Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
File: pXlpaAlFNrk-cervrwEKoeg85-o.mft (raw, json)
Hash identifier: 3GnUxpQrmK4IuA2VU2TWg/0U2paDP9hegbH+MiTluCg=
Subject key identifier: 1C:49:41:A8:A9:19:E5:0E:82:80:70:0F:33:B7:E1:E8:10:78:51:1E
Authority key identifier: A5:79:69:68:09:45:36:B9:3E:71:EA:EF:AF:01:0A:A1:E8:3C:E7:EA
Certificate issuer: /CN=a5796968094536b93e71eaefaf010aa1e83ce7ea
Certificate serial: 019FAC76BD1CED70822A97828B19B2D13CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:30 +0000
Manifest this update: Wed 29 Jul 2026 06:01:30 +0000
Manifest next update: Thu 30 Jul 2026 06:01:30 +0000
Files and hashes: 1: _DzVp-qQbUGUWJR9yTGDbteQ9eI.roa (hash: JCR4JCzOBUmsSicgbt13vgqc/sqq+RW2fZ4Pr3z6YPQ=)
2: pXlpaAlFNrk-cervrwEKoeg85-o.crl (hash: 0qKB8DMSrtH6nBWYH20H/eTnASQ+DMhF0R9cdXG9BC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:bd:1c:ed:70:82:2a:97:82:8b:19:b2:d1:3c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5796968094536b93e71eaefaf010aa1e83ce7ea
Validity
Not Before: Jul 29 06:01:30 2026 GMT
Not After : Jul 30 06:01:30 2026 GMT
Subject: CN=1c4941a8a919e50e8280700f33b7e1e81078511e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:58:54:32:d6:11:61:36:79:37:73:1a:ca:
64:07:8c:1c:cc:5a:01:83:2e:93:7c:54:5b:11:3e:
e9:fa:d5:f7:32:02:34:bd:a3:6a:9e:fb:d1:e3:cc:
c3:fe:57:41:a6:71:4e:af:20:0c:2a:28:0c:91:88:
ae:6c:6a:9c:92:d6:d5:5e:31:da:a9:7e:82:2c:fd:
ec:ec:ff:48:8e:e6:9b:1a:4b:5f:99:32:e4:49:7a:
21:d5:db:5d:ad:9c:bd:b3:c6:03:7f:dc:a7:e8:b9:
2e:d7:58:12:36:69:92:34:9a:14:ab:b1:8e:83:d7:
69:e3:15:7c:20:87:7a:60:80:55:e6:a9:2c:64:2a:
a0:73:d7:dc:d5:f3:b2:82:0b:f3:aa:29:92:a9:8d:
af:0e:6d:51:f4:08:0e:69:59:ec:98:74:09:47:86:
7c:c9:95:32:ca:a8:8a:6b:82:f8:25:62:02:d8:da:
9f:68:fe:da:8d:af:84:81:80:16:f9:57:97:bc:01:
9e:a1:d3:0f:46:18:4d:a9:b0:21:3a:dd:43:5c:54:
c4:e0:e3:c3:12:6f:f3:3b:ec:7b:24:43:06:bf:44:
0b:22:78:81:61:cf:0a:cf:fd:da:35:25:91:0e:ae:
61:9a:b3:df:84:48:0e:41:45:30:8c:7c:cc:24:12:
3d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:49:41:A8:A9:19:E5:0E:82:80:70:0F:33:B7:E1:E8:10:78:51:1E
X509v3 Authority Key Identifier:
keyid:A5:79:69:68:09:45:36:B9:3E:71:EA:EF:AF:01:0A:A1:E8:3C:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:78:ab:16:ff:21:37:84:df:55:60:dd:c2:cd:6d:7b:dd:3d:
a5:fc:49:bc:0d:0a:54:40:81:b0:13:22:17:6f:b0:37:2c:b1:
f9:40:20:69:0c:f7:b9:e6:3e:eb:4c:52:fd:0d:3a:1c:3d:c3:
57:9f:f1:7e:0a:b1:8f:e8:ba:55:09:07:fd:8a:b6:cf:d2:e0:
f8:27:de:2b:b1:fb:ba:f6:72:81:25:2d:a1:17:85:7f:a0:20:
46:14:93:82:01:52:09:63:79:17:cc:32:e5:dc:87:e1:00:05:
f3:39:88:41:1a:5c:12:4f:a5:ba:2b:8c:42:6e:45:fe:c2:ee:
45:b8:69:51:fd:23:e8:bc:7d:4a:f3:26:0d:9f:46:7f:81:4e:
7f:87:61:30:65:22:70:36:bb:f9:de:78:af:10:a0:bb:17:8a:
73:54:58:d1:ef:85:b6:92:08:ee:51:d6:15:df:4f:6f:3a:7b:
e7:6b:a6:ff:e5:d3:77:2e:d0:a4:5d:a5:5d:9c:ae:17:1f:02:
15:d4:13:03:cd:80:25:75:95:49:36:bb:bd:5c:dd:89:e3:98:
3d:0d:be:44:d9:15:14:b5:fb:8d:45:a6:a4:24:08:3f:2f:88:
10:61:1b:32:a4:ba:43:3d:2e:cc:ef:ef:7c:51:fe:49:c6:29:
03:41:28:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:02:50 2026 by rpki-client