Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
File: pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json)
Hash identifier: U8hC+ydEs1SZKHRTErmScqek5bF2x1ERTVm/ue0LJXg=
Subject key identifier: 0B:96:39:AB:B1:66:38:B1:26:55:2B:2D:F5:7B:DF:7C:B3:B8:AF:22
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial: 019F927F0597A6FB9394BD3D5993F219037E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 05:00:25 +0000
Manifest this update: Fri 24 Jul 2026 05:00:25 +0000
Manifest next update: Sat 25 Jul 2026 05:00:25 +0000
Files and hashes: 1: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: cAlrR0ddto0ZpxxudzBBJPmpT+AQKt1UzTJ47E3qeKc=)
2: sFhaHiuTZkyPvfZGeitPsQ50uDY.roa (hash: A+Ir0fHumCJtAvIDD0Uq1l9aMQ2n7on4GhmvbKyT6iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:05:97:a6:fb:93:94:bd:3d:59:93:f2:19:03:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Validity
Not Before: Jul 24 05:00:25 2026 GMT
Not After : Jul 25 05:00:25 2026 GMT
Subject: CN=0b9639abb16638b126552b2df57bdf7cb3b8af22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:1c:94:39:fd:b6:a2:4b:a7:3b:74:1f:1a:
b4:03:0a:63:dc:da:b5:6f:f4:ba:2e:ae:83:43:11:
a6:82:5e:ea:09:3e:2b:5f:cd:8d:81:13:fa:05:7c:
fb:b2:b1:ef:fc:9c:a6:05:33:4e:df:f3:7b:ff:91:
10:4d:2b:03:a6:5e:35:79:f3:de:73:a7:19:d4:d6:
a0:42:bb:14:fc:a8:87:f4:b5:8d:9e:5c:09:74:6e:
e6:e1:cb:61:0e:1f:b2:10:f2:7e:1b:18:13:55:cf:
f8:43:a6:49:ca:31:ec:5e:3b:ab:6a:16:e9:f0:8e:
c0:d1:4b:56:8b:c9:c0:70:18:40:80:f0:b8:82:a6:
a1:35:5c:e2:82:4b:f0:bf:42:ba:45:6c:d5:27:61:
27:ab:c0:c8:fa:63:77:86:4d:df:c2:e0:c0:2b:d9:
7d:cf:24:33:78:d1:d4:54:53:c4:b0:38:b3:5b:cd:
89:79:3f:d0:e5:cd:7c:76:fd:d4:c2:fd:bd:90:c2:
3d:3e:7a:ad:3d:27:09:75:1e:a1:4f:a4:85:53:a3:
13:64:73:02:a6:b1:89:74:b6:e2:89:76:02:01:8a:
61:62:7c:8c:27:f7:29:0c:51:c2:cf:d4:5c:c5:74:
84:5d:31:8f:fe:87:06:bf:84:16:2a:f0:f9:e1:7e:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:96:39:AB:B1:66:38:B1:26:55:2B:2D:F5:7B:DF:7C:B3:B8:AF:22
X509v3 Authority Key Identifier:
keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ed:97:d8:3a:b7:60:2e:e2:c8:35:6a:4d:9d:55:dd:a4:ae:
b5:aa:a4:21:6d:1d:04:c5:6b:2d:f4:1f:f2:80:b3:a9:af:d4:
fa:9d:e5:ee:f1:1e:95:fa:bd:53:a0:a6:33:ac:53:18:31:39:
5a:0e:73:9e:12:8c:69:70:4e:ea:af:8f:f4:bc:34:0d:a4:12:
a3:06:31:62:c5:85:6f:80:c2:df:82:be:c9:2d:40:20:09:c2:
64:f2:40:9c:69:9f:da:54:4c:80:0c:1a:79:44:33:3e:e1:05:
7c:a4:fb:ed:7b:56:ad:ff:a9:bd:43:43:e2:3a:07:16:8a:53:
33:c8:44:b0:1d:d7:0b:24:ca:41:aa:cc:08:2e:f5:8c:08:31:
7e:17:2a:14:8b:61:8d:47:4d:d7:f3:2b:ed:8f:04:ba:5b:10:
76:52:12:d2:76:31:cf:01:f6:75:9d:96:cd:26:e9:51:93:ad:
11:af:d2:5a:45:1f:5a:b9:08:1b:23:23:71:bd:51:a2:99:16:
29:c5:5b:02:34:8c:45:17:76:8e:9f:ff:de:cf:ea:97:9e:05:
08:ac:0e:ff:71:71:7d:bc:ec:e2:49:bf:7e:83:c2:66:db:29:
3a:ee:3d:ff:71:d0:2e:17:cc:3e:40:2a:0b:ba:01:06:d0:bd:
aa:52:97:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SfwWXpvuTlL09WZPyGQN+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzNlMzJhYzBjNmZhNzM1YTZjN2JlMTQ0Y2ZhM2ZjMjk3
YzBiOTgwHhcNMjYwNzI0MDUwMDI1WhcNMjYwNzI1MDUwMDI1WjAzMTEwLwYDVQQD
EygwYjk2MzlhYmIxNjYzOGIxMjY1NTJiMmRmNTdiZGY3Y2IzYjhhZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK8clDn9tqJLpzt0Hxq0Awpj3Nq1
b/S6Lq6DQxGmgl7qCT4rX82NgRP6BXz7srHv/JymBTNO3/N7/5EQTSsDpl41efPe
c6cZ1NagQrsU/KiH9LWNnlwJdG7m4cthDh+yEPJ+GxgTVc/4Q6ZJyjHsXjurahbp
8I7A0UtWi8nAcBhAgPC4gqahNVzigkvwv0K6RWzVJ2Enq8DI+mN3hk3fwuDAK9l9
zyQzeNHUVFPEsDizW82JeT/Q5c18dv3Uwv29kMI9PnqtPScJdR6hT6SFU6MTZHMC
prGJdLbiiXYCAYphYnyMJ/cpDFHCz9RcxXSEXTGP/ocGv4QWKvD54X592QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuWOauxZjixJlUrLfV733yzuK8iMB8GA1UdIwQY
MBaAFKQz4yrAxvpzWmx74UTPo/wpfAuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84NjU5Y2YtZjgyNC00ZjkzLTg2MDQt
YjgxMmJkNTk0NzM5LzEvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84NjU5Y2YtZjgyNC00ZjkzLTg2MDQtYjgxMmJkNTk0NzM5
LzEvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+2X2Dq3
YC7iyDVqTZ1V3aSutaqkIW0dBMVrLfQf8oCzqa/U+p3l7vEelfq9U6CmM6xTGDE5
Wg5znhKMaXBO6q+P9Lw0DaQSowYxYsWFb4DC34K+yS1AIAnCZPJAnGmf2lRMgAwa
eUQzPuEFfKT77XtWrf+pvUND4joHFopTM8hEsB3XCyTKQarMCC71jAgxfhcqFIth
jUdN1/Mr7Y8EulsQdlIS0nYxzwH2dZ2WzSbpUZOtEa/SWkUfWrkIGyMjcb1RopkW
KcVbAjSMRRd2jp//3s/ql54FCKwO/3Fxfbzs4km/foPCZtspOu49/3HQLhfMPkAq
C7oBBtC9qlKX7g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:20:04 2026 by rpki-client