Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
File: pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft (raw, json)
Hash identifier: V+/rbWVmcT0bU0w1sBoVbPO8tD/Bq9XmZZo/2Y083i8=
Subject key identifier: 2B:40:8E:6F:77:13:39:51:11:CA:F1:F3:AB:18:36:58:C4:9D:CD:6A
Authority key identifier: A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
Certificate issuer: /CN=a4537cbedad356819cbc77ae3fca17d65431c280
Certificate serial: 019F935AD7744FC11B34AB19109EEC7BF768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:31 +0000
Manifest this update: Fri 24 Jul 2026 09:00:31 +0000
Manifest next update: Sat 25 Jul 2026 09:00:31 +0000
Files and hashes: 1: AmJH-oKP8JDfCGjtvLBdScjcl94.roa (hash: JYSfH/iBbNzkn+YYYr8OyA3qLrDl+3bHlmfyOFI1Y70=)
2: BnfQ_AzrFoZh3KLGYso6JJ9GXdo.roa (hash: ENsW9JPhfPIhP5yk5NQtzakTi0pxm6wJtb9Q7w/b4ZM=)
3: FBnng7ak4AJweaj7mNiiDGPhP-A.roa (hash: 7O6BMYqqhyaPH6JejfjvmE43i9bE4Safke5zHGTaAxk=)
4: NwJicw-oNTpUA4v64y45-zeOf4g.roa (hash: INZDhCKr9gd0n290T2UKiTgj0PQTfi5Y3hHK5PYeBA0=)
5: aZqL4PQIRKXk-Nf9g8MWjRBJYWY.roa (hash: oswi/PqLXiY69b2lF56784lBrhIisxDRepTm/CrpEY8=)
6: pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl (hash: z88vHlkckSuq/58o3nU4cXfLl5fjqAa9xWO2RKMC9fE=)
7: qThwM4VOPtwJ-fORifwyTLzk-FM.roa (hash: inwDpdNUtTVuD4hxozBiGnVD6vXL05h5rizEBbo4mSI=)
8: vlQgVNHMOMDCgexHalesjIDPMos.roa (hash: NKNm5ZfHR4kcXtf4m4rKT2uIMrcP5kuQXn9iZz+SX+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:d7:74:4f:c1:1b:34:ab:19:10:9e:ec:7b:f7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4537cbedad356819cbc77ae3fca17d65431c280
Validity
Not Before: Jul 24 09:00:31 2026 GMT
Not After : Jul 25 09:00:31 2026 GMT
Subject: CN=2b408e6f7713395111caf1f3ab183658c49dcd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:e9:7c:78:64:79:df:14:a0:c3:58:c8:2d:
c5:8c:34:88:34:c3:01:e9:9c:c4:1b:29:c2:82:f6:
c4:45:95:e7:83:a7:57:14:54:2d:6e:6d:ad:9f:30:
93:29:09:10:e9:89:92:b4:94:76:0a:af:98:1b:21:
8d:8f:1f:01:b1:1f:01:7a:68:7f:c9:2e:a5:aa:65:
e1:99:6b:ec:07:ab:5e:7c:4e:b9:86:4d:6e:96:c0:
37:4d:0f:88:d3:8b:cc:12:7c:c1:49:c0:5b:f8:9b:
ff:a0:48:84:cf:d9:71:cc:cc:b3:fb:c1:54:43:a0:
7d:a5:26:59:8a:d7:27:f1:33:ab:92:c2:47:3e:35:
57:77:fc:49:5f:7b:c8:7b:bb:2f:d2:df:cc:ee:f5:
30:d9:2e:a3:52:54:35:24:56:75:68:74:7c:7f:84:
c9:da:2e:a0:77:ea:bb:0c:22:c7:83:63:d9:1d:9d:
6a:65:c9:f1:f2:d7:af:23:93:94:c5:49:8f:34:c2:
6a:9b:58:e8:ed:b3:00:d0:5e:f1:cb:0d:4b:46:ad:
84:78:7a:7c:bb:c6:80:d7:62:60:d0:bd:ae:f8:ba:
be:aa:c7:f5:d5:c7:4e:23:6a:67:06:e8:e8:a9:1e:
35:2e:86:5a:ae:81:17:d7:65:a5:ce:ec:bf:79:ef:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:40:8E:6F:77:13:39:51:11:CA:F1:F3:AB:18:36:58:C4:9D:CD:6A
X509v3 Authority Key Identifier:
keyid:A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6b:6d:14:24:23:b8:d6:10:ac:0e:4c:f0:61:25:60:f1:2e:
5c:c8:cb:9a:09:cb:32:67:59:dc:2d:c7:03:e1:8e:7b:24:94:
fd:ae:38:da:29:2a:24:89:6a:5e:c7:fb:01:2b:c5:9b:cb:82:
13:c9:15:3f:2f:66:69:15:f6:a7:59:90:b4:0c:73:45:60:30:
ec:7b:5b:05:f6:a2:ba:4a:c5:61:ea:fa:57:9f:c2:7e:f7:ba:
35:00:66:ea:55:ab:a3:6f:e9:49:1f:96:50:80:e0:ad:01:60:
54:7d:16:dc:e2:1d:b2:ab:33:9f:7e:98:04:a2:98:29:fa:b8:
9a:39:96:40:d2:a4:2a:99:55:64:a5:32:ca:8b:2a:f3:2b:30:
73:2b:0b:63:64:63:ed:12:47:46:31:23:6e:83:dc:05:6e:1d:
07:d6:81:79:5b:06:e5:14:bc:3d:15:be:22:4a:19:d0:80:6d:
95:a5:a4:b5:51:7b:73:38:3b:e4:fb:b8:63:2a:6f:4f:69:3f:
d0:69:6f:2f:8b:87:57:18:34:a9:7a:a7:5a:9b:27:7d:24:e3:
73:78:d5:cb:a7:1d:b3:f7:ac:e2:1e:0e:5b:b3:98:63:a4:a5:
c0:2b:9f:0c:8d:01:8b:35:8a:73:81:54:e9:13:29:01:41:1f:
83:91:c8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:11:48 2026 by rpki-client