Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: uAG+u8tM0pQpDTlojq0RPG/OE5nyEYrJNGAkZr5jJvw=
Subject key identifier: 75:F9:FF:F5:A9:A1:F4:2A:A6:57:34:8F:29:7F:D8:3F:79:23:57:45
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 019F954A7986C86C386E61195510CD09FBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 18:01:53 +0000
Manifest this update: Fri 24 Jul 2026 18:01:53 +0000
Manifest next update: Sat 25 Jul 2026 18:01:53 +0000
Files and hashes: 1: FQ8IH5cBqg-duSc2imKOt1dr3gc.roa (hash: zLx5O2JcZIf3WeCO72jwVB0rL1h+cp1I4W0w1x3rEC8=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: ep+lcrAs5wUXQ3czX1+0ymlenYqVUvO5zMIX/zmfKwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:79:86:c8:6c:38:6e:61:19:55:10:cd:09:fb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Jul 24 18:01:53 2026 GMT
Not After : Jul 25 18:01:53 2026 GMT
Subject: CN=75f9fff5a9a1f42aa657348f297fd83f79235745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:0c:da:d1:21:10:54:27:5c:ca:65:f2:00:
3b:1e:ab:41:93:49:a5:08:b0:0c:91:e3:86:8e:82:
30:7e:84:4d:e3:99:6d:00:41:c7:ac:d3:99:d5:25:
f9:f9:94:82:1c:3d:32:6b:3d:53:e1:8f:b1:30:51:
5f:ec:21:17:3f:1f:a0:c0:56:dc:34:38:d0:70:1b:
d0:85:3d:3e:31:fd:78:0b:71:c3:a1:36:5e:06:67:
67:1d:ed:df:55:29:be:ec:3f:62:1c:c4:6f:34:df:
87:24:da:b0:c2:ab:d4:17:b2:ab:6d:64:09:53:63:
b7:ed:b0:9e:75:1c:17:64:f8:5b:db:a3:f2:7a:88:
e6:ee:8f:bd:2c:cc:6e:73:61:50:f1:2b:2d:33:0a:
e0:e9:f7:77:00:f6:97:3c:bb:73:bd:68:bb:ad:ce:
19:74:7f:05:1e:d2:6d:01:60:21:77:9d:33:2a:73:
15:a2:ff:f6:95:2f:5c:d1:0a:bb:d1:81:14:6b:1d:
84:c9:0c:52:7b:1c:02:80:d3:93:23:7a:cf:bd:f7:
fb:82:63:c2:8a:11:9c:96:54:c2:f5:76:9b:68:2f:
dc:30:bd:60:0e:bf:f7:a4:12:4b:96:28:72:b5:00:
08:de:ac:20:74:62:23:77:de:98:ef:21:5b:36:d1:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F9:FF:F5:A9:A1:F4:2A:A6:57:34:8F:29:7F:D8:3F:79:23:57:45
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ed:ee:2b:38:1e:64:11:a8:64:3f:12:a9:bc:59:b8:1d:e2:
54:16:c9:fe:c3:da:ff:4e:4a:e9:04:24:ca:28:b3:48:71:4f:
57:c0:53:aa:89:32:42:4a:0f:e3:fe:b1:e4:cd:ea:09:24:7d:
64:39:ae:03:f4:61:60:bd:f6:16:a0:a4:c3:06:96:7a:69:67:
45:50:f5:e7:51:c7:f4:aa:e1:c1:72:33:0a:f8:24:26:07:db:
c0:00:25:ee:ff:00:43:23:f6:f6:b9:12:4c:81:96:17:d6:1a:
c8:f2:ef:15:02:d0:78:a7:97:2f:24:48:1c:55:bf:d1:92:56:
2d:f5:65:78:63:f0:2e:06:82:ff:46:53:08:50:35:bd:d1:e3:
b5:c1:2c:78:2f:0e:ad:e7:31:30:78:e6:b8:0f:68:bf:a1:79:
bb:a7:dc:fb:43:1d:7f:1f:57:60:cc:75:f4:80:70:95:e3:46:
a4:0b:81:91:27:b0:55:de:19:9e:cd:b8:7c:33:b0:60:62:e2:
41:9e:9c:d2:9c:0a:8f:8d:4d:4e:d9:5d:16:d0:1e:de:8e:3c:
8d:ef:5f:0d:6b:c2:80:d1:f4:5d:6d:37:ae:2f:4b:66:a5:f2:
ea:59:09:24:31:d1:33:d0:cd:87:d7:05:86:2b:b9:91:68:06:
cd:7e:c5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:07:17 2026 by rpki-client