Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: 7kj841dcCJRDIbv7RtrRDqQFc34vJdRWKqCu3awk8CI=
Subject key identifier: 28:82:40:D1:2E:10:65:69:B5:0C:58:72:A4:8F:6C:0B:10:EC:78:CF
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 019F94A4FD2FD9B7BC5DC7D4801C6618B201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 15:01:08 +0000
Manifest this update: Fri 24 Jul 2026 15:01:08 +0000
Manifest next update: Sat 25 Jul 2026 15:01:08 +0000
Files and hashes: 1: JPBii3Hqcq30q25CjK9-h-C44rw.roa (hash: 0nYkKiEoyllpIK9/qO7+AH5OvjbE8XnCXRin+xPio6U=)
2: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: qU9+cNZAj1jDyfp88+a568tu+1ztA/s4km5LCaRxj0g=)
3: qVXn2mio2xGIpazTfAYClCM2JZM.roa (hash: utP7O671cytqXjasGTBwll6HaIxFO1XJW1EluiUhDqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:fd:2f:d9:b7:bc:5d:c7:d4:80:1c:66:18:b2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Jul 24 15:01:08 2026 GMT
Not After : Jul 25 15:01:08 2026 GMT
Subject: CN=288240d12e106569b50c5872a48f6c0b10ec78cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:12:5d:b8:39:2c:e3:ef:c4:43:22:6c:15:
5f:8a:d3:15:44:1b:ac:34:27:a7:3c:30:a8:ab:3c:
0a:b1:5f:6a:a6:a0:2c:0e:5c:66:a5:5e:04:68:07:
d8:c3:29:1a:0b:c9:99:13:a2:4a:bf:3e:59:ad:79:
7a:f7:9b:8f:04:56:ea:5a:ac:a1:be:fa:bf:62:dc:
90:c8:5d:8f:ff:4c:dd:57:0d:82:87:64:2c:90:39:
95:ab:36:9f:73:80:48:65:62:61:93:61:ce:2d:5c:
c9:37:42:68:6a:07:91:7b:76:5f:cc:9c:7b:0e:ab:
ad:99:18:09:a1:3b:6e:11:13:f3:66:63:46:47:95:
c0:57:34:85:eb:32:d5:db:19:f8:cc:34:7f:96:15:
09:11:fc:a2:4f:1d:b2:dd:02:68:5c:7d:31:0a:05:
47:ca:16:f2:f8:71:4d:43:37:58:0b:c4:95:c9:0a:
e7:15:cb:1d:ee:d0:60:9b:90:fd:82:6f:75:aa:e7:
56:6f:04:3a:7a:da:69:72:c8:bb:71:c1:c4:c7:2f:
5f:32:92:4b:bb:d5:4b:2e:e6:d4:e6:91:7b:ae:84:
bb:60:6c:d2:8d:2b:f7:c6:e0:ac:20:15:7c:83:4d:
15:09:da:a4:21:08:c6:d8:4a:33:c0:c8:8c:31:99:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:82:40:D1:2E:10:65:69:B5:0C:58:72:A4:8F:6C:0B:10:EC:78:CF
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:31:c6:a3:1b:ae:fa:34:04:a3:12:37:d3:6f:40:55:36:96:
be:b5:f1:0f:e9:9a:69:c1:37:70:84:b2:79:7e:2c:86:2d:aa:
15:00:ee:de:12:a2:c1:7a:cf:19:5d:93:aa:6f:c8:c7:25:62:
d3:2d:68:07:e1:a0:11:a6:29:bb:7e:ff:36:2e:b4:f9:72:74:
28:49:8a:ac:52:19:c3:d3:7f:f9:22:5b:29:a6:b3:4c:74:c7:
b4:29:ab:55:95:9f:b3:07:2a:9c:2c:e8:63:bf:86:ef:1b:75:
cc:8e:a8:b9:8a:05:bd:54:c0:9c:7c:c3:89:f8:a1:8a:20:e3:
54:29:78:a6:95:0a:56:88:f2:be:a2:97:b7:49:85:a8:66:fe:
90:1e:0d:bb:0f:78:c7:59:78:f4:df:70:ea:d2:80:0a:1f:80:
67:da:f4:b7:2f:10:e0:ca:ea:62:3f:9e:73:55:83:b1:03:40:
d7:95:46:58:1a:f1:46:2d:0e:94:0c:da:01:28:5c:42:f9:5d:
92:09:2e:11:1d:8d:06:e5:ed:e6:af:9d:d9:81:4c:12:a4:01:
d9:fd:ec:fd:3d:ec:b0:bc:b2:85:5d:f2:37:77:23:59:fa:3c:
95:33:0f:82:c0:5b:cb:e8:91:c2:6a:36:7c:cc:0e:2f:13:2f:
13:65:e9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:40 2026 by rpki-client