Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
File: pj3LkKFHQqUr5coJy-2N_BzT0e8.mft (raw, json)
Hash identifier: H6jnTKg7YoLgn4nSblkTtl/qchp52+NECrNSofNEAhM=
Subject key identifier: 59:1A:06:F5:7D:01:94:BF:AF:41:50:33:C7:52:22:07:EE:05:27:70
Authority key identifier: A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
Certificate issuer: /CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Certificate serial: 019F94368743EFD7D9DFEC9147D3B347CC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 13:00:29 +0000
Manifest this update: Fri 24 Jul 2026 13:00:29 +0000
Manifest next update: Sat 25 Jul 2026 13:00:29 +0000
Files and hashes: 1: 9xtV_Pla1WgMl3ubvegTPHITTAQ.roa (hash: AXS+nn2vCSazRZVNivUy+3jk/liVHM3b04sQJUOyc0U=)
2: pj3LkKFHQqUr5coJy-2N_BzT0e8.crl (hash: yRXPdGDlYkHSFQpcH+vqzhFBABuaaTVJA7gOiC+GoL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:87:43:ef:d7:d9:df:ec:91:47:d3:b3:47:cc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Validity
Not Before: Jul 24 13:00:29 2026 GMT
Not After : Jul 25 13:00:29 2026 GMT
Subject: CN=591a06f57d0194bfaf415033c7522207ee052770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:ea:a5:b8:99:ee:8c:8d:66:75:9c:5a:1a:
13:08:b4:10:6e:5a:bc:f6:17:4d:d6:dd:3b:e6:39:
dc:ae:a2:ae:e5:a7:0f:9d:17:bc:0c:77:cb:0f:56:
11:f7:74:58:17:c7:78:d3:ad:d0:b7:7e:8f:7b:14:
3a:98:65:6f:9a:15:1e:db:d7:d0:b1:13:62:d5:fd:
cf:70:b9:93:2e:85:f6:b8:c4:55:f4:83:04:82:e3:
bd:43:62:58:61:bb:39:cf:aa:9a:e0:48:96:ee:04:
9c:d0:33:99:09:bc:24:26:f1:a3:f3:1e:87:ed:c1:
7a:b4:1d:6d:06:11:11:a1:dd:b4:c2:36:9e:fa:c8:
9a:2d:2d:c6:66:3f:58:de:0c:a7:a2:4d:c9:2c:0d:
de:19:12:ee:46:43:37:09:ec:7e:f0:02:39:82:6d:
77:29:02:56:01:cf:ce:a6:06:26:c7:3a:39:eb:04:
9b:10:1e:f9:74:59:0c:f6:42:28:73:b9:e7:97:49:
9a:e9:23:81:d5:9b:53:8a:45:0f:81:c0:2b:31:24:
08:d4:28:d8:e0:dc:fb:30:bd:6d:57:28:c8:7b:db:
ac:14:2b:b2:bc:8c:82:42:c7:86:e5:58:8a:e9:84:
35:80:09:12:1f:06:78:3d:52:29:05:6c:dd:5d:7c:
a1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1A:06:F5:7D:01:94:BF:AF:41:50:33:C7:52:22:07:EE:05:27:70
X509v3 Authority Key Identifier:
keyid:A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:51:64:87:07:23:c2:c4:1c:e5:59:8c:74:94:9f:6e:40:06:
6e:56:8f:4f:da:2a:a2:ba:21:a7:f1:e9:ba:e7:f5:0d:a2:c9:
9f:9e:e4:0a:44:d9:29:e5:7b:9e:71:9c:89:04:db:b6:a7:ef:
54:66:12:df:f1:59:89:34:e7:68:7b:b7:57:8f:e7:1c:19:17:
cf:a0:d6:c7:2d:64:6f:f5:77:89:c6:27:b0:4b:19:a4:26:d5:
db:d8:49:6c:1b:67:37:6a:93:a6:a4:9f:41:87:ae:3c:3a:67:
77:09:4d:ba:76:f6:3a:e1:5f:82:7f:05:ff:30:d2:32:a7:8c:
d6:2a:6b:68:0c:bc:28:2b:ba:4e:4e:d2:d9:85:7e:29:a7:5d:
81:a8:a3:4f:ac:82:20:e6:17:c0:6f:b3:e7:27:6f:83:8b:a4:
00:52:9a:6a:0f:94:d7:89:c4:85:f1:b0:01:02:3c:41:52:e2:
eb:ec:14:dc:90:90:87:2a:5b:e7:2d:b8:6d:52:f4:e9:8a:0d:
26:36:06:3f:14:7b:97:1c:d3:f0:a2:25:d8:cb:bb:04:7e:c8:
3b:91:73:60:45:94:06:3f:14:6a:c7:cc:7e:33:71:10:50:c9:
2d:2e:67:32:d8:4e:24:f2:61:7b:30:56:11:a1:bb:66:ca:b0:
3d:1d:90:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:16 2026 by rpki-client