Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json)
Hash identifier: Wny4CqKWaRquqV5B4ey1YiF7sfb0G2w/7dnid+LLF8s=
Subject key identifier: A3:76:E6:87:F2:76:3F:BC:02:18:F4:F5:59:85:0A:B8:6B:93:4C:8A
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial: 019E1EA328D61142BEE5061B4C508153FFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
Manifest number: 059A
Signing time: Wed 13 May 2026 00:01:09 +0000
Manifest this update: Wed 13 May 2026 00:01:09 +0000
Manifest next update: Thu 14 May 2026 00:01:09 +0000
Files and hashes: 1: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: PtN0sev0o0uVOiTIkNq/WYEBSVAgV5sIYETK36JzomI=)
2: t83QwmnsF94N1e2quVeWFqxv3Q4.roa (hash: S00r80MkvAcmYicBdHFKql/0j/7ix5B+Lwxl0Q6uMXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:28:d6:11:42:be:e5:06:1b:4c:50:81:53:ff:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Validity
Not Before: May 13 00:01:09 2026 GMT
Not After : May 14 00:01:09 2026 GMT
Subject: CN=a376e687f2763fbc0218f4f559850ab86b934c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:a9:88:ef:5d:7c:19:a0:fe:cc:8b:38:e5:
b0:bc:76:7e:63:b4:c8:9a:56:de:b1:c0:4f:1d:7e:
54:3d:be:82:f2:cb:f5:ec:c3:71:19:4d:a6:f0:6e:
bb:4a:39:55:04:2c:e4:37:25:ba:98:98:3d:75:7c:
df:c1:67:56:75:f8:54:72:bd:c0:0b:58:26:c8:84:
fc:15:18:4e:43:a6:7c:ea:7b:5d:da:3f:82:30:80:
6b:7e:03:37:e9:8e:4b:a1:ab:ac:58:f8:f1:cb:e4:
60:63:dd:71:cf:4d:06:15:94:94:6d:ac:26:39:69:
d2:f2:a0:38:13:8f:77:ab:54:94:b0:80:d8:13:df:
4c:1c:bb:bb:b8:c8:02:62:82:b8:90:42:f5:d3:fd:
80:97:c3:b0:f2:ef:da:7c:4b:6c:54:1f:a2:a5:29:
9e:ea:aa:95:c1:df:98:79:f4:e9:e3:de:a5:3c:c1:
26:97:6f:f0:9b:c0:be:71:38:d4:5b:ae:d9:58:2f:
b1:16:de:5c:9d:bf:8f:e9:dd:a1:3e:f9:04:39:5b:
26:d2:30:28:d9:9d:8d:bc:8b:80:f3:37:4a:bb:cf:
81:f7:98:5e:14:eb:cb:9d:a8:95:66:f3:da:e2:e3:
df:36:ac:29:f0:8d:72:54:39:8f:16:d3:68:9f:0c:
41:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:76:E6:87:F2:76:3F:BC:02:18:F4:F5:59:85:0A:B8:6B:93:4C:8A
X509v3 Authority Key Identifier:
keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b1:62:45:8f:96:2c:20:af:84:1b:d2:58:93:cb:6e:c3:02:
8c:02:74:52:c9:b3:d9:64:6b:de:52:44:5c:88:46:1d:05:f6:
b0:2d:c5:22:b1:4b:a0:ea:6b:f0:46:c0:18:3d:10:5c:71:f9:
50:68:e8:fc:e9:dd:d2:0f:4c:31:cc:28:24:89:b5:f7:d5:2d:
40:75:a9:56:1d:c6:0e:05:ff:da:61:b6:ce:e9:f8:64:c9:7c:
bc:5b:45:f2:2a:eb:07:ac:4c:87:5b:52:c3:8a:36:d5:e9:8d:
df:e6:5b:d3:1c:c7:5d:6e:21:7a:6f:ef:97:ef:5d:54:1a:3d:
46:b2:4e:67:09:98:30:5e:a2:d5:27:25:2e:3c:ab:ef:32:61:
d3:95:ad:67:07:df:91:51:35:32:39:e0:01:84:92:d0:da:57:
d2:a9:d6:0d:63:e1:4c:95:43:a8:d2:64:9c:10:dc:b8:68:7a:
d2:d4:82:7e:88:d1:8c:84:9f:58:52:cf:e8:b9:d1:67:ab:d6:
f7:ed:0b:d5:01:c3:74:fd:34:85:9c:e3:bc:25:d0:94:82:07:
91:73:cd:a9:4d:5b:25:31:98:ac:32:99:d9:c5:ba:bf:99:d8:
1d:2a:4c:fc:03:34:fa:17:da:db:56:fb:4f:60:9c:4e:5c:a0:
07:25:c9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:55 2026 by rpki-client