Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: XBKoQJZo9SF400fLsT7rObomFp/WulpzOXTZGt2x2zc=
Subject key identifier: AC:4D:8F:94:D8:5B:31:4F:6F:43:1F:78:AA:15:D2:69:CF:97:BE:CE
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 019F92ED0AF9B2AD7CD34B9F64254F3A2BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: 05B2
Signing time: Fri 24 Jul 2026 07:00:35 +0000
Manifest this update: Fri 24 Jul 2026 07:00:35 +0000
Manifest next update: Sat 25 Jul 2026 07:00:35 +0000
Files and hashes: 1: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: g12CgBuZKMLw6EKt1+zWFq6AL0NjoUy6EJypHJpZ6iU=)
2: rARCZBQx81Clx2YkjkNrgwNwwGw.roa (hash: m/bTzb/MHtintyTMzTN6NuL6tPs6yNlDmOaQ8Q4iw1s=)
3: z4Ea-_smfK8pY-O7TeNPgzC6Xm0.roa (hash: 1vptVTLhkufvE9Ios5V+HLnfGDLY4lc0acUg7cG/MQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:0a:f9:b2:ad:7c:d3:4b:9f:64:25:4f:3a:2b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: Jul 24 07:00:35 2026 GMT
Not After : Jul 25 07:00:35 2026 GMT
Subject: CN=ac4d8f94d85b314f6f431f78aa15d269cf97bece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:14:7b:8d:a6:5b:51:8c:1b:61:be:8e:ba:
21:12:27:90:b4:bc:58:05:23:c2:40:2f:d6:bd:ef:
07:f0:17:8a:13:91:26:00:bc:c1:2f:f9:8a:3e:e0:
5a:85:eb:b8:fa:d2:96:a1:94:05:fc:e6:7d:99:7f:
58:7b:f8:d2:40:b7:7e:4f:08:e1:46:05:0c:7d:c5:
14:75:97:2e:6f:5c:ef:7f:49:34:43:1b:d2:19:4d:
e3:7b:7f:ea:b3:6d:ae:2c:ca:6e:d9:95:63:38:8f:
7f:8a:e4:e7:94:93:ac:c7:ec:53:5a:40:44:f7:91:
8b:65:c5:5f:11:ff:fb:d0:f3:e1:94:0e:97:4e:63:
36:6e:09:4e:ed:e6:04:56:b2:09:62:e0:43:27:cf:
91:c4:e5:f4:f3:b8:99:93:c9:5c:9b:59:8a:8d:ff:
69:0f:5f:75:3f:41:47:48:5e:b5:27:3b:17:dc:86:
12:bd:5c:b0:1a:22:86:e1:17:4d:84:f4:9e:68:7a:
cd:d5:b6:4e:43:9d:33:bf:bf:0f:8f:72:fc:bf:a2:
27:98:d0:9f:5a:e3:f0:40:3c:18:ec:a2:e3:09:23:
93:e8:78:71:d1:08:1d:0e:9a:2a:ad:83:a7:a6:b1:
75:37:66:a2:bd:4c:86:8f:0a:24:04:ca:7d:41:53:
95:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4D:8F:94:D8:5B:31:4F:6F:43:1F:78:AA:15:D2:69:CF:97:BE:CE
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8e:d8:bd:86:76:af:bc:1d:19:08:ac:5c:f7:56:ff:22:91:
22:c5:c6:cf:15:07:ed:86:09:c4:25:19:97:41:e2:fe:58:ab:
dc:82:59:6a:98:81:a2:9d:60:e0:ef:b7:6d:1f:72:8a:47:87:
10:5d:9a:e6:4f:f3:40:28:ea:f9:bc:13:f9:a5:b9:58:a5:15:
06:44:c2:ec:65:77:fe:f2:4f:60:1e:2a:8b:5a:35:a3:05:60:
ea:2e:5f:d7:29:ad:d3:4e:88:c4:9d:93:24:79:8b:47:fa:7c:
0b:99:ec:20:ba:c9:62:4e:09:b8:00:c3:5c:3a:f3:27:5c:ec:
64:63:32:7c:76:f8:bc:b5:6a:a0:2f:76:f5:66:fa:96:37:d7:
52:8c:2f:30:b8:f1:40:ce:b4:bb:05:4d:c0:b1:f4:b3:68:94:
3e:0b:c7:f7:df:93:26:04:40:d4:db:7f:cd:91:b8:04:0e:cb:
09:ec:ea:99:c0:c1:d3:69:f3:3d:01:85:4a:30:60:00:44:02:
8f:8f:d6:41:f7:77:df:c4:2a:19:3e:d6:59:43:27:4f:b2:f8:
7d:3e:95:45:69:d2:a8:18:34:28:ea:ef:72:e0:9b:d3:a1:b2:
f6:19:87:75:ed:37:92:29:bf:61:49:ad:ba:7f:dd:b5:f4:41:
27:0f:11:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:25 2026 by rpki-client