Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier: dYlqw69gqwmCS9oPGcV1bUiwSn1CVR2IokC977U1EkY=
Subject key identifier: ED:57:ED:C4:CD:3A:2D:B0:79:B5:76:42:04:C0:19:EC:C2:F2:8D:76
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 019F9512C46AA9120D9C1B8A43852E32D554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 17:01:02 +0000
Manifest this update: Fri 24 Jul 2026 17:01:02 +0000
Manifest next update: Sat 25 Jul 2026 17:01:02 +0000
Files and hashes: 1: ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa (hash: 9yOiqGJYeL5bi8PHF9fNeVVcmhOJdy6bDsiWR0m6Ve0=)
2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: X3vqAG8a8s1M+wZEZjDdjp7Xgy9rTjVSdaS+/7CMonk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:c4:6a:a9:12:0d:9c:1b:8a:43:85:2e:32:d5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: Jul 24 17:01:02 2026 GMT
Not After : Jul 25 17:01:02 2026 GMT
Subject: CN=ed57edc4cd3a2db079b5764204c019ecc2f28d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:16:2f:00:95:86:30:fd:f8:0b:03:ce:5e:
0d:66:d3:da:d1:82:22:54:21:d8:ff:d7:c1:c4:03:
f0:a5:f4:c2:8f:ae:51:25:31:30:62:08:88:05:3a:
20:96:22:fc:7e:3c:1e:f8:c2:da:95:52:10:d3:10:
8f:db:78:27:77:e1:bb:f7:6c:c7:2e:ed:e2:c4:1b:
40:f2:c4:1a:45:eb:c6:59:b2:02:8f:dd:99:db:d9:
81:90:cb:03:88:4e:d2:ee:6b:58:f8:99:57:0b:5a:
a9:c5:f1:10:a8:30:46:34:4c:ec:48:e2:54:24:a7:
23:26:37:18:d8:82:25:18:c4:82:30:96:3e:ff:f5:
7e:02:33:51:c5:07:0d:c5:49:8c:14:19:5c:fe:34:
e4:5d:36:b2:a1:ec:8d:08:6e:63:3d:94:ec:9f:75:
d0:3a:d4:26:64:df:7d:b6:65:9f:6e:9c:e2:a5:6d:
44:7a:a5:f4:a7:f9:9e:bf:fe:8e:ba:91:20:01:6a:
6a:6a:bd:43:68:0a:a3:b6:87:91:eb:e0:cf:8d:de:
8b:7b:25:15:a1:72:34:0c:9f:21:e9:98:36:42:1f:
6a:00:d0:0f:e7:4e:a8:54:59:6c:5f:a6:8c:f6:63:
20:bc:8a:38:e0:b1:3b:9c:45:17:88:45:c0:96:9b:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:57:ED:C4:CD:3A:2D:B0:79:B5:76:42:04:C0:19:EC:C2:F2:8D:76
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c5:50:72:18:51:2a:80:f9:a8:2b:5a:6d:42:c2:bf:f1:d1:
75:b8:b4:1d:ed:ce:9c:4c:3a:f3:7f:98:25:1e:2c:1d:79:b5:
62:6f:7b:68:dd:cf:11:d6:a7:d5:57:60:6e:8a:f6:6d:cf:ad:
63:0b:14:55:fc:7b:71:ca:cb:3b:f4:9b:42:e7:a4:e1:d7:81:
da:04:ec:fc:bd:fb:33:b4:33:1b:2b:5e:f8:9b:43:98:3a:84:
39:92:b5:e9:3d:9f:a6:6e:ae:d9:f1:11:30:2b:96:10:a0:f0:
72:91:2d:0e:04:6a:1d:c4:49:88:69:b2:87:49:81:bf:20:d6:
07:a9:11:ff:f7:2b:ca:4f:70:61:d9:ed:45:4a:70:12:2e:ef:
28:44:b5:cb:1c:ac:9b:e5:e9:25:88:3f:59:d3:64:f8:0e:8e:
48:e4:40:c5:10:46:27:e5:7b:ab:79:38:f6:a7:da:ce:23:5e:
45:31:ba:96:ec:67:39:52:0b:37:b0:41:64:df:7c:92:0d:74:
e3:b1:03:fe:e7:3c:9a:32:8e:e4:85:26:79:d2:ce:c0:b6:d1:
a1:01:46:c6:ec:9c:b9:fa:58:77:01:f2:af:0b:58:49:32:c5:
68:5d:17:e9:d0:7f:d0:71:62:08:5d:c3:ef:7d:75:c4:92:c7:
43:71:df:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:16:21 2026 by rpki-client