Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: 9qRJUmWp4OHSFgYW4Ek0I2UheVTgOn7KDqdBlWKu4JQ=
Subject key identifier: CE:AF:87:4B:51:AE:D3:E6:0D:50:62:42:5F:D9:C1:41:14:15:7C:51
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 019FA93E41B78E3D161ADB43C57377EE25B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 0DFC
Signing time: Tue 28 Jul 2026 15:00:57 +0000
Manifest this update: Tue 28 Jul 2026 15:00:57 +0000
Manifest next update: Wed 29 Jul 2026 15:00:57 +0000
Files and hashes: 1: 1-m2fud3k5EzmiZRoBhOtqfySzmI.roa (hash: HOvFww4yxsynh17q+d5C89mxcrHn4M7iS7z+Y3frs9U=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: NlW87pG4lO9wmclMkEjOfaOGUFcZugGDBNmFwHaiOlg=)
3: e89SBhBBaL18qejVEfgQtSemlB0.roa (hash: Gc/uVJGxURscBi9WA9foLpSF+kUOEix1bWq345u58KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:41:b7:8e:3d:16:1a:db:43:c5:73:77:ee:25:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Jul 28 15:00:57 2026 GMT
Not After : Jul 29 15:00:57 2026 GMT
Subject: CN=ceaf874b51aed3e60d5062425fd9c14114157c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:0a:53:63:35:1f:9c:f4:28:20:6f:40:2c:
4c:48:f2:c4:dc:09:aa:24:6e:1f:b5:4a:be:cf:52:
27:25:e1:b5:0c:31:a0:e2:9c:64:73:d5:7d:da:41:
fa:0f:dc:23:bc:96:85:28:13:8e:88:e8:16:d8:ec:
49:4e:2b:02:fb:fe:bd:5a:a0:44:46:c5:08:dc:a2:
86:f4:89:20:64:0a:d4:04:8a:1e:10:64:5c:27:de:
38:78:06:b0:87:d3:b3:4d:89:54:fa:70:67:ce:ed:
52:b3:e4:60:3e:bf:fe:ac:c1:a4:0b:b7:83:f9:4e:
62:03:23:b0:4a:26:72:c3:5f:4c:e6:a0:02:21:28:
c3:50:4e:bd:94:36:49:0e:9f:2e:36:99:75:a0:4e:
d5:4d:8d:dc:83:60:75:cf:4b:0d:9f:13:d9:7f:bf:
4c:12:3f:19:ea:3f:fb:9f:58:ee:07:4a:78:94:5d:
97:6d:45:99:8d:83:44:79:a8:11:e3:de:10:7a:e5:
23:60:4b:38:83:f4:2d:6e:ad:02:ef:75:b9:75:4b:
9a:50:f1:6e:5f:b5:7a:f6:d9:e3:76:b7:42:8a:bc:
93:6d:5f:6d:e1:21:7b:5f:a8:cb:a2:4b:36:5b:cb:
b9:f6:0b:0c:86:73:46:30:04:47:75:cf:c5:36:01:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AF:87:4B:51:AE:D3:E6:0D:50:62:42:5F:D9:C1:41:14:15:7C:51
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7c:8a:01:eb:d5:a8:13:7b:0d:d9:ae:76:d6:b9:ba:4a:e6:
01:e0:5e:9b:c9:4d:68:79:ec:20:3e:2c:3f:f2:4e:76:38:08:
b7:0a:19:4d:56:00:0f:0c:82:36:8d:bc:2f:5b:95:19:c1:cf:
de:6e:d8:e4:82:39:8e:be:e4:07:47:2d:84:41:98:88:c5:e2:
75:18:2a:bb:28:b7:35:6f:4a:06:6a:9a:9f:80:38:e5:b6:4f:
fd:4a:a3:b0:93:94:5b:86:23:20:7c:b3:02:1b:19:ce:0b:20:
f1:92:c8:0a:8e:22:87:24:b2:4f:85:e2:46:d4:50:5a:9e:d5:
79:4b:94:28:48:5c:09:34:8f:35:fa:0c:5c:d4:5f:49:ad:77:
f8:65:8a:1b:73:92:13:5b:10:be:14:19:72:d0:98:7f:90:0b:
06:64:a0:0b:e0:9b:55:ba:70:98:00:30:3e:e6:d9:40:11:6f:
3e:9e:ae:74:6d:ed:04:25:fa:89:f1:01:ac:04:4d:4e:8e:c5:
8b:a5:c4:a7:5b:7c:75:d4:a3:3b:d9:2b:c4:9c:64:ad:5a:0b:
91:af:e2:4f:ff:ee:28:f3:fb:d1:a1:df:91:da:22:a7:f0:18:
55:0f:07:0b:88:92:a3:95:70:06:74:7f:86:76:eb:d6:d5:a8:
cb:5a:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:23:03 2026 by rpki-client