Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: rrYsxm34qjqTksSZFDEoyezf4Zx5XSHc8BQy4bgwvwA=
Subject key identifier: 00:2C:37:CC:BC:1C:02:EF:A7:B9:5F:C2:AA:36:6C:68:A0:96:2E:A8
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 019FAA1A047E166940F06105E784196D2405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 19:00:59 +0000
Manifest this update: Tue 28 Jul 2026 19:00:59 +0000
Manifest next update: Wed 29 Jul 2026 19:00:59 +0000
Files and hashes: 1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: shqUkSdbc/Fm8QKtQ6lnIlso/TmMOdUJNIxbR8PETjI=)
3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:04:7e:16:69:40:f0:61:05:e7:84:19:6d:24:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Jul 28 19:00:59 2026 GMT
Not After : Jul 29 19:00:59 2026 GMT
Subject: CN=002c37ccbc1c02efa7b95fc2aa366c68a0962ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:f7:bb:ca:49:2f:81:1e:06:14:76:77:b9:
5d:9c:52:d4:02:79:b0:8b:b4:dc:e7:71:c3:3d:08:
c7:b3:71:02:c2:4d:dc:25:d2:09:3c:76:34:5e:6e:
6c:6e:5a:38:35:d0:49:84:4a:d8:16:7b:1d:ad:e1:
77:34:b8:a3:0d:55:82:2b:a9:c5:8f:d2:09:45:5c:
74:61:7e:5f:93:49:ea:8e:8c:d2:91:e7:ba:fb:84:
82:cc:73:b6:ca:8d:ee:d2:7b:06:b5:b8:91:2d:68:
cd:8b:ba:5e:b2:c7:b0:f5:00:05:d7:84:12:e3:ff:
21:b0:20:17:9c:df:a4:49:84:98:8b:ee:c3:fe:2c:
fc:a5:e9:2b:88:4c:f8:48:f8:44:f3:56:15:8f:e7:
91:bb:66:6c:18:6c:61:ff:16:dc:0e:a4:85:c5:7c:
e9:1b:13:0c:fc:3c:4a:19:40:d8:d6:19:19:18:2e:
f8:9e:6c:8a:32:9d:b6:9c:20:3c:a1:45:a0:a4:42:
40:16:1c:87:f3:38:49:e6:18:8e:b4:e2:60:68:9d:
da:59:c0:90:e0:3c:6c:4d:a9:81:48:0d:b4:18:c5:
90:47:a2:3f:c9:d3:29:81:77:47:59:77:d5:e6:40:
d4:e1:40:e9:f7:58:68:b1:3b:57:2c:16:f8:97:f1:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2C:37:CC:BC:1C:02:EF:A7:B9:5F:C2:AA:36:6C:68:A0:96:2E:A8
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b6:c7:47:ae:5e:b9:3d:6a:97:88:0b:49:0f:62:7c:ac:31:
15:cb:fb:ad:b8:9e:db:8d:6b:38:21:67:fe:c9:b6:09:48:7f:
07:89:69:c7:60:c6:6a:99:02:a0:ca:c0:12:d1:b1:c0:55:6a:
f6:b9:7c:8d:de:22:3d:de:2e:5d:11:06:49:b5:b2:33:01:c8:
77:b4:2d:55:ce:b5:e9:9f:53:36:28:7f:73:36:1a:27:f4:b9:
6f:49:99:9a:10:ce:98:f4:9b:f9:f7:f6:cb:07:a1:db:f9:f3:
05:87:20:6c:09:fc:29:a9:12:34:f2:ae:0b:11:d5:ee:68:5d:
82:b2:e4:4f:38:d7:f1:10:15:6d:bb:8f:4e:b8:d5:d4:25:79:
4b:fe:ec:09:c8:e4:13:4b:99:32:74:04:c0:9e:b2:cf:09:5a:
69:0b:a0:7d:e3:7b:2f:24:6b:40:fc:b1:af:53:8a:dc:d0:7f:
42:fb:d3:f9:6f:ee:c9:b3:a7:71:27:7d:ac:54:68:c3:2f:c8:
de:b0:12:2c:b0:20:2e:c1:f0:22:4f:80:08:48:a6:c8:d4:9c:
36:73:a7:d9:bd:2d:3b:d8:19:51:3a:c1:55:f5:1c:f9:3c:ea:
3e:85:d8:24:76:86:94:9a:db:b2:c3:4d:1a:3b:b2:19:e7:02:
14:e3:02:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:21:05 2026 by rpki-client