Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File: Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier: xLpj4tKwzoGrnHAwKPzRFxXztAtALFIHZ7usKCu407k=
Subject key identifier: 50:75:FB:9F:46:65:3A:05:56:B0:AA:15:A2:59:E1:75:64:E6:E3:B1
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer: /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial: 01A0CCDA2718270D5C8A7DBDB3D8E73D09D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number: 16FF
Signing time: Wed 23 Sep 2026 06:00:43 +0000
Manifest this update: Wed 23 Sep 2026 06:00:43 +0000
Manifest next update: Thu 24 Sep 2026 06:00:43 +0000
Files and hashes: 1: N0lWMYy9L6tUgt5C_ALrdVgjFpM.roa (hash: 3TxHIvizHgvT9zapL1jqZMumyRmsqmWLMCRlhTI/E5A=)
2: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: XNQmisG7whzbyzhKmda81ZYFEEx4BJkHti7N49FyP8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:27:18:27:0d:5c:8a:7d:bd:b3:d8:e7:3d:09:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
Validity
Not Before: Sep 23 06:00:43 2026 GMT
Not After : Sep 24 06:00:43 2026 GMT
Subject: CN=5075fb9f46653a0556b0aa15a259e17564e6e3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:6b:28:83:e1:5d:1f:a6:a3:fb:2c:3e:0e:
77:84:33:5b:63:32:f2:65:0a:1b:12:7d:94:79:55:
2a:9f:6f:06:dc:77:de:12:42:db:40:c6:46:1c:16:
e8:a2:c6:a3:a6:6c:da:ac:af:63:7c:c9:f6:90:eb:
5e:4c:99:0f:54:7d:e2:64:6a:27:1e:65:40:2c:84:
91:22:43:6b:ae:69:f6:09:9a:d7:0e:71:92:ab:fc:
5f:15:7d:76:2c:e4:b3:0e:13:17:f9:db:96:59:b1:
92:8e:9f:fb:92:e7:c6:05:f3:d2:0f:4c:3f:1c:46:
b6:2e:0c:33:20:68:26:b5:d5:17:26:70:e1:25:b3:
a2:33:45:11:fb:0b:8e:71:bb:4c:e3:f1:b9:3e:51:
ce:6f:bd:bc:de:70:6f:c9:3f:69:8a:45:39:63:a0:
e8:3d:bd:c6:49:e4:42:ed:eb:de:ed:47:bc:2a:3b:
91:35:04:13:51:61:0a:29:40:78:97:9c:0c:82:b9:
3d:0a:b5:75:3e:d9:cb:7b:a6:9b:85:c0:1a:3a:2e:
76:21:6e:a7:ea:8b:08:65:14:4f:0e:9b:e0:b8:a0:
4c:35:80:fa:8c:c0:ff:fd:c4:69:b6:ea:88:16:2f:
ba:d2:d8:f4:f3:05:9e:3e:00:77:7e:79:65:aa:ea:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:75:FB:9F:46:65:3A:05:56:B0:AA:15:A2:59:E1:75:64:E6:E3:B1
X509v3 Authority Key Identifier:
keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4e:d0:20:f0:56:34:da:fb:fe:76:93:07:74:24:19:5e:7a:
e2:32:e4:f9:c5:c6:b5:a4:0c:a5:b5:da:91:93:da:de:c0:e5:
02:1a:c7:66:81:cc:96:c6:61:c0:12:70:0b:fa:d6:b7:e8:d6:
c6:ff:28:eb:1e:bf:cf:25:9b:45:c9:7e:64:76:bb:3b:fa:ce:
79:ad:ca:82:b2:bf:21:e6:72:cd:20:80:ef:f6:91:64:81:46:
2a:99:2e:1a:d6:52:53:4a:8f:4b:db:5d:73:99:ce:d9:99:7d:
32:93:ff:75:ec:d1:c4:8f:de:3e:1e:da:37:ec:f1:5e:3d:53:
ba:85:51:e3:10:34:7a:0e:8a:72:b8:24:c5:31:fb:fb:60:f4:
ca:5b:2f:9d:7c:3d:d5:af:1c:73:a5:8c:6b:ff:c5:4f:ca:9a:
b5:8c:d8:94:e6:e4:52:2a:f9:c4:14:d5:eb:4a:d2:74:d1:45:
51:cf:2f:4d:7e:41:eb:4d:cf:b5:43:38:16:ba:fd:12:2e:38:
42:c7:00:93:4f:0b:a4:b6:c7:5e:8a:b3:0a:74:08:a8:75:d4:
94:54:f2:27:71:a6:e0:63:bb:d7:da:55:ca:96:85:25:4c:db:
c3:a1:e9:bc:d5:c1:4f:3b:fd:68:cf:9c:22:6c:20:7a:bf:9d:
0e:cd:c2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:36:12 2026 by rpki-client