Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: cewDZMdadqBMlZbcNXkTVG87XW6hvv8sL42Vz1RabTM=
Subject key identifier: AD:DC:D7:5B:D2:A4:C6:8A:42:26:FE:C0:3A:A1:B8:26:CD:04:3F:3F
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 019EC36DD3BE82A23CF39AD6D70317AFE460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 195C
Signing time: Sun 14 Jun 2026 00:00:15 +0000
Manifest this update: Sun 14 Jun 2026 00:00:15 +0000
Manifest next update: Mon 15 Jun 2026 00:00:15 +0000
Files and hashes: 1: QPbL87CmRT1ll0u9cNfWuv1QlyA.roa (hash: 8Z1WQs/0Meh/R2Q6A9r9cYWb2lmAvHlCtOd8UxHsBvk=)
2: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: fgctKuo5PDWzzZBFccvVkMK+y52LXkgA2ycplkxDjao=)
3: zA-JAsK-5Dim3-SrX670VbjLnXQ.roa (hash: 8KB8obCvtfReso5cwgxqXrjE6TJfCW9MSYEyqCiQ9Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6d:d3:be:82:a2:3c:f3:9a:d6:d7:03:17:af:e4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Jun 14 00:00:15 2026 GMT
Not After : Jun 15 00:00:15 2026 GMT
Subject: CN=addcd75bd2a4c68a4226fec03aa1b826cd043f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:9c:9d:65:7e:4f:1a:a5:72:2c:7d:fe:e3:
a6:79:22:ee:e2:08:e2:3c:43:34:2f:d4:2a:bd:f5:
28:00:85:0b:26:b7:1f:54:de:5e:fd:d3:f4:f4:18:
a7:fd:18:3a:de:fa:70:93:66:8f:0a:3c:20:a0:ae:
5f:94:50:46:d3:e3:ac:38:3a:e4:01:59:7b:0c:d0:
1c:76:d7:74:8a:19:d6:e6:36:09:f5:96:6f:95:ea:
54:dc:a8:e6:db:13:a6:47:eb:71:f9:b3:31:bc:a2:
54:b1:08:d3:1a:01:ae:53:a1:c8:d3:5a:ef:42:7c:
7c:ec:4c:66:2a:ba:f3:e8:fb:9a:12:e9:75:16:40:
de:c2:7d:4d:18:e5:c7:c7:27:f9:26:2c:a0:5c:49:
99:64:a8:66:9f:4a:36:20:49:f6:06:06:1b:2c:de:
b8:68:d9:35:c1:cf:28:82:61:7e:1e:df:91:9d:d7:
73:21:07:88:b1:a8:a9:90:b4:8e:65:1a:4f:f8:6f:
98:ca:07:d0:33:fe:45:c7:ea:7a:4b:26:fa:94:c1:
b5:15:3b:d9:c2:53:05:c2:78:f7:ef:7e:bc:b5:a3:
7d:cf:d3:cc:93:e3:62:2d:87:12:8f:c6:81:ac:5c:
0b:5a:23:c1:20:4b:8f:5d:f9:f1:f8:33:c0:23:28:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DC:D7:5B:D2:A4:C6:8A:42:26:FE:C0:3A:A1:B8:26:CD:04:3F:3F
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:ab:27:28:a5:07:8b:1d:f3:0b:d3:0f:3c:d0:b0:ef:6e:e7:
70:c8:fb:48:86:26:e1:89:3f:67:6b:ba:79:32:4e:b5:bf:70:
d9:31:d5:80:03:d9:1c:a4:e4:55:9b:83:ba:ea:f9:16:ad:07:
a0:a8:17:fa:34:d1:db:4f:3d:76:a8:4d:52:4e:fb:e0:55:2e:
af:39:3e:43:82:0a:78:28:f4:c4:f6:eb:5f:e6:55:86:b4:ae:
09:e1:ee:20:d3:c3:fd:17:77:71:78:50:22:11:c9:35:5f:ad:
91:93:89:9f:61:0d:03:bf:fc:af:98:db:12:f8:0a:f7:3b:4c:
29:0b:75:df:50:5f:5b:08:1a:8d:87:b2:2c:e1:c7:8e:a6:d7:
78:ea:a4:fc:ab:12:b5:ba:70:c4:6e:db:08:9e:49:f2:ab:4f:
cd:70:84:d0:44:43:40:08:58:af:7d:da:e9:1f:ac:2b:36:c1:
d2:3c:e9:31:e8:38:11:62:a3:c8:b7:90:87:db:b4:0f:bf:2d:
de:f9:3a:eb:5e:b2:a4:97:35:87:47:1f:1f:d3:36:0e:ec:e6:
b2:b8:dd:64:7a:30:5e:81:d0:c5:b2:0e:81:aa:24:47:65:91:
d5:a5:9e:cc:24:fd:1c:b5:be:b3:8d:a4:92:bd:42:47:c5:9e:
8d:07:8a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:08:49 2026 by rpki-client