8sAVmrZULl2h6J3A4Dcw=)
2: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: Hjm4121mAR0dv5HbaQ//IgvnwQrBrbVUh/Q0ECYsiVQ=)
3: iVwLg--4UDbLvJn4dxkRR2fxInw.roa (hash: wrzc6nRtbm4MeWrVh43cUfhaLyz6R8Fbv5xm23WJS0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:80:be:a6:b3:f6:29:76:7f:22:98:a3:8d:92:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Jul 23 14:00:55 2026 GMT
Not After : Jul 24 14:00:55 2026 GMT
Subject: CN=af21833a9d966bcf414f7e09fb6e53468f895db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:6b:ea:a9:e3:12:d9:9a:2f:33:76:87:e4:
f7:13:10:e6:25:3b:6c:8d:9e:a7:00:1b:8e:81:fa:
36:44:41:19:03:26:73:99:69:4d:b9:e7:4f:16:56:
16:f9:51:84:4b:84:67:b9:bc:97:66:3d:4a:ba:95:
a6:a6:02:b3:bc:b6:6f:4b:ea:bf:3b:00:ad:44:60:
6d:85:7a:05:bb:a2:74:9a:fd:27:ab:94:2a:ab:f3:
91:3c:31:3e:97:09:06:76:44:ac:8f:fd:cc:c6:be:
54:fa:88:82:18:68:b6:ad:cb:be:8b:26:35:23:51:
43:8f:5a:67:8d:a4:40:f1:fb:15:5f:0f:07:36:de:
e9:78:40:fc:66:2e:c1:ea:c5:e4:43:cc:12:5f:bf:
d0:53:dd:f1:02:56:f1:49:91:f5:00:8c:47:5a:75:
55:5f:94:1c:a3:a4:43:8f:b6:f2:ed:44:3d:5d:0d:
61:ed:9b:b3:d7:e8:e6:88:04:16:a9:93:b0:1e:85:
00:f7:66:76:40:92:4b:bc:c6:22:75:c2:b2:6b:71:
9a:2f:fa:41:89:a9:ec:98:1f:b1:18:7b:53:b5:a6:
a0:52:39:48:ce:0e:97:ea:ad:62:40:ac:23:94:94:
99:57:a8:81:98:ed:4f:98:67:12:65:f4:1b:eb:1f:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:21:83:3A:9D:96:6B:CF:41:4F:7E:09:FB:6E:53:46:8F:89:5D:B8
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:57:b0:28:e9:10:37:09:46:28:1c:2f:e2:e0:d8:30:81:93:
5b:c3:1e:c8:8e:27:65:e8:2f:b9:a8:5b:ae:30:53:4c:d1:c9:
70:27:32:0b:27:ac:11:33:47:e8:60:4a:eb:78:ea:0c:85:21:
4b:5f:57:d2:48:b5:0b:22:61:5f:5d:12:23:ff:45:2f:c4:d4:
8e:6d:2c:11:a7:1b:bc:e1:a5:f8:67:49:d7:4e:f1:64:d0:c0:
18:58:37:f7:56:61:96:b8:08:68:a6:b4:aa:7b:b0:c5:c7:be:
e3:da:a9:d2:9d:0d:d1:ff:b2:9a:fa:40:dd:9d:77:cf:d2:fc:
b4:ad:03:6c:6c:89:30:ba:5f:6e:1e:08:36:19:64:2f:b6:e9:
c9:9f:8e:87:ba:31:cd:c1:34:e1:8f:0b:90:c8:bc:5f:06:8d:
fe:0f:9c:db:fa:0f:97:ef:37:5a:13:ea:b8:dc:1e:6d:9f:9b:
a4:01:e2:96:cb:bb:fb:20:b6:a4:c1:58:ea:5e:e2:e6:57:9d:
c7:26:fb:fc:67:89:39:c9:da:ee:e5:89:e9:5d:39:3c:6a:20:
c6:43:41:e3:a9:73:4c:ed:6c:08:f7:20:a4:39:cb:92:8a:66:
0a:2f:82:e9:17:80:11:5c:07:d3:d5:ac:2d:7e:3f:fc:16:6b:
bb:f4:42:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:37 2026 by rpki-client