Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: OAEYWtUjKWYnYfvuub5INL6f5tGuVrH+mp/2+FLgC70=
Subject key identifier: 37:7D:78:1E:BA:B7:F0:8E:8B:F6:DA:4A:D3:B9:5D:47:CB:50:3E:68
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 019FAC3EB312268777D6218B6869627F9E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 05:00:17 +0000
Manifest this update: Wed 29 Jul 2026 05:00:17 +0000
Manifest next update: Thu 30 Jul 2026 05:00:17 +0000
Files and hashes: 1: 1iRbLYf4C0y3oJ3-4xIANjl72wA.roa (hash: UG6S1kmkOsd5y0L7phKRaWuOG6F5o7BKD1/4AyWvM5A=)
2: JjyvVDVovIRDvh2WAPN4qcYKbB8.roa (hash: YWVGU0nc40f+duH6QOCC8OFDRM3GdOHIxFuAUo2EzwY=)
3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: ZOAgr8UN01QX1a4/2xLql2O1JS4X2Xf7soMK4CW8E2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:b3:12:26:87:77:d6:21:8b:68:69:62:7f:9e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Jul 29 05:00:17 2026 GMT
Not After : Jul 30 05:00:17 2026 GMT
Subject: CN=377d781ebab7f08e8bf6da4ad3b95d47cb503e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:b8:02:b0:26:1b:33:1f:fc:ce:a1:04:6b:
6f:6d:cb:e3:7a:bc:a6:79:67:77:71:ab:5c:74:72:
1e:38:78:c8:89:af:27:44:12:07:05:e0:32:4d:06:
ef:80:49:26:61:46:03:d3:a2:f9:04:d9:ed:a4:9b:
2b:07:5e:d0:8c:9c:09:90:d9:c1:b1:33:69:39:e1:
ed:71:bf:4f:8a:83:d5:d2:3a:cb:36:5f:69:07:1b:
72:31:8a:7b:2b:00:60:f4:d0:4f:75:23:d3:d8:7a:
bf:cd:f0:4f:b9:90:f1:69:ee:c0:4f:36:9c:37:82:
7b:f2:78:7e:97:e4:4c:60:1f:9b:78:f2:1a:10:59:
68:62:26:26:1b:3c:cd:94:47:cc:d8:c0:2f:c8:32:
b9:12:b3:94:d9:1d:c2:4c:9a:e8:d8:04:48:0e:f4:
02:14:07:81:b1:66:d6:4a:e9:0d:96:4a:0a:79:fd:
ef:e2:96:fe:d7:26:69:4e:06:8a:13:73:36:be:1f:
1e:46:59:fe:b7:40:27:00:f5:27:9a:3a:b2:44:c7:
43:a1:3c:ab:fe:e5:72:6b:c9:5e:20:7a:df:e9:8d:
15:07:96:8a:ba:6d:8e:1a:90:75:d3:88:f1:d3:c5:
17:4a:b0:d1:00:e1:dc:22:f9:ee:5b:86:fb:97:1a:
a5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7D:78:1E:BA:B7:F0:8E:8B:F6:DA:4A:D3:B9:5D:47:CB:50:3E:68
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a3:12:8b:b6:26:de:de:04:5e:dc:7f:87:b7:bf:17:1f:2f:
a2:7b:b0:e4:59:1a:89:f1:0a:8e:58:17:3a:96:17:6a:f9:36:
a1:b2:38:cf:d3:3b:13:7f:3a:41:5a:72:74:5b:c6:ec:34:7b:
81:9e:f6:51:7c:e0:cc:cc:41:5f:7a:f9:71:32:e1:e7:36:d9:
e4:c1:a2:59:f2:ee:be:77:1e:c0:fe:f1:74:1f:8a:09:44:99:
5e:7f:68:fb:9b:69:bc:43:1b:fa:0b:d1:89:cd:7f:b3:4e:c9:
55:d2:37:3c:0d:46:02:34:61:32:88:bb:a5:b0:36:92:36:ce:
5e:e0:d0:cd:22:37:1e:4e:fb:4c:51:fe:d5:63:06:6f:08:b7:
e4:a0:80:23:c4:fb:28:62:29:d1:db:5e:78:c2:94:7a:ff:42:
80:cb:32:e6:86:cc:2a:f9:ca:da:47:96:5e:50:20:b6:a6:dc:
c8:71:89:8e:95:69:8b:9f:47:ae:0a:5a:ec:2c:e1:80:04:6a:
34:e4:ce:df:97:ff:ad:f4:95:25:19:c1:fe:c1:d4:5d:2c:74:
f9:4d:28:fd:60:4d:2a:df:c5:20:d7:94:fe:6a:5c:6a:6a:28:
5d:f2:79:aa:a1:6e:20:77:d1:39:24:8f:46:d7:2b:d5:0c:8f:
23:05:5a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:00:20 2026 by rpki-client