Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json)
Hash identifier: LK6EKCuBl8cVJrIuhL3N9uZQEIfmUcTRAXEicNkPGho=
Subject key identifier: 27:03:AD:D1:9A:ED:96:3E:B9:CD:6B:48:A3:F1:38:6F:8F:80:F5:AD
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial: 019F916CF088A82D0E046DA206625D6AE8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
Manifest number: 065A
Signing time: Fri 24 Jul 2026 00:01:03 +0000
Manifest this update: Fri 24 Jul 2026 00:01:03 +0000
Manifest next update: Sat 25 Jul 2026 00:01:03 +0000
Files and hashes: 1: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: IoxUtPC6Bsoe6//h7AN2t4lQNmSTjm651i6U1PDjlSo=)
2: t83QwmnsF94N1e2quVeWFqxv3Q4.roa (hash: S00r80MkvAcmYicBdHFKql/0j/7ix5B+Lwxl0Q6uMXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:f0:88:a8:2d:0e:04:6d:a2:06:62:5d:6a:e8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Validity
Not Before: Jul 24 00:01:03 2026 GMT
Not After : Jul 25 00:01:03 2026 GMT
Subject: CN=2703add19aed963eb9cd6b48a3f1386f8f80f5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:fa:60:5a:1c:b4:cf:e0:1f:5c:3f:de:e9:
c0:b6:72:95:db:56:84:51:49:3f:5c:cd:e7:7c:fe:
57:a4:ba:fc:c6:57:ee:e3:12:bf:2e:d5:79:c9:55:
85:a2:49:8f:26:74:4b:06:00:a1:78:2b:c0:6d:f9:
22:d2:d2:ee:d3:bc:07:f7:a6:4c:95:ba:3b:e0:6e:
87:a4:c0:08:61:c9:d3:29:1d:66:4c:59:d2:4b:8c:
e3:5c:4e:9a:a1:b8:25:17:84:ee:73:a0:12:bb:50:
93:d4:02:50:03:1c:4c:42:73:01:e1:6f:12:2b:5f:
6f:88:fb:a2:ba:04:c4:2c:a8:8e:0e:cf:e3:5c:3f:
0b:af:b8:77:4d:88:e2:f5:a3:c5:71:81:9b:e6:55:
97:5d:e7:11:53:55:bf:63:fa:ec:34:a1:92:48:1b:
40:fd:c3:06:12:16:1b:24:a5:2c:f7:19:a2:40:7f:
8e:e1:ee:63:2f:29:3e:69:0d:fe:b2:ca:d4:bb:c5:
9b:82:42:d1:10:d4:32:99:3c:64:69:36:e0:d2:c5:
40:09:92:66:65:94:52:ea:03:7e:3c:db:36:a2:1f:
70:95:18:b6:00:3a:d3:67:45:50:00:27:84:fe:99:
13:4a:1b:44:6e:bf:9f:67:9e:f5:e6:18:6d:5a:5d:
76:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:03:AD:D1:9A:ED:96:3E:B9:CD:6B:48:A3:F1:38:6F:8F:80:F5:AD
X509v3 Authority Key Identifier:
keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4e:6a:38:aa:aa:91:f5:13:b6:b6:a4:b4:ee:dd:8f:8a:f5:
f8:87:57:23:95:6f:b5:7d:6d:81:f2:65:b4:ca:41:fc:cc:11:
ae:65:79:c9:91:be:88:4d:62:94:c2:56:1f:68:07:79:89:49:
95:c6:38:2b:eb:a9:59:ea:70:aa:9a:28:ba:2d:8c:3b:84:54:
8e:99:71:f1:e1:f6:25:e1:0c:dc:4e:25:57:e0:32:70:e6:74:
39:30:ee:17:e0:17:e7:18:8a:90:ec:1b:73:d0:fd:fb:8f:39:
a1:47:16:52:14:38:98:78:00:f8:e3:6d:24:0c:5a:de:da:8b:
ab:b3:1b:36:36:6b:d8:62:81:11:ed:78:7f:5e:ab:e6:99:56:
a3:d7:72:33:a5:0d:30:e9:37:2b:40:7d:7d:68:94:7d:dc:f3:
f4:db:9e:9b:df:72:2e:3e:c8:fc:1d:6f:49:3d:b2:5c:7b:e2:
9b:55:5c:db:e8:2c:2d:79:fc:cb:22:c9:91:34:c3:9e:01:f6:
22:59:40:f6:04:e8:c9:43:47:d2:94:85:99:5e:50:d2:22:fa:
6f:14:ea:52:e6:f8:09:33:1a:ca:5f:bc:b8:43:7c:45:97:72:
e0:c0:3b:0e:92:4a:4a:0d:bd:c7:a3:35:60:74:6a:c3:2a:2f:
a6:16:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:07 2026 by rpki-client