Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier: JpVjMt4mASeD+GU5LCNIILSbvjChEwd1KsYP8PNsEnU=
Subject key identifier: 81:33:E3:56:A7:E9:C2:CD:24:73:94:24:DE:49:A0:BC:15:D8:D6:83
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 019F93FFC89CE9B92504B99C6C96A479D96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 12:00:41 +0000
Manifest this update: Fri 24 Jul 2026 12:00:41 +0000
Manifest next update: Sat 25 Jul 2026 12:00:41 +0000
Files and hashes: 1: 5ApvAMni12n_Tl97hQfErFu1d6c.roa (hash: CMR/4LXkDxQdsem1khNHlRD0gmxgV2kLwB9hrxJKQb0=)
2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: Onqu41ajeY5ckjYA1tN1jagJlLdzh9knhlaFmqYw7mE=)
3: XuBRU-qTaIe3iIMhEcyOCN_o1WE.roa (hash: aMfF2+emhhqGrwHfGQBas1ojIcyc28sSmp2XmBjy3No=)
4: kq8a46tLEeqaFqiTieRfOg3LWKo.roa (hash: qYlRFmIgG79GEajldFvoiEkS/VYV56G5bugYQU8ZN5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:c8:9c:e9:b9:25:04:b9:9c:6c:96:a4:79:d9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Jul 24 12:00:41 2026 GMT
Not After : Jul 25 12:00:41 2026 GMT
Subject: CN=8133e356a7e9c2cd24739424de49a0bc15d8d683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:1b:39:5b:e4:d8:7e:79:c2:27:f1:1d:7b:
b6:85:82:56:e3:91:f4:a0:ea:6f:12:3e:8b:5a:82:
23:08:16:97:8b:a8:48:d7:da:40:56:00:07:33:ea:
a0:97:0c:2c:73:f6:03:aa:a8:af:9f:98:ba:9e:ad:
ab:71:ce:c8:41:a1:fb:7b:74:1b:f7:19:93:25:cd:
9f:3c:f7:90:0e:fe:87:7d:e8:fd:32:ed:3f:db:2c:
41:60:62:c6:26:86:81:59:08:ac:cd:f6:e6:bc:4d:
64:75:0c:04:0e:ca:7a:74:2c:0b:8f:7e:9e:04:5d:
ff:84:bb:4f:23:95:64:7d:3e:8b:68:ac:73:ae:8b:
dc:c2:a1:a8:54:68:c7:8c:04:09:1f:b8:6e:61:29:
62:55:6f:1e:b7:07:9b:5b:ae:f4:1c:ab:bb:ac:13:
23:28:15:06:f7:2a:14:12:ec:eb:38:3d:75:7f:17:
34:4f:12:86:bf:5d:e9:42:b2:27:30:a6:96:58:20:
66:e4:bc:15:9c:84:b0:cb:15:ae:3d:93:c9:68:ea:
f2:e5:52:55:83:90:81:4d:a9:2e:4a:43:f2:dc:57:
91:46:c9:cc:0c:52:c2:e9:62:de:1f:17:8e:38:51:
e8:a5:cb:cb:8e:6a:43:04:5a:44:da:06:57:f0:99:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:33:E3:56:A7:E9:C2:CD:24:73:94:24:DE:49:A0:BC:15:D8:D6:83
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:ac:99:37:2e:37:0c:bb:88:9b:0d:d6:d8:95:e7:7e:9d:1d:
e7:9a:de:2a:46:c9:e6:af:11:15:33:b2:f9:d0:73:72:9b:93:
0a:fd:af:7f:ad:78:8c:de:35:3f:61:5e:a8:78:5b:01:83:d5:
a9:6a:a7:28:13:66:02:92:f8:e3:48:5e:fc:89:d1:7f:58:07:
f5:f6:5d:af:06:b6:5b:db:c6:c5:25:34:20:8b:29:dd:08:c0:
35:d7:c6:96:05:b7:6a:d2:de:9a:54:dd:7d:fc:64:5c:fd:ec:
b8:b2:ec:65:99:46:31:ab:d1:e6:05:53:79:31:2c:4f:f8:08:
c0:f3:7a:3f:90:1b:e9:24:ad:20:da:a5:7b:67:2a:69:7b:07:
fc:a6:ee:28:8c:e0:d3:5a:c0:33:0d:f5:7d:97:83:a8:75:71:
49:91:b4:25:98:dc:54:90:aa:be:f1:79:11:36:0c:b0:9b:e5:
d8:cf:cf:19:9d:4d:36:af:32:90:73:ab:bf:17:21:58:fd:98:
63:84:6e:6d:c2:32:12:c8:53:b6:3e:c2:ee:12:70:b8:7c:fe:
05:aa:0e:bc:e5:1b:19:44:09:a7:34:0e:f9:ff:55:53:4c:8b:
16:4b:3d:48:c4:f7:0a:1b:04:95:57:ed:c1:30:fb:6c:03:39:
e0:4f:f6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:29 2026 by rpki-client