Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
File: pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft (raw, json)
Hash identifier: 01HQLQa4KmNnEojPkFAkdmmqbMotiMd1D4lKS/sASBc=
Subject key identifier: 25:16:C0:A8:84:AA:94:4B:10:45:84:51:70:8E:94:43:E9:55:48:55
Authority key identifier: A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
Certificate issuer: /CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Certificate serial: 019F92B5EA40B5F8AD3AF97A0277A350E3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
Manifest number: 0E5A
Signing time: Fri 24 Jul 2026 06:00:23 +0000
Manifest this update: Fri 24 Jul 2026 06:00:23 +0000
Manifest next update: Sat 25 Jul 2026 06:00:23 +0000
Files and hashes: 1: 1-bShfWRGm-TQCjM_Y3n8hxLi1-I.roa (hash: wGYwNx5Kv0DKEFJu4HUzIBbe8JuzhGj3QdIJepSq7/Q=)
2: pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl (hash: GLrhC8Rk9FExAOyYMP030hjVEUSKOWErzt0yD5B4o6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:ea:40:b5:f8:ad:3a:f9:7a:02:77:a3:50:e3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Validity
Not Before: Jul 24 06:00:23 2026 GMT
Not After : Jul 25 06:00:23 2026 GMT
Subject: CN=2516c0a884aa944b10458451708e9443e9554855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:f6:9d:0f:49:09:bb:30:36:32:9d:58:de:
db:2e:b5:56:7d:2b:c8:d3:c5:a2:38:f2:11:77:dc:
b1:f6:8b:9f:dc:f2:dc:0a:20:85:f8:cc:d0:55:16:
5c:cf:15:90:5e:a6:27:c3:91:6c:e5:bd:0a:2a:7d:
3b:73:3f:15:06:52:a8:53:d6:78:e0:17:50:5a:e0:
37:bd:08:1a:d8:20:c2:44:b8:d4:38:da:75:ac:cb:
87:f6:54:04:93:97:84:06:8f:cc:f1:08:95:38:03:
02:36:de:36:9f:d1:bf:61:c5:da:6a:9e:cc:fc:9b:
60:71:ad:fe:d8:d2:13:4d:c7:84:b0:27:2a:5e:27:
57:c1:90:63:0e:a8:b6:10:19:0a:a3:8a:2d:72:c2:
18:6f:66:71:fb:c7:28:5c:3f:fb:10:9c:8e:dd:ac:
df:39:a9:57:45:61:04:37:a8:bd:49:6f:4a:8d:1c:
79:11:40:00:07:74:ea:17:93:3a:3e:36:c0:ca:52:
a5:56:c6:1d:06:92:c0:cf:51:a0:6a:bf:fe:09:46:
89:5d:43:88:93:60:d0:7d:42:81:0b:15:f2:0d:32:
0c:0f:32:01:50:b7:23:8f:3e:fc:82:ad:79:ac:f9:
70:1d:5a:fb:3d:7f:41:a5:29:71:24:23:87:07:fc:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:16:C0:A8:84:AA:94:4B:10:45:84:51:70:8E:94:43:E9:55:48:55
X509v3 Authority Key Identifier:
keyid:A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b8:17:33:45:28:0c:5f:63:a6:37:04:2d:95:1f:57:57:a9:
a4:0f:84:4c:88:ac:5d:37:29:36:69:15:bb:79:1a:83:97:3d:
da:6c:13:a7:b8:7b:07:d1:32:34:fe:8e:7e:d4:73:e6:ea:ad:
9b:96:6c:67:b3:3a:ed:c4:75:33:2d:3b:a4:57:65:32:15:f2:
45:10:2e:4b:cd:46:cb:bd:2d:90:57:d7:cf:66:a1:d9:5a:72:
d6:07:07:d1:c8:9f:f1:6d:4b:88:46:13:47:34:e7:dc:39:95:
9a:20:0b:e3:81:e4:3c:54:b0:d4:3d:e9:f8:ae:76:fb:c9:8e:
4e:4f:63:8a:7d:92:f4:2d:3a:c6:a8:52:97:cc:09:40:47:be:
ef:56:b4:bb:b2:9b:d0:44:58:70:df:7d:9e:ed:3c:c8:3b:47:
bb:6f:93:b7:a3:27:51:03:60:62:3f:bc:a9:d7:3e:f0:1a:3b:
c4:86:5a:85:b2:34:0f:7e:06:04:7e:2a:ef:53:fa:94:04:41:
89:94:9e:3e:d4:89:ea:78:d9:3a:46:38:4d:cb:f7:04:c6:f8:
fb:40:39:f4:29:b1:15:15:85:3f:02:5a:85:2d:16:c1:f5:54:
08:c5:b4:0b:f4:98:16:13:9c:6c:c1:0d:87:e4:18:09:ab:2a:
47:3a:fa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:57 2026 by rpki-client