Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: /WPoMYXDXt37Xv1FNOS6QzVTm7wcPoR0qC9WRLExVkg=
Subject key identifier: D4:17:8A:A8:71:5B:9C:6A:00:89:E5:A4:5B:DF:01:8B:22:D3:76:0B
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 019F91DAADFC2F647C9459B5450B3E19669F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0E28
Signing time: Fri 24 Jul 2026 02:00:55 +0000
Manifest this update: Fri 24 Jul 2026 02:00:55 +0000
Manifest next update: Sat 25 Jul 2026 02:00:55 +0000
Files and hashes: 1: UycNDBh6XIKJ82eOMM9nsWm3RUU.roa (hash: j5CuV0Ecvfd3t9K7/xrfKK4OIBdyHHKPYNpzUJ5l9jc=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: mIy290Gc50XGe065meQILYnJj30vR4z1tTOU5jbKhyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:ad:fc:2f:64:7c:94:59:b5:45:0b:3e:19:66:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Jul 24 02:00:55 2026 GMT
Not After : Jul 25 02:00:55 2026 GMT
Subject: CN=d4178aa8715b9c6a0089e5a45bdf018b22d3760b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:f0:22:65:0c:1d:72:c3:95:c4:8c:29:5b:
f7:32:db:6b:4c:5b:cf:fa:25:13:4d:ff:27:2a:57:
07:e6:ad:48:eb:d2:e0:9e:50:56:45:18:a5:61:82:
a0:e0:42:88:7e:9a:2f:17:b4:14:65:60:0f:2a:f8:
29:0e:56:25:33:d5:9f:e0:4e:3a:c5:c8:d5:24:f6:
c4:7e:5c:b6:bb:03:b2:72:4e:26:89:82:a7:6c:20:
7d:6a:f5:da:e3:70:c6:a5:a1:56:3d:ba:e6:74:26:
42:41:e1:d0:02:86:0d:1d:b8:0a:36:54:0d:f9:b7:
f6:1c:b3:6d:38:00:ab:39:aa:27:2e:63:b3:e6:72:
b9:a3:86:f9:dd:5d:d4:2f:02:b0:5a:56:bb:24:ed:
8d:2b:36:75:8b:3b:f6:99:6f:15:94:75:e9:6e:90:
69:a8:2d:cf:d7:57:c1:2f:76:01:78:37:08:82:b3:
33:e2:31:5d:d8:f2:42:dc:0b:ea:e8:c0:22:c4:3c:
b0:f4:ec:84:9a:d5:92:e3:87:59:88:67:15:69:bc:
d5:91:10:48:f3:43:66:54:9f:43:b6:2a:28:e1:78:
fe:8b:38:aa:6d:ed:37:90:ba:28:f5:f3:d4:2c:1a:
ca:bd:32:e5:ad:9a:32:da:18:61:d9:07:de:16:63:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:17:8A:A8:71:5B:9C:6A:00:89:E5:A4:5B:DF:01:8B:22:D3:76:0B
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3a:31:e0:96:aa:76:15:a4:f2:ea:87:df:78:f2:11:09:29:
65:92:60:51:9d:76:5b:a7:4b:f0:2a:ce:35:51:09:18:7c:af:
a9:fd:04:52:7d:71:45:c2:5d:ad:f9:2d:d1:89:f1:df:74:64:
7b:58:27:c7:51:88:63:8a:45:f6:1f:a9:80:01:1c:e2:82:ab:
2e:24:37:d4:3e:22:7d:fe:42:35:8f:f2:25:8f:65:d0:22:5c:
67:19:3b:bb:33:40:ea:7f:a0:43:88:70:d3:be:95:d8:79:1f:
aa:49:7f:4b:ee:f0:33:2f:38:c0:d7:27:a5:17:f8:84:fa:66:
9d:b9:17:49:4e:b0:36:31:0f:64:7a:49:b0:a5:2e:91:c3:a7:
1b:90:74:ff:7d:55:ba:ba:52:f1:33:69:60:d0:c4:ce:8d:11:
d7:37:64:c5:da:5b:3e:10:75:ed:3b:60:c3:68:f3:72:c0:4d:
ca:28:4b:65:72:5c:d5:cd:a8:b8:87:4a:98:7b:fb:d2:d6:99:
d4:e0:d1:85:05:a9:ec:71:1d:18:eb:4a:2c:ab:20:e7:d3:8b:
d3:93:cf:e6:b2:32:01:de:d9:c4:6f:49:f3:58:50:6f:f0:81:
90:37:1a:85:55:97:2e:7b:25:49:1f:2d:66:ca:59:2e:a1:d1:
3f:d8:cb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:53:56 2026 by rpki-client