Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
File: Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json)
Hash identifier: RVzKJIO8yxPCmbiEdX3FC56xo5Ir0/EQ1FRATWI1Gpk=
Subject key identifier: 68:A0:95:B0:67:C2:97:B2:58:5F:F9:0B:5E:8C:0D:FD:04:C3:80:3C
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Certificate issuer: /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial: 019FAA1965F8E9BF906E0CBCED54336BFF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
Manifest number: 1965
Signing time: Tue 28 Jul 2026 19:00:18 +0000
Manifest this update: Tue 28 Jul 2026 19:00:18 +0000
Manifest next update: Wed 29 Jul 2026 19:00:18 +0000
Files and hashes: 1: DJdqiSENKGFZJ1k4CQJ0qhVj-NU.roa (hash: JPyYKilJIGfMtwMBvPqVfl8PNsFxqskM2FqefiGjuEU=)
2: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: 4PP+4Df7r5/pUQoaYPJwChfVL6fYo9AOop3sw7GMN40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:65:f8:e9:bf:90:6e:0c:bc:ed:54:33:6b:ff:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Validity
Not Before: Jul 28 19:00:18 2026 GMT
Not After : Jul 29 19:00:18 2026 GMT
Subject: CN=68a095b067c297b2585ff90b5e8c0dfd04c3803c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:82:ae:4c:08:5e:4b:fa:61:1e:17:cd:32:
5b:78:9e:b1:85:3e:19:35:4b:4f:ad:80:eb:af:e3:
d3:54:90:31:fa:58:e4:31:c8:8b:eb:b2:b9:5d:4d:
01:6b:e7:82:35:e4:27:0a:b6:49:eb:26:24:e7:c2:
5c:c3:88:04:82:3b:6d:90:5a:74:1e:75:6f:dd:4b:
fd:f5:31:2d:ca:b5:d3:a3:13:95:9d:25:78:f9:bd:
00:5e:c8:bc:38:71:06:c8:6e:1d:2e:d3:62:c5:7c:
64:2c:63:60:6b:bc:93:16:d8:b1:1b:5b:4a:d3:1e:
e4:7d:6f:ba:b3:82:e3:2a:61:63:f1:4e:85:6c:65:
11:70:19:ee:1b:63:47:56:10:40:71:04:7d:92:54:
28:ee:5e:49:44:d9:3b:d7:1e:4c:e2:00:36:35:cc:
b1:5d:2d:05:fc:f0:7b:00:9b:65:7f:c7:1f:00:c0:
fd:e7:b3:13:cb:65:6d:e4:5b:39:b5:26:11:f1:16:
63:fb:85:e1:0e:a9:bb:6a:94:f0:1d:ab:34:40:28:
9a:e5:fb:d4:76:61:36:f0:8a:2b:c9:44:26:77:eb:
64:9f:a2:1b:18:08:db:8d:97:48:fe:24:d4:aa:f2:
31:5c:c9:ca:dc:03:af:f4:fb:fd:e2:d0:e1:d9:be:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A0:95:B0:67:C2:97:B2:58:5F:F9:0B:5E:8C:0D:FD:04:C3:80:3C
X509v3 Authority Key Identifier:
keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c0:1b:af:e8:75:f9:4b:c2:ed:ee:9f:f1:fa:6c:c2:7a:df:
e5:3f:f3:00:9f:e6:dc:48:bd:91:e3:66:9e:98:34:45:24:ce:
bc:91:97:dc:af:49:96:ca:24:9f:61:1a:4b:b0:2a:49:34:af:
f9:96:33:5f:52:52:37:cb:62:af:45:76:84:14:f7:aa:27:54:
a5:19:e8:58:6e:d5:13:97:89:43:32:a7:f4:4f:f7:c5:db:c8:
f7:96:a1:21:ed:83:7d:99:ba:24:7f:47:8e:f9:97:52:e9:1b:
f9:bf:32:a6:0e:81:bb:8f:30:2a:f3:27:95:94:73:2e:b9:ec:
3a:8f:3c:eb:ee:60:42:e4:70:20:7f:e4:b9:e8:ec:db:77:fa:
e1:76:fa:54:48:b5:a8:a9:08:83:b2:7c:ad:14:de:c0:4c:3f:
1a:39:59:29:e9:0c:69:a8:18:4e:47:28:d5:0f:a4:a2:53:4f:
12:36:4a:5d:b0:5f:e6:6d:b1:0d:ed:72:d6:34:ea:9e:1e:ba:
aa:2a:37:6c:b8:26:f4:1c:a8:b6:b8:01:8a:ab:01:bf:3f:aa:
92:95:64:05:e3:76:d8:5c:88:79:8b:b0:5a:e0:96:96:19:b3:
e8:03:f7:37:06:dc:d2:ec:53:cb:f9:6d:fb:f7:0b:6b:a4:1a:
be:be:f0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:03:45 2026 by rpki-client