Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier: 3HktykEMIKbkhZwpS+1dJHNdRnJYVccmDAH+ZDlVlN4=
Subject key identifier: 67:63:38:6C:74:D7:4F:EE:45:30:A8:15:3A:A8:E9:BB:16:F9:14:31
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 019F9549F637CFCB267492E50DFA32BBEBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number: 0F4B
Signing time: Fri 24 Jul 2026 18:01:19 +0000
Manifest this update: Fri 24 Jul 2026 18:01:19 +0000
Manifest next update: Sat 25 Jul 2026 18:01:19 +0000
Files and hashes: 1: Z8sIth2fuLtbZU5YZYofujl3N3Q.roa (hash: OuZ+DZI7vPFF2f+5cYLFAwbQ08o0C2E+Uzidod1oA7I=)
2: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: /3cgZ+SU3bvL48aX/tW+aSJgk6ckmibqCchlzEYGjRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:f6:37:cf:cb:26:74:92:e5:0d:fa:32:bb:eb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Jul 24 18:01:19 2026 GMT
Not After : Jul 25 18:01:19 2026 GMT
Subject: CN=6763386c74d74fee4530a8153aa8e9bb16f91431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:45:6d:4c:95:5d:4d:2c:71:e4:0a:78:09:
49:48:82:6d:80:b7:dd:57:ca:fd:85:09:f9:33:5e:
14:e7:4b:3d:4e:01:4b:cd:4f:62:4c:5d:ac:19:db:
01:f1:4f:dd:91:d3:6d:b0:aa:58:3c:f2:ee:7b:f1:
47:3c:9a:60:c2:f3:66:c9:1e:f1:dd:52:17:ab:12:
19:f3:93:64:ad:ce:21:0c:10:53:60:d6:87:f7:f4:
35:44:f9:69:65:2d:f9:68:c8:9b:81:c2:47:f1:c0:
f4:fa:f7:e3:b7:5a:32:f0:1c:7f:27:3b:f4:e2:c3:
c2:a3:c7:08:0c:91:df:3a:03:5b:99:1b:b1:00:61:
cf:00:a0:17:2a:2e:60:29:fc:36:57:32:16:f3:6c:
fd:08:de:e2:25:e5:a3:c9:10:a9:bf:82:e8:5e:ac:
de:c9:1f:35:23:7d:e1:44:56:d3:6d:47:de:49:f6:
f7:2a:e8:cb:f4:34:2e:d0:2d:f2:5e:16:a9:3d:a1:
48:3e:02:d3:dd:f1:68:86:db:ed:fc:48:b8:be:3d:
ed:a7:9c:f3:77:39:47:43:e7:a8:b0:f1:3c:d5:e8:
24:62:bc:9a:30:6f:16:8b:e8:32:c8:14:90:db:87:
40:d8:90:09:b1:d3:ba:2e:3e:d6:ef:28:e2:70:b8:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:63:38:6C:74:D7:4F:EE:45:30:A8:15:3A:A8:E9:BB:16:F9:14:31
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:43:5c:88:05:1b:c6:b6:17:a2:99:b1:07:72:37:92:97:7c:
70:29:fa:f7:e2:eb:48:9f:25:d7:36:7e:51:a4:6f:33:4f:63:
7b:70:71:46:26:88:88:a4:9f:d3:cb:8b:20:0f:26:59:64:4f:
fd:4f:8f:cf:dc:b1:1c:c2:eb:3a:f3:ca:4a:29:98:a0:8c:84:
d7:01:44:ed:28:b0:5e:0b:ad:21:3b:e6:0b:f1:59:41:ac:04:
24:30:f2:f0:73:59:f3:b2:89:12:8b:86:f3:33:3b:89:d4:20:
eb:8e:76:23:a6:49:81:4b:a5:3f:ab:2a:49:16:9b:8a:92:4b:
f6:ea:ac:78:35:ec:ff:11:a1:6e:79:64:0f:18:e6:f1:50:33:
ed:ec:83:ea:4d:9c:69:ad:d1:26:c1:b5:4f:fb:c1:80:35:ba:
4e:5f:3e:7d:70:a0:69:57:53:47:ef:2e:b3:30:c2:14:d5:ce:
06:83:0b:7f:98:ed:94:c1:be:1a:ca:ea:b4:ab:76:04:53:43:
45:82:94:63:19:24:0d:95:84:2d:43:e8:f6:e8:d9:dd:00:5f:
af:f6:ac:b2:ec:1e:bf:a6:d8:4a:d5:fb:53:b5:2d:ac:2a:b0:
6a:73:dd:9b:48:1a:dd:da:4e:6a:3f:2c:21:a0:63:55:cc:66:
69:b4:19:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:39:10 2026 by rpki-client