Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
File: pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft (raw, json)
Hash identifier: TU6Ond7+CFqYQ8+wEMQS2rwY78K00W6uoiBPzGjlOKc=
Subject key identifier: A5:F6:5C:7E:83:74:47:F8:07:85:2B:DD:48:DB:D6:29:B4:FD:7F:7D
Authority key identifier: A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79
Certificate issuer: /CN=a4396ac14b77b1f033d9e459210c873b012e0a79
Certificate serial: 019F95B6E96919E74D40905AA50DA014FDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
Manifest number: 66
Signing time: Fri 24 Jul 2026 20:00:20 +0000
Manifest this update: Fri 24 Jul 2026 20:00:20 +0000
Manifest next update: Sat 25 Jul 2026 20:00:20 +0000
Files and hashes: 1: 2GYhbWHtfBWPF1UEk4OY2FR4BlE.roa (hash: w4kZnQsbsuOxKFHTlD0TVfi8ciQmtnzyEXnJDLUlaZo=)
2: pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl (hash: r+Fa8bhPaC//bJVFiamnZ3mDwAAKnJqn5nxCJccBrc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b6:e9:69:19:e7:4d:40:90:5a:a5:0d:a0:14:fd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4396ac14b77b1f033d9e459210c873b012e0a79
Validity
Not Before: Jul 24 20:00:20 2026 GMT
Not After : Jul 25 20:00:20 2026 GMT
Subject: CN=a5f65c7e837447f807852bdd48dbd629b4fd7f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:00:4e:0b:c2:f4:7e:f8:7d:85:6b:4e:8e:
48:78:0b:af:50:ee:03:f9:34:b8:d9:c0:c7:1a:1b:
7d:75:c2:00:24:b5:5d:a8:fc:cd:59:20:0e:e8:7d:
07:5c:3f:e1:7d:19:3a:06:87:42:0d:57:1c:51:7a:
af:9f:4c:e7:3b:bd:23:8c:06:a2:59:c5:f2:7d:57:
8e:a8:d9:af:15:c0:a1:c1:9b:77:ea:ff:c3:43:d3:
50:dc:ad:83:3d:8e:6f:54:47:a9:14:28:f6:fb:56:
eb:0e:fc:c8:e9:03:ff:56:b7:ad:05:79:70:62:37:
02:d4:54:b7:7d:e1:d4:01:12:4a:03:f1:d5:4c:94:
42:e4:d4:8e:a3:5c:b2:28:2f:6e:59:b8:95:4c:dc:
ef:01:81:ef:be:8a:b4:e5:fc:b1:43:17:d6:25:2b:
e1:b7:bd:d2:b4:dc:9b:02:e7:0d:03:7a:c7:f2:23:
8b:52:ea:98:b4:c5:bc:60:58:44:c6:02:65:d7:57:
47:4b:e2:3f:04:ba:6b:be:7f:24:38:30:c3:a9:a1:
81:2f:bb:f1:ce:c4:cb:c8:49:a9:91:80:5d:d1:78:
09:06:22:3a:55:7c:2d:35:24:a7:b2:a3:74:5c:26:
55:39:59:26:56:bc:2a:6e:7c:60:c7:d3:6e:7d:7c:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F6:5C:7E:83:74:47:F8:07:85:2B:DD:48:DB:D6:29:B4:FD:7F:7D
X509v3 Authority Key Identifier:
keyid:A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c2:80:a2:4d:ab:23:46:50:f4:69:09:90:ab:68:66:0d:f5:
e4:52:8c:b5:8d:9c:70:25:3e:55:63:53:01:02:48:2e:31:3a:
36:ca:5b:f5:70:de:65:85:e0:c8:7f:c5:22:44:a6:98:26:f6:
a0:fa:e8:4c:f2:38:f8:a0:2c:9f:74:a9:31:58:9c:d5:5c:aa:
17:55:56:7e:eb:2f:50:94:49:60:d1:5b:ba:46:d6:17:f7:6d:
ba:27:27:44:0e:c7:af:8e:2a:f7:3d:98:9b:31:9c:b0:7d:08:
48:62:21:92:d7:3f:b5:99:74:1f:0e:86:d1:19:4f:e8:b9:93:
d9:10:17:20:ea:68:78:53:1d:1e:f4:73:56:94:82:b9:47:35:
68:33:61:70:67:de:69:df:0b:b3:16:03:22:79:43:07:8b:e0:
6e:86:ce:4a:97:80:b5:51:a3:c9:b5:69:5d:aa:1b:8f:6a:cd:
b6:13:cc:92:61:35:d3:dd:6a:0e:de:48:52:de:8e:06:f4:f0:
6b:41:5d:66:d6:de:87:22:dd:51:47:a6:1e:af:f2:1a:32:fe:
e6:65:14:13:54:a9:c8:03:72:dc:99:82:0b:e0:e1:a8:1f:34:
39:be:44:7d:97:02:19:de:63:c5:51:3c:50:cd:5a:e6:fc:93:
d1:22:b5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:51 2026 by rpki-client