Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
File: pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft (raw, json)
Hash identifier: xGSY1WQru6DdCWUZ0qzFLcqI2e5PHqW6B9inC5wOo24=
Subject key identifier: 95:A2:6A:F1:35:DB:9E:E7:14:03:4E:B6:D6:E8:4C:21:08:3C:43:89
Authority key identifier: A4:5A:3D:EE:A2:2A:D7:0F:44:BD:FF:F3:DA:CA:78:7C:FA:B7:3A:FC
Certificate issuer: /CN=a45a3deea22ad70f44bdfff3daca787cfab73afc
Certificate serial: 019FAC76AE065979F89C1AAB08C65B5AF843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
Manifest number: D1
Signing time: Wed 29 Jul 2026 06:01:26 +0000
Manifest this update: Wed 29 Jul 2026 06:01:26 +0000
Manifest next update: Thu 30 Jul 2026 06:01:26 +0000
Files and hashes: 1: ZhmfZOQthLNwaXu66U6ErWqlalA.asa (hash: qf+Z2Ej6j2Id/dJp4k8hFnsz0b10rm8/N0nNZYscrA0=)
2: pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl (hash: gAHZKqhUCwxH9xe8rqDiA+7eW4lDOrFQMFcUatfSOQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:ae:06:59:79:f8:9c:1a:ab:08:c6:5b:5a:f8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45a3deea22ad70f44bdfff3daca787cfab73afc
Validity
Not Before: Jul 29 06:01:26 2026 GMT
Not After : Jul 30 06:01:26 2026 GMT
Subject: CN=95a26af135db9ee714034eb6d6e84c21083c4389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1f:9c:8a:0d:68:46:39:5e:f9:4b:e1:2c:01:
57:d5:bf:57:f9:af:16:d4:5a:23:9c:6b:ae:1d:76:
99:ab:e5:e3:9c:44:07:b7:a6:e4:5b:de:f1:08:67:
ab:49:46:2c:65:1a:90:32:a5:04:53:c3:59:b2:55:
df:be:ac:07:f9:d4:d9:f5:e3:fa:c7:d7:77:80:c9:
75:bf:2d:ad:d9:3e:e1:dd:91:34:7d:64:d2:11:7b:
91:a0:da:ce:3d:32:77:1c:86:00:c6:bf:17:c5:b6:
57:cc:92:6d:2c:60:d8:03:4d:45:b8:5c:d5:dc:17:
19:a8:f8:09:79:32:b7:12:f1:eb:c8:ee:ac:9a:64:
b9:6a:0b:5e:e5:2a:90:8d:26:34:f7:3d:2b:86:14:
fe:d5:30:d0:78:11:a4:52:04:87:32:71:b6:9c:d7:
b8:de:56:37:01:ea:28:3a:b3:be:8f:b1:3c:b3:e0:
4d:57:9c:d5:c1:0c:ac:53:81:ba:05:0e:4c:8d:5e:
74:00:ca:6d:9c:4a:4b:53:e7:2f:27:a1:89:4a:3b:
da:8e:b3:af:cf:d7:5d:f9:2e:ea:dc:90:04:d4:7a:
26:c0:ed:c3:cf:06:71:36:7e:e7:8c:b1:be:36:ad:
88:50:30:24:b8:ba:d2:48:7a:7c:65:c6:8d:e5:3e:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A2:6A:F1:35:DB:9E:E7:14:03:4E:B6:D6:E8:4C:21:08:3C:43:89
X509v3 Authority Key Identifier:
keyid:A4:5A:3D:EE:A2:2A:D7:0F:44:BD:FF:F3:DA:CA:78:7C:FA:B7:3A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:41:3e:af:99:f6:59:64:a7:6c:33:1c:3b:20:a9:08:67:0c:
97:2c:9c:7b:ee:64:43:c7:6e:1c:a3:03:25:c6:0c:e9:7c:ff:
96:f5:b1:40:e7:b1:ec:e2:94:9d:ba:a9:15:b6:0b:a2:01:97:
09:88:c1:2b:c0:ef:5c:7a:8f:64:73:a5:64:48:34:cc:8c:f6:
58:c6:3e:21:46:66:ad:55:3a:b4:ba:8c:a7:8a:9e:61:f9:47:
55:29:db:41:ca:b7:6f:0d:3e:a0:f5:05:3e:bf:b9:d3:04:2c:
92:86:7d:a0:ba:54:01:c6:98:33:68:d5:90:23:b1:61:d1:3d:
ff:c3:78:5d:f3:4c:ff:49:11:2d:92:9e:b2:2e:da:6e:c9:14:
04:78:10:72:12:ce:b9:3a:75:5c:45:06:80:d5:48:c6:d6:a9:
bd:67:58:af:f8:14:bd:42:c7:21:27:f3:8f:6a:fd:81:cf:94:
6a:1f:9c:06:0e:bf:0b:af:79:70:6e:98:55:b1:0c:70:22:53:
db:ff:10:96:3f:5d:60:16:dc:d9:8b:d2:a4:ff:18:c4:72:20:
0f:78:7d:13:7d:fd:10:8e:0c:39:1c:dc:cb:e4:80:b8:b7:93:
11:40:e2:98:09:c7:8c:27:d2:1a:78:a7:d5:93:ae:17:44:37:
f1:e1:3a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:20:18 2026 by rpki-client