Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: MX+sa83eS2T9LOguqtN7WTcPXA3ywQYpUi+0+pcIDlU=
Subject key identifier: 82:15:FB:03:BD:4C:B1:FA:C8:B6:CA:B1:DF:DE:25:C0:DD:0F:B2:18
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019FAC3F382A28AAE2C3FE56794236966836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 1415
Signing time: Wed 29 Jul 2026 05:00:51 +0000
Manifest this update: Wed 29 Jul 2026 05:00:51 +0000
Manifest next update: Thu 30 Jul 2026 05:00:51 +0000
Files and hashes: 1: Owu-o7JvEybmXtpQNjtKXjhH9ug.roa (hash: 89sGeUxvhpVypElkHwSDvmrZnRJHBtaKeL9yMz7nC6U=)
2: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: U3hTdJYrfqvwaldwli5ZeXUPQ9FAtPbvVQECMG9mrto=)
3: _b_jh41DtvYlyJbVt2vmUxy_03c.roa (hash: Y4f7kKKKelGhsZykUm6x2Et6p6M+4yMQNJ8fkfC21Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:38:2a:28:aa:e2:c3:fe:56:79:42:36:96:68:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Jul 29 05:00:51 2026 GMT
Not After : Jul 30 05:00:51 2026 GMT
Subject: CN=8215fb03bd4cb1fac8b6cab1dfde25c0dd0fb218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:21:4b:6c:d8:c3:a3:01:66:1b:2d:28:0b:
1d:da:19:4e:44:a9:da:b5:d9:43:0e:8a:18:0e:90:
9b:27:95:c7:06:ee:e8:83:83:85:2b:70:35:5d:47:
53:86:b5:11:c6:a8:b4:a2:fb:a2:46:f0:4a:f1:57:
ec:9f:3d:6d:55:1f:52:e9:cb:9a:ce:e3:68:1b:99:
0d:74:b0:4a:e6:8c:69:ab:70:20:0f:70:66:2f:d0:
34:9c:84:35:17:3e:34:9e:d8:9c:fb:df:65:60:d7:
f1:31:08:38:1d:37:f8:04:ad:f3:26:dd:d8:2c:e7:
54:9d:b7:1e:66:b4:7c:1c:64:c3:d0:79:07:14:2a:
b1:d8:36:11:fc:ab:e7:1c:aa:55:40:f8:2a:54:8a:
d7:aa:02:e2:05:f3:b0:ac:b2:53:e4:7d:40:bd:97:
76:0f:b7:9d:08:5e:d7:bb:49:fe:b2:fa:45:af:4e:
e8:7f:b0:32:87:50:e9:32:de:62:67:93:17:75:80:
87:b8:0e:6b:23:f5:9b:8c:02:91:9a:2f:a2:cc:30:
8e:a6:18:0f:5e:ea:9d:76:6a:52:15:8d:29:9b:31:
26:25:09:5a:7f:7f:e5:41:9a:8c:49:87:fe:34:84:
48:e1:6a:a1:cd:1e:67:4f:df:09:d5:36:eb:4e:d8:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:15:FB:03:BD:4C:B1:FA:C8:B6:CA:B1:DF:DE:25:C0:DD:0F:B2:18
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:25:05:98:ff:c9:ab:4d:34:05:98:ff:38:77:9f:ec:93:96:
25:8e:85:1b:91:f0:96:c6:1b:06:c9:66:11:d5:f3:86:18:d0:
5d:a1:01:b2:de:62:b1:09:69:53:55:89:70:b0:bd:41:ea:65:
5d:d3:dc:10:a2:b4:f1:f9:a7:3e:94:e3:d1:67:d8:f7:e9:f3:
18:35:99:9e:64:3d:65:a9:4c:47:36:b5:c5:c6:05:66:cc:8c:
08:46:b6:1f:e7:35:33:ce:01:99:c1:f8:e1:cd:62:7c:38:1d:
9d:8a:30:5c:13:9a:e9:cf:fd:9e:e5:68:b0:df:2c:f0:74:d3:
4b:cd:cd:40:2c:fd:da:dd:a9:1e:94:a9:ea:9d:49:a1:db:cf:
a5:58:19:50:7a:ce:f7:d8:94:69:26:64:fc:28:2a:1c:bd:3c:
97:2b:19:86:ef:1b:b5:5d:92:4c:39:de:62:96:11:37:81:54:
0c:b7:cc:fb:5c:88:d6:b2:a5:0b:2e:dd:db:9d:1f:97:ad:69:
f7:54:79:f4:87:17:11:07:4f:b3:96:3f:29:fe:72:46:10:02:
c4:4d:71:a3:19:2f:11:a7:b6:e4:5c:26:bb:78:8b:44:3e:92:
76:0d:4e:e3:b8:f3:b2:f9:6b:aa:a0:13:77:48:c4:8a:7f:50:
8b:9b:1e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:04:29 2026 by rpki-client