Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
File: PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json)
Hash identifier: bxS2cC2BwVFTItj42sqZmnKRJWaFBRVAXYvzYHKqFV4=
Subject key identifier: D3:3B:E0:1A:FA:AB:EE:D5:AD:0F:93:5B:21:F8:FC:A5:1F:5F:2C:59
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial: 019F8F46FAAF389BEDC6A1C35D8559185ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 14:00:21 +0000
Manifest this update: Thu 23 Jul 2026 14:00:21 +0000
Manifest next update: Fri 24 Jul 2026 14:00:21 +0000
Files and hashes: 1: 4rFM8nRqB3wIzJNdl4Iak_eVuZE.roa (hash: Kwqu0+r6aXX02cJCwND/MQ/S96ntwFBqXiJUoHPSRng=)
2: 8gZUKS9DPrzIKU6t3Ppj9HpjN8s.asa (hash: 5QyuW7GmPubpV6wNPhptkp1H/1cC97GACwQ13UVYU/U=)
3: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: U3t5gNPkP46AFrfo+d6c1v4zdo5vjz2B4yjH4Ld+Vgs=)
4: PSLB-l9ImRjJYxXtqUzR_0IrtRI.asa (hash: LVEG5N1yX8OBlNGRloySVOQ5WSEHDaxbsgyqrIM+wcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:fa:af:38:9b:ed:c6:a1:c3:5d:85:59:18:5a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Validity
Not Before: Jul 23 14:00:21 2026 GMT
Not After : Jul 24 14:00:21 2026 GMT
Subject: CN=d33be01afaabeed5ad0f935b21f8fca51f5f2c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:77:52:a5:59:4a:fe:fc:62:f1:a1:a3:6e:
d5:b2:ea:f5:31:28:a3:1b:de:57:42:71:d8:03:97:
a4:0f:d6:25:c8:dd:9b:4c:ed:55:5d:f3:c4:5d:b7:
88:ee:49:aa:0b:42:17:76:b3:a1:24:29:76:e6:ca:
af:a2:65:ec:ea:79:56:ba:2f:3c:10:6a:91:98:56:
80:c1:34:22:4d:2a:95:b1:89:ba:08:f3:1c:91:5f:
15:4a:72:b8:0e:77:aa:c8:3b:25:4d:e0:46:09:83:
40:35:47:88:cb:ce:69:0d:19:0d:ee:2e:4f:bc:75:
99:75:b4:5b:9a:f1:51:8a:66:3f:f1:67:48:d5:4b:
f5:7b:6f:bd:4a:69:87:a1:a4:73:56:30:d8:66:f5:
9d:fb:f5:45:4a:40:b5:0e:f8:e8:5a:e2:f7:13:68:
a9:46:dd:2c:d2:e1:cc:dd:7e:d6:49:d2:2c:c2:99:
be:62:ff:76:9b:61:04:c0:da:d7:b0:05:a4:81:5e:
ae:b9:de:fb:e5:49:21:4f:d2:f5:03:93:dc:0f:e7:
0c:53:c7:b8:b2:d8:fc:ea:11:ba:3e:ca:c0:91:77:
fa:7a:17:2e:ca:68:4e:b7:18:75:98:d0:32:0c:64:
de:b9:f8:e5:ef:1f:b9:38:66:aa:72:84:ee:3e:78:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:E0:1A:FA:AB:EE:D5:AD:0F:93:5B:21:F8:FC:A5:1F:5F:2C:59
X509v3 Authority Key Identifier:
keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ff:90:1f:f8:cc:79:94:bf:99:50:53:c2:2d:30:d3:00:08:
25:26:7a:33:7d:93:9d:7a:cc:6b:2f:44:f3:25:0a:bf:7d:e5:
21:99:3b:16:eb:9d:4b:a7:b5:3c:40:44:54:db:05:fa:ef:d0:
40:b6:8d:6e:6b:e1:83:83:9f:7c:37:ff:7c:35:a3:62:56:d4:
9d:97:ae:1d:3a:a0:c5:76:03:64:64:13:f6:97:69:99:da:75:
ff:dc:ed:aa:e8:34:f4:9c:6d:fe:fb:40:1b:bd:bb:8c:3f:2f:
5d:04:23:a4:2c:e4:8c:dd:1c:b3:e4:5f:f6:f8:e3:7e:39:14:
6d:d7:56:0c:80:46:57:74:8c:3f:fc:19:4e:5d:48:58:98:be:
c0:34:17:28:a3:70:1c:88:0b:64:5b:82:0a:fc:08:19:bc:01:
2e:9b:73:29:99:53:c0:dc:8d:6e:21:d2:d9:9c:3c:d4:1e:d9:
8e:17:a7:a1:ba:0a:ce:10:ba:77:51:ff:f0:3f:49:f9:19:46:
96:21:89:89:24:09:98:0e:59:99:37:ab:00:fe:b6:7d:05:e6:
70:ea:a5:e8:f0:56:fc:c0:91:12:e6:69:04:ae:4d:57:d2:13:
94:12:91:50:dc:d6:9a:0c:81:34:bf:f0:27:48:45:d0:aa:49:
4c:95:a2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:36 2026 by rpki-client