Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
File: pQyvnDYd70jAkzMhvgUYOoOnv8k.mft (raw, json)
Hash identifier: VzMc6lTi3FJkn4piG9pYvkYRUoWEQJ9TwrmGYTmW+Iw=
Subject key identifier: 04:D2:E1:C3:76:2B:00:4E:B1:6F:CC:37:4D:C7:47:9B:F3:A7:AA:40
Authority key identifier: A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9
Certificate issuer: /CN=a50caf9c361def48c0933321be05183a83a7bfc9
Certificate serial: 019FA89A63F558E80739B03EDA0B1B72E18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:58 +0000
Manifest this update: Tue 28 Jul 2026 12:01:58 +0000
Manifest next update: Wed 29 Jul 2026 12:01:58 +0000
Files and hashes: 1: 1-iqZ8I8kLhheHEAx_o50Ayvr-Dk.roa (hash: RfgagCxpiboTY2NkZbT0w4RqzTNQPKbpNiSQymddl4Y=)
2: 3zKqo9tzrDFHKj_Xn74CQ7Zp0Yw.roa (hash: /LFq1WNtpzmrSy4DHyV2230+6XSjlYq34txavrXU1wA=)
3: FjAjA5JSu9iSdMI9FTN4lABeYFw.roa (hash: kvmXzF7dgjne11SruvyJWpKtLvX+cnEpTrh80qXwd0A=)
4: L6k0aUmuwnQNi--cnPyE6qY9xE0.roa (hash: BzVcOMvfoDVOdx3fvQjFRnCNO4lIJ0/eNlnIvFlQ6RI=)
5: pQyvnDYd70jAkzMhvgUYOoOnv8k.crl (hash: Y2FTb2+JJ6vI4/q9svfgzcg6moPiF9s23CsE04W7Qpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:63:f5:58:e8:07:39:b0:3e:da:0b:1b:72:e1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50caf9c361def48c0933321be05183a83a7bfc9
Validity
Not Before: Jul 28 12:01:58 2026 GMT
Not After : Jul 29 12:01:58 2026 GMT
Subject: CN=04d2e1c3762b004eb16fcc374dc7479bf3a7aa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:10:c4:f2:1b:96:41:95:e5:2a:73:c5:28:
04:77:af:e2:16:c4:1e:bd:68:6f:88:a9:bc:f5:a9:
9b:d9:37:8f:72:29:93:3d:c2:0d:72:b9:1a:05:98:
d1:14:23:46:ad:0a:1d:28:02:a9:8a:68:5c:e4:e2:
8f:43:bf:fe:c4:e5:73:c4:e3:f4:09:73:c5:a3:f9:
43:ab:d8:35:80:2b:3d:15:84:b8:c8:ae:98:d2:8b:
b8:06:2c:22:43:e0:cb:2b:af:af:9d:d1:9a:f6:6f:
e1:5f:ce:ac:b4:a0:a7:a3:ea:6a:eb:78:79:ce:12:
43:c8:1f:dc:0e:91:3e:69:55:0e:c9:d8:58:8e:86:
7c:7e:b3:d9:71:1b:0f:44:54:a5:4d:5e:4c:45:9c:
1d:fb:b4:5c:e2:c8:d3:07:5f:9b:ef:70:41:29:23:
28:ee:ce:f4:6a:c6:7b:7a:43:96:b2:9f:fd:6b:44:
b6:cb:76:bb:18:01:04:79:25:86:e9:68:c8:28:48:
bd:b2:60:c9:7b:13:f2:05:1c:dc:6e:e1:87:86:77:
a3:f3:71:dd:74:d1:8b:30:08:0e:24:59:13:0b:6a:
91:d5:3f:e6:9f:8a:a5:b3:6b:1e:db:07:ff:1f:c2:
c1:ea:6d:24:ed:78:e1:00:2c:83:41:7a:87:a2:70:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D2:E1:C3:76:2B:00:4E:B1:6F:CC:37:4D:C7:47:9B:F3:A7:AA:40
X509v3 Authority Key Identifier:
keyid:A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:01:f5:d3:a9:68:d2:7b:43:5c:76:9b:00:ca:d0:83:3c:1b:
39:fb:e3:2d:2b:5f:44:94:63:07:98:f5:c7:7c:71:3f:6a:eb:
1d:73:c0:48:3e:ee:3a:99:ae:37:aa:ed:0b:ac:38:28:96:7a:
2f:08:ae:fb:10:c4:ed:1d:28:7c:24:2c:b0:b0:20:fd:b3:64:
e9:ef:6b:48:42:d8:2b:ea:f3:57:d1:94:76:58:8a:2a:e4:38:
f1:5a:56:49:66:bb:84:fb:73:03:b8:8e:6d:b9:0e:2f:5d:3d:
dd:7a:e8:a0:36:e0:23:5a:c6:fc:45:ca:5c:b6:76:03:15:6a:
12:ad:49:77:8d:94:d8:27:4d:03:58:61:39:e4:7a:55:3d:eb:
f5:ee:ba:ec:6e:12:50:ee:e5:70:8d:2b:43:4a:e8:98:64:33:
a5:8f:97:b2:58:45:df:f6:5e:1d:c5:5b:e0:d3:5f:77:be:d2:
18:f4:2b:f0:17:d7:d3:10:23:62:85:0b:ef:11:a9:3c:67:e2:
54:b0:ce:1e:90:49:fa:f4:6a:85:2f:13:21:46:73:72:ee:2c:
d0:9a:45:fe:91:f8:a4:5a:3d:1a:76:46:eb:3a:4e:29:da:12:
e0:f8:68:38:c5:5d:0e:94:6a:dc:be:e0:d9:39:b7:08:5e:1d:
30:eb:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:03:48 2026 by rpki-client