Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: Bjk8EBFihFcZUvtG3oHZkxTF8oI6gRc4F1bctYZhznI=
Subject key identifier: EB:D5:28:2E:6C:A6:5E:D3:A2:95:F6:65:87:FF:37:AB:6E:A0:47:1E
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 019F92B6B5D7208A0FF5E2AE645B3A4B50A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 06:01:15 +0000
Manifest this update: Fri 24 Jul 2026 06:01:15 +0000
Manifest next update: Sat 25 Jul 2026 06:01:15 +0000
Files and hashes: 1: 8xpf1H5jnrklNTBoaVn0u85Fw00.roa (hash: xVZEKXXOjsh0YBdOeRbRNQ2rIeuGE/aopxCQhkfvBRc=)
2: k1f4H5R1t7ioWxpD9zQTzDGVw34.roa (hash: UazRYiujjVi7Q1FCel0edXG5MOLygjSQmvy3K0uCobk=)
3: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: o3okr3Lj+R1mQ3dP7LJXnCgpeq/EacWilEWsBXG/OZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:b5:d7:20:8a:0f:f5:e2:ae:64:5b:3a:4b:50:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Jul 24 06:01:15 2026 GMT
Not After : Jul 25 06:01:15 2026 GMT
Subject: CN=ebd5282e6ca65ed3a295f66587ff37ab6ea0471e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:0c:d0:c2:4f:a0:cf:4d:17:40:38:06:5c:
5b:af:7c:93:0e:13:a8:40:0a:81:41:a5:e7:58:3f:
87:8a:52:db:87:82:5a:86:8b:b9:df:3a:5f:f6:ee:
07:cc:6f:75:f8:b1:a3:05:83:61:94:a6:f5:39:6a:
1a:6f:5c:77:27:51:4e:7a:21:1c:96:61:38:68:f0:
b3:00:01:a8:55:8e:b2:ae:bf:05:aa:b4:c7:5d:5e:
4b:5e:8e:46:fd:0c:1a:81:48:8a:f3:26:34:6b:88:
3b:dd:17:0d:52:48:60:e0:b2:2e:8a:6d:ff:c9:a4:
33:c1:e7:66:c8:ec:af:52:77:8f:c5:62:f9:28:70:
f6:63:86:e8:38:0a:87:d0:a0:36:a6:2a:1c:10:02:
b7:b1:da:67:f6:01:d5:5b:71:b9:eb:ec:17:83:f1:
bd:30:90:bf:41:b5:98:eb:12:90:80:a4:35:4f:20:
de:7b:ae:45:5b:bb:c0:79:be:fb:c6:46:f0:b1:44:
e5:19:17:03:18:e1:d5:ce:7d:d3:de:91:0a:38:9c:
0a:82:f1:88:4b:e6:c1:8e:fc:c0:b4:d3:18:04:28:
9b:d0:8d:d7:9e:82:16:f5:ba:2c:d3:c7:06:f2:78:
db:fd:ec:8e:67:14:6e:99:53:c9:80:5c:81:b4:9d:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D5:28:2E:6C:A6:5E:D3:A2:95:F6:65:87:FF:37:AB:6E:A0:47:1E
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:61:d5:a7:99:75:1c:fc:b6:3e:e4:80:da:d9:b9:6b:db:4e:
54:21:e5:fa:8c:19:81:ab:3b:bf:cb:f9:5d:ba:74:11:ee:51:
58:6d:c9:25:d1:8e:7b:19:51:58:7b:a5:d8:22:b1:30:71:c6:
3a:5f:a4:45:ed:be:d0:3a:fb:da:c4:91:94:c6:27:26:91:7e:
e4:15:4b:0a:74:a8:c0:b8:da:4f:70:31:7c:24:82:aa:a2:68:
e9:c1:ac:e9:25:98:84:8e:59:18:c5:19:39:2f:e0:73:e4:93:
d5:a5:4b:f1:0a:e5:ba:b9:7b:c6:be:9e:f7:cb:85:37:6e:d7:
64:44:2a:80:43:8d:ea:56:97:35:a4:97:b6:3a:d6:a5:1e:62:
19:e8:6f:bf:60:4c:c9:c7:87:de:70:6d:cf:18:d4:fc:d7:88:
8d:34:47:89:15:f9:a5:fb:e5:81:d5:33:3b:46:30:fa:05:3a:
f3:de:a6:2a:76:9d:8a:60:a3:1f:ca:2b:ab:5b:ef:c4:ca:7c:
e4:fe:75:52:c3:41:c2:bb:45:d9:04:4b:e3:4a:9c:01:30:93:
96:fc:a3:c7:b2:14:41:82:32:7e:08:cd:68:a4:a1:35:a0:ac:
eb:fc:68:c3:4c:e2:5d:f2:7e:7e:98:ce:42:a8:b3:41:e8:5f:
78:c3:0e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:56:09 2026 by rpki-client