Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File: Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier: ceIuiiUT9vBUD45fR9EDtdxIOhRUA7c86zqSWFn2DZ0=
Subject key identifier: 72:75:89:E7:D6:8B:50:86:B2:2A:C1:64:29:67:90:A3:EF:3D:10:FC
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer: /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial: 019FAB2C1A6F89BF61A814EA1E7A7ECAEAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number: 1669
Signing time: Wed 29 Jul 2026 00:00:21 +0000
Manifest this update: Wed 29 Jul 2026 00:00:21 +0000
Manifest next update: Thu 30 Jul 2026 00:00:21 +0000
Files and hashes: 1: N0lWMYy9L6tUgt5C_ALrdVgjFpM.roa (hash: 3TxHIvizHgvT9zapL1jqZMumyRmsqmWLMCRlhTI/E5A=)
2: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: U6w5c0BekoY/NXwSZaoG/BK1tKcyjd8YUiGREeCZ4Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:1a:6f:89:bf:61:a8:14:ea:1e:7a:7e:ca:ea:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
Validity
Not Before: Jul 29 00:00:21 2026 GMT
Not After : Jul 30 00:00:21 2026 GMT
Subject: CN=727589e7d68b5086b22ac164296790a3ef3d10fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:45:93:12:31:6b:63:5f:1f:bd:e4:e1:e1:
9f:e7:6c:11:7a:f1:35:3b:7a:23:17:fb:f4:8b:57:
15:29:b6:ec:19:7b:08:84:41:15:6f:b6:eb:3a:9a:
80:64:08:e2:e5:5b:68:c1:8e:a6:9f:b6:a8:9e:3d:
8b:05:b1:38:2a:91:57:73:43:bd:dd:af:3d:b8:b7:
e3:ea:df:6d:03:a1:d6:f7:39:e4:64:9d:27:67:7f:
de:f9:cf:b7:e2:3e:a9:2b:d6:cf:f9:dd:21:28:70:
db:86:cd:86:d3:27:f7:c2:4e:01:cb:af:a1:93:56:
95:b7:a2:cd:fb:13:09:e1:87:86:76:a3:f0:ae:cd:
76:3d:b6:26:60:66:2e:06:87:ad:48:31:e6:06:53:
5d:47:9a:bd:ed:40:92:af:65:cc:4c:48:16:32:34:
57:ec:63:40:ed:5e:12:29:80:18:0b:4d:bb:8a:b8:
d0:35:a8:03:8b:e4:96:90:0c:9e:41:ea:0a:8d:2b:
4c:78:81:c0:5a:59:80:11:e3:7d:6f:35:fa:57:7e:
db:5d:12:75:02:dd:86:90:80:fc:08:51:0b:01:22:
3d:bd:b1:6f:81:46:96:16:fd:37:58:f9:d1:9a:21:
1c:9f:ee:9d:07:f9:86:12:c8:7e:d4:1f:cf:04:65:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:75:89:E7:D6:8B:50:86:B2:2A:C1:64:29:67:90:A3:EF:3D:10:FC
X509v3 Authority Key Identifier:
keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cc:f9:44:a5:f1:30:9c:45:90:15:d1:a8:3c:f1:0a:84:78:
ca:67:06:e8:1d:16:c5:98:01:50:85:52:87:10:62:28:9f:92:
df:35:45:d3:03:80:89:a4:99:6a:c7:b3:37:3b:cf:0d:5b:f1:
a3:68:30:1f:55:dd:a4:5a:4c:2b:0f:cd:8d:69:d0:a6:c9:f6:
1d:51:1c:cb:2c:f1:d6:cb:be:12:73:0b:ad:a0:5f:6a:c2:34:
23:96:46:e4:35:a3:78:80:07:ed:83:30:13:4d:e0:eb:02:b2:
07:62:da:09:12:01:45:3e:91:18:d7:41:86:95:b0:f4:d9:52:
a5:7d:cc:30:a8:68:f4:99:61:48:29:7a:08:68:1d:17:e9:f9:
14:2c:29:b0:8e:93:c0:29:c3:8d:e3:45:43:ed:35:dc:b1:e6:
ca:9f:83:8c:91:82:1a:c6:a2:d9:dc:60:63:18:d2:5e:70:93:
b1:6c:c1:bb:ac:5e:da:6c:bd:9b:98:2a:95:7f:62:23:cd:15:
54:fd:d5:aa:7f:6b:2b:84:08:2d:ba:6c:3b:67:a6:c9:24:28:
7c:be:47:6e:be:67:87:d5:e4:25:8e:a6:48:31:22:33:38:53:
ad:56:dc:96:1f:87:2e:8f:e5:56:04:2d:39:15:a6:95:db:59:
cc:49:d1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:16 2026 by rpki-client