Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json)
Hash identifier: i/dOcgjeXkFiig4asN96mHeFQmDPHXfy04MjTLiq5+M=
Subject key identifier: 93:19:91:D4:EA:26:9B:18:4E:59:92:BA:DB:A8:EF:15:C6:07:26:3C
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial: 019FAA876C1A8EFFA8DE9313E601CCFC129B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
Manifest number: 0310
Signing time: Tue 28 Jul 2026 21:00:29 +0000
Manifest this update: Tue 28 Jul 2026 21:00:29 +0000
Manifest next update: Wed 29 Jul 2026 21:00:29 +0000
Files and hashes: 1: 52gTPJdQN2IyRsgf9iKgbNid4cI.roa (hash: 5lE63bjKcJ3503lnep/t29RA6BQhkuc041jpBZfJLfo=)
2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: RMB+lb3F/LKN7xhsivm7iWEuxvq8f7GuVRpLlLvca1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:6c:1a:8e:ff:a8:de:93:13:e6:01:cc:fc:12:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Validity
Not Before: Jul 28 21:00:29 2026 GMT
Not After : Jul 29 21:00:29 2026 GMT
Subject: CN=931991d4ea269b184e5992badba8ef15c607263c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:4f:6a:ff:ef:f1:3d:8c:61:7f:c7:81:a4:
a0:02:c8:4c:ad:40:87:a7:c8:8f:39:25:b0:33:3c:
eb:82:2f:9d:4b:9f:61:db:83:c9:9c:83:4b:cc:b7:
57:e3:19:a1:31:c9:f2:74:01:16:73:72:81:a1:80:
c0:41:48:9b:cf:9d:b4:66:67:60:9b:b3:cf:80:c8:
6d:00:57:2b:21:1e:72:31:e4:cb:e1:b6:5f:1b:fb:
70:b8:d9:59:e1:51:b1:3d:2a:16:4a:66:f9:e2:5a:
94:33:64:8f:cf:8f:90:b3:0a:b5:5d:3d:ef:ed:27:
ed:dc:01:7f:02:da:1b:04:46:93:c6:e4:24:94:f9:
63:1b:db:3c:b1:93:a8:49:34:99:24:62:30:97:56:
c8:de:35:1e:d7:f2:12:52:dc:80:fd:a6:d7:72:09:
8a:98:07:8a:b2:cf:3f:69:8a:8a:68:db:9c:49:5b:
0b:24:52:a9:9e:ab:60:a0:a1:70:d4:80:64:58:ca:
22:da:e7:20:30:1e:aa:d5:ca:f3:82:b8:91:40:33:
0a:2a:99:bd:54:8c:6a:c8:24:b9:3b:f0:1a:ce:39:
38:45:af:7d:bc:4d:e3:9a:86:82:33:04:b0:77:4a:
7d:39:56:af:fb:67:99:36:5b:9a:98:fc:3a:03:ff:
6b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:19:91:D4:EA:26:9B:18:4E:59:92:BA:DB:A8:EF:15:C6:07:26:3C
X509v3 Authority Key Identifier:
keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b2:f7:8e:95:cc:6f:3b:7f:f7:15:3d:5a:e6:e2:d9:8a:41:
3b:7d:af:79:ea:e9:c8:28:3f:55:45:55:b3:29:c1:0f:5e:0f:
2b:45:82:99:14:2e:bb:09:20:6e:d5:44:43:06:2e:c1:3e:fd:
1e:8b:c5:5a:c6:9c:a4:56:a8:d8:9f:5b:77:88:87:7b:40:2d:
8b:34:bd:33:25:bd:e6:d1:18:e4:bf:be:bc:06:2d:c1:50:05:
04:d8:6f:b1:54:6b:15:42:9b:39:42:ba:19:27:5f:e8:4c:42:
38:9b:12:b9:ec:6f:8d:07:bc:3b:9d:48:62:e2:49:d0:54:6f:
f2:43:35:43:ac:49:b9:de:36:82:c4:cf:fa:e8:2a:c9:3d:08:
42:5b:8a:38:64:6e:93:db:dd:16:80:ab:59:48:0c:40:e7:69:
6b:b5:61:a5:c1:ad:c4:e0:9c:c2:18:ee:d5:5b:3b:4f:08:60:
a0:01:72:c5:b6:b7:1e:b1:27:bd:89:a7:76:c7:c3:b7:6d:06:
01:e4:37:de:19:7b:f6:b7:bc:bc:d5:4b:22:dc:04:e6:b0:29:
96:8f:26:88:24:c4:d5:17:9b:88:94:40:6f:84:93:02:8c:b9:
e1:34:97:5d:d1:28:07:76:d8:e9:40:9f:09:ba:04:f0:21:80:
cf:97:c5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:32 2026 by rpki-client