Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
File: PabmnmXdClQFmXA-0MkkdMsg6Tk.mft (raw, json)
Hash identifier: gtUq6B99MVu7TYT++1VaBuN5zA+OsLjrdhSmlV8dXcM=
Subject key identifier: BB:DD:FF:C6:E8:59:A8:41:E3:58:28:30:AD:86:B2:CD:8D:0A:9B:98
Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
Certificate issuer: /CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Certificate serial: 019F92EDDA4D827AC1219339BBC5DF3076F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
Manifest number: 1927
Signing time: Fri 24 Jul 2026 07:01:29 +0000
Manifest this update: Fri 24 Jul 2026 07:01:29 +0000
Manifest next update: Sat 25 Jul 2026 07:01:29 +0000
Files and hashes: 1: 30JCy0OML-aej9HWtOYjdVh3Y58.roa (hash: hP6Mk/u93EteMPnPTXhr0EjSwhq+2k3+uAkB+TauqHk=)
2: PabmnmXdClQFmXA-0MkkdMsg6Tk.crl (hash: YyzlwDM6VTaF9loQW/5PnWbijKuYcypzKtj+afPFZJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:da:4d:82:7a:c1:21:93:39:bb:c5:df:30:76:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Validity
Not Before: Jul 24 07:01:29 2026 GMT
Not After : Jul 25 07:01:29 2026 GMT
Subject: CN=bbddffc6e859a841e3582830ad86b2cd8d0a9b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:4c:e1:28:d3:63:2a:3b:38:e9:09:23:0f:
26:74:61:72:33:d7:f9:f7:e3:10:ef:9a:37:60:5d:
d2:47:f3:1d:4e:aa:fb:ce:cc:9a:56:40:0e:e4:b4:
2d:27:b3:1d:74:2b:ce:ee:d2:33:ac:6a:0d:43:e2:
34:b4:68:83:c0:91:c0:6a:62:ae:03:cd:49:50:e4:
d3:8f:c3:8c:5b:22:99:98:5f:4f:b5:9d:55:1e:62:
2e:8e:47:2d:ea:cc:98:75:d0:42:57:a0:9f:eb:97:
d9:db:99:07:37:39:0b:4c:1a:c6:ec:73:3e:a5:2e:
46:37:94:d1:ee:ce:39:72:3d:ee:51:f6:f4:9e:82:
ff:7c:39:e4:21:58:72:02:47:bf:4c:00:02:d2:04:
ee:9d:b0:ab:0a:79:d8:46:35:9f:ea:db:f6:eb:de:
c8:75:c5:c4:de:27:65:71:82:df:1d:f5:b3:29:5a:
ab:5d:6a:5e:e1:be:c1:7c:25:eb:94:c0:6d:54:14:
7f:dc:18:c6:f9:1f:3a:c6:9c:12:94:a6:7f:fc:b5:
ba:08:d2:84:15:c6:74:e2:dd:e8:00:b9:4b:77:55:
cd:8f:94:11:29:cc:0f:60:df:9c:c3:92:11:b0:51:
e2:f5:f3:5e:c1:90:02:d5:c8:45:1a:ff:22:f2:a3:
e6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DD:FF:C6:E8:59:A8:41:E3:58:28:30:AD:86:B2:CD:8D:0A:9B:98
X509v3 Authority Key Identifier:
keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ac:52:e3:56:ba:e3:4d:8e:51:0a:71:7a:f6:75:7f:dc:47:
d6:21:80:f8:bc:75:1c:05:10:49:44:38:96:ef:fa:0f:ab:f6:
bc:9a:de:01:c7:91:c1:d7:38:dd:00:6b:76:0a:4e:4e:fc:d5:
88:e4:24:f4:cb:6f:8e:ab:89:2b:0e:ed:44:56:d2:71:ce:20:
0c:8c:38:58:24:62:dd:fc:c4:1e:50:7e:db:ec:0c:76:ec:db:
7f:4f:af:d6:3e:0e:21:2d:13:8b:92:be:d4:7f:a1:a9:43:26:
d1:46:ef:30:b3:cd:ca:06:82:0b:f1:ea:c2:80:07:92:eb:b6:
b6:47:98:db:6c:59:2a:eb:c0:a5:bd:1c:df:c2:a2:16:68:13:
3d:e6:c5:fe:a5:40:70:e2:c2:0f:41:dc:7a:36:67:b0:56:d9:
48:4b:fc:be:ed:a0:7a:66:e7:72:7f:3f:7b:f5:c7:d9:6c:29:
22:56:05:31:d0:a5:2f:53:19:fb:04:2d:56:41:2c:41:f2:96:
fc:58:26:1e:45:2d:17:6d:10:88:1b:ce:27:de:85:8a:91:30:
7d:0b:17:f6:d5:0f:5e:4c:07:07:b4:97:2b:da:2a:07:5c:00:
e0:47:f7:39:fe:e6:23:c7:ec:1a:44:1d:af:1d:a9:3f:95:ef:
fb:50:fa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:49:46 2026 by rpki-client