Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: A2A84jz4iITbv+ZFgJQ3OK4/gegrBPR8eCzKD+R3nVY=
Subject key identifier: 56:B9:C1:D7:3A:B1:55:C9:D8:5C:6E:CF:B3:51:31:E8:F9:6B:AA:60
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 019F94DC2B9E600F95B19B6BB15D79575338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 089E
Signing time: Fri 24 Jul 2026 16:01:24 +0000
Manifest this update: Fri 24 Jul 2026 16:01:24 +0000
Manifest next update: Sat 25 Jul 2026 16:01:24 +0000
Files and hashes: 1: 1FR5ZpZwPSxvOqUqxpmnyVdoI2Y.roa (hash: Uc2np6So5kLYsA5QE2lGHUyNPrOYT/fABQqkzzDnXDo=)
2: Z48YcacIdaFOrbU7hl0nBrBdOnE.roa (hash: mNCCj8yHct24e5aYcSn4spJlToJ33LdwEpzI7Aa7J4o=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: 0V22EPe2DdM/hjHKOktn/JyghkK3pysVp81d8Jvs6Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:2b:9e:60:0f:95:b1:9b:6b:b1:5d:79:57:53:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Jul 24 16:01:24 2026 GMT
Not After : Jul 25 16:01:24 2026 GMT
Subject: CN=56b9c1d73ab155c9d85c6ecfb35131e8f96baa60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:ac:39:10:7a:63:fc:85:3d:d4:7f:d7:55:
62:f2:c1:96:41:c9:43:0a:c5:95:91:8c:95:30:bf:
af:0e:65:8d:c7:44:64:c0:ba:41:b4:73:1c:11:92:
15:47:6e:14:23:a1:25:88:4b:f6:af:45:01:eb:12:
1f:0a:7c:20:d8:67:ee:97:81:0b:37:c8:31:3f:d0:
9c:8a:20:7e:d6:2a:05:41:59:d0:c0:d3:3b:57:11:
d2:be:7d:bd:7a:df:a8:08:bd:dc:c4:b3:77:fd:eb:
18:8c:3e:42:dd:93:b5:be:86:e5:f7:9d:9f:10:2c:
78:b0:67:b5:fe:2d:fb:78:6b:a7:0c:37:65:aa:b0:
df:1b:de:69:d0:79:11:63:4d:4b:de:e4:58:81:49:
88:b4:2b:bd:f5:c5:38:93:09:1b:b4:3e:12:1a:f8:
b1:d2:7e:a7:a4:29:8c:d9:22:95:0a:9b:47:f5:bb:
44:cc:a8:1f:fd:39:3b:09:f0:58:8c:20:a4:79:c9:
bc:b1:7a:f9:b6:f0:cb:64:52:8c:83:d8:9a:25:d4:
99:36:d8:04:19:be:1a:d9:55:7d:76:dd:dd:2a:8d:
9b:22:32:66:71:58:ab:68:90:c2:22:ef:ab:cb:61:
59:f8:0f:54:a9:d8:92:98:72:4f:8c:0b:b4:0d:49:
6e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B9:C1:D7:3A:B1:55:C9:D8:5C:6E:CF:B3:51:31:E8:F9:6B:AA:60
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:88:bc:bc:f7:c5:d1:3e:3e:79:3e:14:d9:b3:2b:20:3d:cb:
9d:88:7a:88:0a:4a:d9:53:0d:4b:ed:d2:a7:c7:c6:87:6e:f6:
0c:81:33:9b:2d:f0:ee:8c:ae:b4:98:3c:a6:3c:d1:0d:b4:cb:
03:e2:d4:30:7c:79:6b:68:5a:d9:62:f8:f1:b0:a3:70:2e:8b:
0c:ca:ed:8c:47:a6:c0:73:96:8f:f4:4b:75:9b:c3:38:52:ce:
43:da:e2:cb:d3:b7:11:6e:8c:2a:1d:4d:6b:cf:a9:16:8c:99:
8f:f8:d7:d0:83:54:35:aa:44:ff:5e:ff:cb:33:18:33:af:34:
32:b0:1b:ee:e6:e1:78:7b:99:71:21:2c:02:6c:42:92:e2:ff:
d2:48:c9:a8:6a:58:d0:d1:a7:d6:25:e4:32:32:c5:a5:10:9c:
e1:a0:33:bd:45:3a:70:cc:61:95:74:c1:7e:ce:48:49:66:96:
35:44:15:44:11:84:5b:59:c3:46:a5:12:4c:7b:3a:1c:d6:c9:
84:99:5e:e9:0e:f4:f1:be:23:75:54:f5:b2:23:c1:3b:01:72:
b2:06:c6:3f:68:72:be:86:71:a9:6b:a0:ee:fd:83:9c:a7:4a:
12:14:54:9c:a1:95:0c:28:95:dc:d3:ab:47:09:61:47:51:65:
e4:49:1e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:57:25 2026 by rpki-client