Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
File: Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft (raw, json)
Hash identifier: O19O/uZVEz9U+OF2VLYefIy4H42Cnc9k6cKmNHjcCag=
Subject key identifier: 3E:A6:79:65:F1:8B:52:7E:C3:8A:A7:F5:26:3F:AD:DB:01:7A:B4:40
Authority key identifier: 3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
Certificate issuer: /CN=3efd44542413e79cc56be9831a397e7aa3f52d39
Certificate serial: 019FA7BD3D6F3D6C6E5D08F793740413822D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
Manifest number: 0171
Signing time: Tue 28 Jul 2026 08:00:24 +0000
Manifest this update: Tue 28 Jul 2026 08:00:24 +0000
Manifest next update: Wed 29 Jul 2026 08:00:24 +0000
Files and hashes: 1: Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl (hash: W0sKoCOHAEnuPV9sioU2WP3BWYnuVItFKseTygnQcc0=)
2: mcJm8HeYM8tAaxj_DbPV_ZHMr0U.asa (hash: fdM8B4LFVNA1rExhWmALS3M97yC0S/Herj8AXOIShkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:3d:6f:3d:6c:6e:5d:08:f7:93:74:04:13:82:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd44542413e79cc56be9831a397e7aa3f52d39
Validity
Not Before: Jul 28 08:00:24 2026 GMT
Not After : Jul 29 08:00:24 2026 GMT
Subject: CN=3ea67965f18b527ec38aa7f5263faddb017ab440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a3:c1:c8:ad:31:2b:91:83:b5:fd:3f:31:a6:
e4:ad:b7:9e:af:46:e1:b3:48:70:32:c1:60:d6:91:
06:9d:f1:a1:9f:95:ca:af:09:3f:2f:50:08:98:cf:
91:15:ac:e8:9e:f7:35:71:df:ef:41:8b:a2:62:94:
5a:65:3a:46:0d:0e:0b:ac:91:d2:e2:34:f5:87:9c:
8d:04:09:67:2f:23:ba:00:6b:a4:38:25:88:af:af:
09:7a:db:0a:c1:48:1d:0b:5f:d0:da:76:9b:4e:ab:
d5:40:dd:d5:ef:2a:2f:17:a0:0b:bf:cf:ad:e6:44:
f8:92:7a:62:ec:ac:46:b1:c7:55:a9:f4:e2:74:5b:
a8:5f:a4:a2:6b:7f:0c:69:ab:7a:d7:08:02:c9:1f:
f9:a5:ad:63:d7:83:13:c2:d4:ac:cf:e5:55:66:2f:
c8:6b:04:24:48:73:68:93:30:34:2e:39:35:8e:23:
36:ef:a4:e5:fa:72:e2:36:11:3c:78:b9:b0:5c:7c:
de:32:47:3c:1a:af:2e:be:36:76:b2:03:3c:0a:2b:
10:74:f0:9b:95:96:e7:9e:fd:ff:dc:20:0c:6d:9f:
ec:a9:88:6b:ac:a0:be:fd:33:b5:b6:65:89:27:27:
49:b9:2b:6d:d8:8e:e6:20:4f:8a:43:b2:df:dd:88:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A6:79:65:F1:8B:52:7E:C3:8A:A7:F5:26:3F:AD:DB:01:7A:B4:40
X509v3 Authority Key Identifier:
keyid:3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:87:de:c3:ea:08:4b:14:7b:ec:73:21:be:98:90:a2:ec:9c:
9d:60:7a:10:07:88:f8:2e:b6:28:f3:db:22:1b:d3:21:4b:c0:
79:ff:5b:07:09:76:3b:01:9a:e2:08:a5:86:58:ee:6d:40:3f:
46:c9:8c:8a:48:f8:5e:a8:46:b1:81:da:2f:0e:52:ee:79:65:
b4:f1:bf:43:14:1b:c5:85:30:60:27:c4:49:66:aa:e9:3e:dd:
52:7d:6b:83:b7:fc:94:5c:2c:42:b7:08:2e:0b:7d:4a:29:80:
bd:83:3e:d1:62:29:67:52:68:b3:38:21:fc:9b:4a:14:a9:5e:
8f:4b:e8:30:e1:38:48:83:f2:e0:de:53:27:61:f9:f7:42:1b:
f4:58:d0:0e:0a:82:6c:28:4c:a7:94:18:e5:7d:0c:fe:e2:02:
fb:7e:64:74:61:36:ec:33:e5:ae:f6:ee:75:53:35:ab:f6:5d:
d6:ad:46:f1:5e:1a:4d:8e:46:18:24:55:84:82:68:40:fb:1f:
6c:06:c1:3d:82:e7:53:f8:fa:be:9b:eb:c3:38:c7:e8:ee:5d:
a9:7d:0a:ea:ab:7a:d9:75:73:78:1f:cf:9d:eb:ba:24:f2:62:
be:64:67:f1:cc:c4:3c:1e:fe:06:de:4b:12:7e:05:3b:2e:8a:
f7:ab:d5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:39:20 2026 by rpki-client