Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: GuJLPJfOHuMdqDwIMYh9Pv3PowwtRHEmFgzpG4dWaM0=
Subject key identifier: CA:4F:49:23:F3:35:8F:3D:9E:41:19:9F:6E:32:24:15:78:C2:E5:93
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 019FAB9A88CF2DBBC0C71A0A63752B0811A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 02:00:58 +0000
Manifest this update: Wed 29 Jul 2026 02:00:58 +0000
Manifest next update: Thu 30 Jul 2026 02:00:58 +0000
Files and hashes: 1: Svs8WaYMaBYooAK5Llbdr0Xwf0o.roa (hash: ulklpVL+jocMv3vi7VJBHLEzxNJlxmy7adHjaQUdJa4=)
2: liNOwl4ffjTNwLOg4lX3c6vkVXc.roa (hash: ec9XZ/8wZUP1CTV/xvGoOKI7TsGIEdOECU3xzYakfZA=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: g7c5wmCNccPonvzLiGGDsjVHl7WnxMfkXIPf3dr6ZVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:88:cf:2d:bb:c0:c7:1a:0a:63:75:2b:08:11:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Jul 29 02:00:58 2026 GMT
Not After : Jul 30 02:00:58 2026 GMT
Subject: CN=ca4f4923f3358f3d9e41199f6e32241578c2e593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:f8:ef:cb:b0:fd:0b:42:c8:cc:89:e1:a7:
77:0e:ad:d6:ac:88:21:8c:fc:36:4c:5b:da:63:e0:
0c:72:83:48:c7:01:6a:39:81:b6:65:d6:67:b4:5c:
1a:48:28:a1:cd:64:37:10:53:11:3c:04:99:2c:b3:
96:1d:b0:2b:cc:80:b1:16:25:87:b8:e6:23:93:f6:
8d:33:c4:f8:66:09:34:84:25:e7:a9:d1:34:69:74:
e7:9e:47:08:cb:96:b4:fa:cb:0e:46:2b:87:2a:86:
d7:9a:ed:eb:db:96:e0:2e:8a:c0:2c:24:54:85:e6:
09:eb:04:b7:d2:a4:4f:3f:6b:9f:59:74:d2:f5:c1:
6d:80:aa:cf:37:b8:93:de:87:6d:96:24:17:c6:4b:
5a:0d:7f:5d:2b:d1:fe:4f:1d:8f:10:f8:dc:1f:5b:
19:9e:f2:7b:7f:6e:fd:31:02:1a:c8:08:67:e1:3f:
3b:ea:0e:37:76:9e:ca:63:d2:96:16:7e:6b:ad:68:
e4:9e:d0:38:36:c6:37:cd:99:06:32:99:77:88:b0:
56:e9:ab:93:f4:aa:e1:8b:97:da:ae:02:44:ed:06:
0e:f6:1d:13:c9:d7:82:db:ef:33:13:f6:2f:a1:32:
1e:7c:76:a4:a0:06:0b:56:69:df:91:da:2c:cb:79:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4F:49:23:F3:35:8F:3D:9E:41:19:9F:6E:32:24:15:78:C2:E5:93
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ad:39:38:b8:0a:b6:7a:be:d6:51:70:d5:2b:81:3e:2c:d9:
3f:1a:69:5d:e8:a6:91:c3:1e:c9:df:e1:06:3e:92:77:82:b2:
9c:b6:44:3f:4e:0c:f1:ef:4c:f3:b5:3e:2f:1c:63:ab:fa:19:
dc:79:f4:ee:55:a3:c4:22:ef:c9:4d:aa:a4:24:e5:f7:6c:0d:
93:1d:1f:61:f3:38:dc:cd:5a:7c:75:d5:f0:5f:a1:44:fa:b7:
70:18:c0:04:f0:b8:a7:ee:b4:2b:c8:ee:92:a7:ea:be:ba:4a:
00:10:70:46:5a:45:4d:03:46:46:ae:32:de:b9:12:27:16:ea:
7e:3d:c3:dd:0d:bb:79:80:b7:d0:30:13:b6:7b:71:44:a6:90:
29:51:64:c4:13:f2:fd:c4:18:c5:d2:08:8d:5b:fb:29:c5:c5:
45:da:ff:7f:24:9c:58:f1:c2:af:fb:2a:87:a7:c7:b5:7b:10:
66:cf:7a:23:35:c9:30:bd:ed:01:54:20:35:e1:72:68:6f:52:
20:6f:22:ef:33:8a:26:8b:49:b2:67:3a:d1:e5:a3:cd:8c:e4:
f7:f7:0f:88:09:70:ee:77:9b:fa:10:bc:38:3d:ed:b1:d2:bd:
4f:b8:4b:eb:dd:18:84:04:5a:3d:b4:86:cc:96:e8:ae:1c:95:
30:c9:9f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:08:55 2026 by rpki-client