Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
File: PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft (raw, json)
Hash identifier: Q5Fgc7fF2BrBFVpx2MRAp9PdUsyMjhRQ1jj17FYlO04=
Subject key identifier: BC:07:AA:D8:40:1F:55:9C:70:C5:FA:CC:1E:2D:77:2E:8A:B1:F5:BD
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial: 019F92482C0DB315F16EE94C653B3F6581E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
Manifest number: 13D4
Signing time: Fri 24 Jul 2026 04:00:31 +0000
Manifest this update: Fri 24 Jul 2026 04:00:31 +0000
Manifest next update: Sat 25 Jul 2026 04:00:31 +0000
Files and hashes: 1: 7XPR057HTONIllGtY9NijiuY-tk.roa (hash: rKfjiDRkcr3HFT8PmmA3P0sCBQ3drFmQ5QDnLKCb/BE=)
2: PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl (hash: b/HCFjBfJdyuGV4vIF0JIerjBR9KwRzrFR7j6PTmYRs=)
3: T4FApCxhFe83q9A7YZlC1nZYzIE.roa (hash: LjUt5usAgPWHNriSJWMg7OS8Oagi6w46/dUqLi/UEzA=)
4: Wn-ZLE8xGx2iUZq_8EgFIe3BY1M.roa (hash: SwGxPAdfidv7O5nNS+nKj4I72Qs5sJPeTh9qbwfsZWo=)
5: YuGYvjrFzLezHsgzIUZ0asWCqVk.roa (hash: aZLneGXD5YvsOe9tvMiGcrBxDYxxGmpY4vDCZwd72Z8=)
6: fLae4aR9HsO6ApeohQnbJHEsvgg.roa (hash: /b3Xi59hV2RbWadggK4I0wXvCWO8lTHkzV3V9hJ6K0Y=)
7: jccKxXf-KlBy0OODUdeGAP1Pln4.roa (hash: kXcgJH+D8EkeDblDPw+VtydCo7evj5I/OxvPnwmyUe8=)
8: r2cUyHBMaewNpNV3po9MOZwNcyU.roa (hash: SVkhtUySEPUVdVwXoSgDIclbqsQ0muf2pONZTDoO/YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:2c:0d:b3:15:f1:6e:e9:4c:65:3b:3f:65:81:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
Validity
Not Before: Jul 24 04:00:31 2026 GMT
Not After : Jul 25 04:00:31 2026 GMT
Subject: CN=bc07aad8401f559c70c5facc1e2d772e8ab1f5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:7d:00:45:86:65:a6:2a:ff:be:85:b6:25:
a2:3b:4b:5e:93:51:bf:2c:29:80:b9:b1:7c:99:4f:
02:46:3a:fd:d3:3e:42:47:c6:6d:d3:1f:e4:27:91:
43:c8:a6:0c:d7:5a:d9:c9:d0:a9:7b:4d:3f:d6:d7:
2d:0a:0f:94:30:59:1c:14:a3:3d:b2:97:57:c7:79:
d9:e2:47:4f:2e:bc:6a:7c:e5:15:e8:e8:8a:fe:3e:
c0:f3:05:4b:03:00:df:32:a4:52:26:a0:ae:0d:61:
2c:dd:12:46:b0:f2:39:be:4d:e4:cf:a1:75:ba:8f:
db:28:dd:4a:d1:38:35:08:77:ec:be:ac:81:7a:e1:
31:b5:4c:7a:e8:7b:57:76:e6:79:49:f2:28:72:1b:
cd:d7:cc:9c:66:99:ce:a6:5e:66:eb:50:d1:dd:75:
3e:be:c5:5f:b7:77:03:5f:ee:93:f1:62:63:c0:9f:
b6:82:23:b7:5d:c9:1f:97:80:07:10:d4:3d:79:d0:
7a:fe:c8:60:db:8b:a1:22:1e:a2:c6:db:4f:2e:09:
c0:2f:0a:ca:70:f7:f1:b3:55:79:9f:02:57:31:e7:
41:9c:2f:1b:2f:3f:fa:e5:32:8b:60:ca:54:40:33:
d8:9b:58:6b:4d:03:77:66:da:8c:7e:c8:b5:4f:e7:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:07:AA:D8:40:1F:55:9C:70:C5:FA:CC:1E:2D:77:2E:8A:B1:F5:BD
X509v3 Authority Key Identifier:
keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:28:31:38:13:a9:31:ce:58:0e:fa:9b:5e:1b:82:4e:bc:72:
98:0c:68:86:af:4b:a1:0c:a3:66:64:ea:16:b1:91:cb:34:f1:
a0:3a:d0:ac:ef:22:37:56:f9:40:4e:f0:af:14:43:c4:47:77:
03:53:0e:f7:ee:75:2b:97:45:d7:89:ec:f8:d8:5c:3c:3a:30:
be:d3:6e:f4:3d:35:67:f8:2b:c3:db:d4:ae:95:b5:4c:48:d4:
0b:d3:df:8e:4b:32:28:b8:40:5f:6a:af:26:0f:0d:97:cf:96:
c8:21:61:75:0d:f5:0c:d0:c1:a3:1a:ec:59:8a:56:ab:f8:45:
d2:20:b9:10:c8:b8:ac:21:5d:3c:93:12:a6:e8:05:8c:f3:22:
e6:ec:45:33:43:0d:c2:8a:ad:de:29:c0:fb:34:10:17:56:30:
64:f0:ee:8e:0c:74:16:fc:c8:31:28:f7:67:36:ff:4c:c5:fc:
cb:7e:2c:65:53:6e:5c:bc:9c:27:25:b6:df:a4:5d:70:78:d6:
7e:dd:6d:75:2b:8f:e3:eb:79:a9:3e:d0:d1:e3:2f:6f:34:d1:
2e:86:e4:28:6f:36:ed:bd:40:6e:a2:41:bd:55:6f:f1:f4:2d:
1c:a5:91:f0:67:65:a8:18:d6:56:21:90:7c:59:73:c8:2a:d6:
1f:60:94:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:12 2026 by rpki-client