Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: 5tHrTRUBzFF+WZRcfoZv6hsEwfQkDtGN51tOdUITTuo=
Subject key identifier: AE:09:54:F7:48:F2:AF:9C:97:61:29:3E:EF:9C:10:66:6F:ED:43:2A
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 019F95497FA19BDB8A2B7C49A843ABF7A9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 18:00:49 +0000
Manifest this update: Fri 24 Jul 2026 18:00:49 +0000
Manifest next update: Sat 25 Jul 2026 18:00:49 +0000
Files and hashes: 1: 8MCnCiuGbqnzU7k4AiuuVxxMVjI.roa (hash: 3AKQoBBhnfUzI34hMZSnvSfZtjxdcBOFKymfp/vwl0g=)
2: MnRpYakEEH_3YM8B7YjpXHZCSHs.roa (hash: As4Z8EIpoOCvUeHagBG0PnKSVumw3phPbQAL1UT50X8=)
3: Xw_Yrbs6dG8gOuv7i9EZQhlPhlw.roa (hash: EFAh20ucPzMb4NyAoN8tNqkVM4vbiB7eJqswxMwPTCU=)
4: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: haB9Z2S9HxS9C6pNjabMBHqUFsJohQO2KfIYS7Id4o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:7f:a1:9b:db:8a:2b:7c:49:a8:43:ab:f7:a9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Jul 24 18:00:49 2026 GMT
Not After : Jul 25 18:00:49 2026 GMT
Subject: CN=ae0954f748f2af9c9761293eef9c10666fed432a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:37:f7:3f:85:43:7a:70:18:ae:a1:07:f8:
65:a4:d1:a4:06:8d:7f:6e:91:e4:8a:e9:85:4c:ca:
12:1a:bd:c9:1e:1b:05:0e:2c:f9:0c:56:00:34:78:
be:8c:10:50:3a:f1:da:43:89:2e:4b:53:61:57:6e:
72:83:f7:cd:a2:f4:18:2e:94:ce:3a:98:c0:1e:bc:
97:1e:15:d7:19:35:45:8c:0d:e7:f7:26:b9:74:3d:
e8:ed:f0:d8:e9:a9:d5:6b:1f:56:c2:3f:2a:77:34:
88:4c:9c:7d:db:b1:05:72:cf:7f:ab:d8:74:e2:ca:
30:e7:eb:24:74:43:07:1f:b8:ca:ba:11:45:ca:3f:
e7:3b:48:4a:70:da:79:f8:18:a8:ce:3a:2f:a1:0c:
58:65:fa:0b:d9:88:a9:65:48:75:60:4c:9b:4e:09:
07:ee:81:9f:66:6a:5b:0a:c4:5d:3d:cb:c0:7e:20:
2a:49:8c:74:83:6d:2f:68:de:b4:4a:47:fa:78:a3:
2c:b1:c4:27:e3:ed:0d:08:4f:76:d4:29:33:e6:58:
66:fd:24:ab:4f:a9:d0:95:e3:b1:94:4d:bd:be:1e:
09:1c:ec:10:e4:15:f1:65:82:c6:a4:e5:2b:cb:25:
59:48:2b:5b:97:bc:b8:99:35:82:a4:76:64:5a:c8:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:09:54:F7:48:F2:AF:9C:97:61:29:3E:EF:9C:10:66:6F:ED:43:2A
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:07:f4:47:d6:60:7d:11:6c:5f:27:70:4c:b6:b5:56:a5:11:
31:d9:b8:89:14:67:19:c3:87:ff:37:5a:f9:38:23:5d:73:5b:
b0:e2:47:3c:f9:57:fd:d7:69:1e:b8:33:47:de:cb:56:89:86:
27:8f:7b:f7:75:20:b7:d3:b3:db:77:72:ca:5e:2e:02:a7:9b:
25:44:60:95:e6:a7:f9:b9:01:d1:22:61:8e:4b:23:fd:14:f9:
28:62:61:4c:11:d1:6a:94:75:b6:75:b0:29:24:49:b1:43:8c:
21:f1:d5:80:ee:e1:4e:1c:8a:9c:58:2e:37:5e:4b:fb:e4:6e:
06:f7:7d:9d:17:10:28:0c:98:69:d1:39:f7:a4:19:38:3b:3c:
2a:89:97:ce:24:f1:46:6b:fd:f8:38:61:18:fd:af:9e:72:b8:
d3:e3:a6:6a:33:86:9f:05:4f:1a:07:cb:09:41:38:b5:23:02:
a1:1e:4b:d9:30:f3:2d:62:eb:f0:a2:77:a2:7e:41:32:ba:90:
9a:93:da:e3:0a:f5:66:03:f9:f5:e4:bf:a6:f0:7a:de:22:96:
b0:ee:cf:2d:ba:90:6c:54:6c:75:bd:18:d3:63:a1:46:31:35:
c8:60:38:ce:f3:de:b8:30:3d:25:0d:84:22:9a:9e:63:92:f8:
61:eb:c6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:52:19 2026 by rpki-client