Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
File: pstoJGZQvVjCKirgCtBmF4qB628.mft (raw, json)
Hash identifier: VRrpMobWQemc+/vxyMcRbmAmWoxireIYeOton9xeooM=
Subject key identifier: FE:ED:20:D1:A1:8F:40:7D:3C:4F:25:3B:5B:29:13:94:15:C9:0A:62
Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
Certificate issuer: /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Certificate serial: 019F927F60C71783F5F12B4D8066A92A52E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
Manifest number: 1244
Signing time: Fri 24 Jul 2026 05:00:49 +0000
Manifest this update: Fri 24 Jul 2026 05:00:49 +0000
Manifest next update: Sat 25 Jul 2026 05:00:49 +0000
Files and hashes: 1: SNOlYOcqtrnciePvkCUcLJcoUvU.roa (hash: loMPRzn55InS2adOqJYmW2DSfbGu3PbAMnR1VbbSvpc=)
2: pstoJGZQvVjCKirgCtBmF4qB628.crl (hash: 6ugJIBzjwmC2JqBIWSsGsk7pEl4Wq3qXTSSeDej3d7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:60:c7:17:83:f5:f1:2b:4d:80:66:a9:2a:52:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Validity
Not Before: Jul 24 05:00:49 2026 GMT
Not After : Jul 25 05:00:49 2026 GMT
Subject: CN=feed20d1a18f407d3c4f253b5b29139415c90a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:a6:91:ff:c4:19:f0:25:c6:70:d8:8f:c4:
db:6c:14:61:73:2b:fa:de:63:7b:19:8c:f1:a7:27:
b5:6a:35:bf:22:c5:0e:c3:89:22:30:c3:eb:4b:06:
e2:ba:db:46:0a:73:91:62:f4:c5:89:36:92:fb:c5:
56:bb:4c:6b:b7:1a:e5:86:54:c0:0b:5d:23:6b:9a:
76:de:8f:e1:ce:60:1d:49:bc:ef:a6:27:93:6f:e9:
8b:ed:0b:80:f1:f7:3b:7e:97:6c:a5:6f:a5:05:02:
d2:c3:6c:0a:72:70:f7:3d:07:f9:11:ae:65:cc:d5:
a0:8a:82:bc:fb:25:e5:09:dd:ae:7f:af:cd:31:aa:
2c:36:6a:6c:f1:f9:be:39:26:ac:96:7f:ba:76:de:
f5:78:96:b6:4f:b1:15:fe:fa:98:a4:09:b3:8c:0e:
8a:60:38:a1:86:5e:e1:5c:e2:3e:33:01:ac:70:0d:
13:88:ef:dc:b3:8d:cd:8e:15:fd:db:29:33:6e:be:
20:5e:48:1c:17:eb:4f:bd:00:06:9f:da:92:ae:f8:
a5:2b:52:c7:3a:23:d2:38:9c:a4:71:53:3d:6e:4f:
1a:06:33:c9:b5:e5:cc:7b:f7:e6:97:62:d8:7b:23:
4f:98:fe:81:02:3d:c6:54:d2:dd:5d:dc:c0:2e:06:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:ED:20:D1:A1:8F:40:7D:3C:4F:25:3B:5B:29:13:94:15:C9:0A:62
X509v3 Authority Key Identifier:
keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e7:8a:ed:23:c4:60:8b:f7:e2:07:08:6b:47:a5:41:4c:12:
ff:c0:a1:33:5a:7d:58:b1:9b:dc:f6:92:99:70:fa:28:d7:61:
a9:03:03:98:48:ed:bb:64:90:dd:43:df:dc:a6:ad:fb:ec:dc:
b1:0b:f9:9f:ad:7b:d9:f8:71:c7:62:fa:31:b0:84:fa:5b:37:
ee:94:52:d8:1a:6a:0e:44:4f:e3:cc:1e:58:6e:e9:50:e5:1c:
22:8f:62:bb:c5:75:b4:33:4c:0b:cc:a6:13:db:8f:83:3b:fa:
ac:ce:97:06:80:bb:4a:ba:1e:79:34:01:f7:74:8c:79:ff:1b:
c3:5d:cf:f1:dc:89:4d:f2:8f:9c:37:e8:08:8d:76:9c:a5:62:
3c:bb:9d:fb:09:e8:a6:ab:51:65:cc:3a:9e:dc:16:3f:be:88:
da:27:e8:93:34:8e:1d:38:13:40:fc:03:d9:88:a3:44:06:d9:
f2:52:e4:b9:0b:0b:1a:a0:ad:5c:4a:5e:da:ca:c6:cc:9f:ee:
6c:5a:7e:8c:9d:27:26:fa:1b:58:6c:8f:0e:eb:c2:8b:97:fa:
8f:90:f0:39:4a:f7:1a:e5:42:43:6c:26:54:8e:2d:2d:30:ca:
2a:a8:87:e4:44:aa:5e:bf:23:b5:93:18:11:57:6b:f5:b1:90:
a0:48:39:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf2DHF4P18StNgGapKlLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Y2I2ODI0NjY1MGJkNThjMjJhMmFlMDBhZDA2NjE3OGE4
MWViNmYwHhcNMjYwNzI0MDUwMDQ5WhcNMjYwNzI1MDUwMDQ5WjAzMTEwLwYDVQQD
EyhmZWVkMjBkMWExOGY0MDdkM2M0ZjI1M2I1YjI5MTM5NDE1YzkwYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBSmkf/EGfAlxnDYj8TbbBRhcyv6
3mN7GYzxpye1ajW/IsUOw4kiMMPrSwbiuttGCnORYvTFiTaS+8VWu0xrtxrlhlTA
C10ja5p23o/hzmAdSbzvpieTb+mL7QuA8fc7fpdspW+lBQLSw2wKcnD3PQf5Ea5l
zNWgioK8+yXlCd2uf6/NMaosNmps8fm+OSasln+6dt71eJa2T7EV/vqYpAmzjA6K
YDihhl7hXOI+MwGscA0TiO/cs43NjhX92ykzbr4gXkgcF+tPvQAGn9qSrvilK1LH
OiPSOJykcVM9bk8aBjPJteXMe/fml2LYeyNPmP6BAj3GVNLdXdzALgbLPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7tINGhj0B9PE8lO1spE5QVyQpiMB8GA1UdIwQY
MBaAFKbLaCRmUL1Ywioq4ArQZheKgetvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNjBkNTAtNTUyYS00NGFmLThiYTUt
MzZlNGZiNTZmZGI0LzEvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9iNjBkNTAtNTUyYS00NGFmLThiYTUtMzZlNGZiNTZmZGI0
LzEvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlueK7SPE
YIv34gcIa0elQUwS/8ChM1p9WLGb3PaSmXD6KNdhqQMDmEjtu2SQ3UPf3Kat++zc
sQv5n6172fhxx2L6MbCE+ls37pRS2BpqDkRP48weWG7pUOUcIo9iu8V1tDNMC8ym
E9uPgzv6rM6XBoC7SroeeTQB93SMef8bw13P8dyJTfKPnDfoCI12nKViPLud+wno
pqtRZcw6ntwWP76I2ifokzSOHTgTQPwD2YijRAbZ8lLkuQsLGqCtXEpe2srGzJ/u
bFp+jJ0nJvobWGyPDuvCi5f6j5DwOUr3GuVCQ2wmVI4tLTDKKqiH5ESqXr8jtZMY
EVdr9bGQoEg5eQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:04 2026 by rpki-client