Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
File: pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft (raw, json)
Hash identifier: qui4bMI64CO23ZUtsDB+E0fywlXN98zIa6idPef4Tkw=
Subject key identifier: 17:F3:92:34:E6:38:89:0B:71:68:0B:99:35:1B:94:3C:63:C7:25:3C
Authority key identifier: A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79
Certificate issuer: /CN=a4396ac14b77b1f033d9e459210c873b012e0a79
Certificate serial: 019FACE3D0D345EDAB3A58A466B3C395093B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
Manifest number: 72
Signing time: Wed 29 Jul 2026 08:00:39 +0000
Manifest this update: Wed 29 Jul 2026 08:00:39 +0000
Manifest next update: Thu 30 Jul 2026 08:00:39 +0000
Files and hashes: 1: 2GYhbWHtfBWPF1UEk4OY2FR4BlE.roa (hash: w4kZnQsbsuOxKFHTlD0TVfi8ciQmtnzyEXnJDLUlaZo=)
2: pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl (hash: O5cdOopjfeetfYnUfJ4OR63JNFcY9QpAXarPu1oze2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:d0:d3:45:ed:ab:3a:58:a4:66:b3:c3:95:09:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4396ac14b77b1f033d9e459210c873b012e0a79
Validity
Not Before: Jul 29 08:00:39 2026 GMT
Not After : Jul 30 08:00:39 2026 GMT
Subject: CN=17f39234e638890b71680b99351b943c63c7253c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:07:af:d2:e7:83:9a:06:5f:fb:41:ca:86:
3f:87:e6:d7:cb:26:c1:4f:78:0f:4a:bb:b3:fe:25:
dc:1e:28:86:c3:24:f7:a9:7d:b4:fa:ce:67:43:34:
d0:41:39:eb:5e:70:80:d9:5d:54:dc:8d:ae:3b:4a:
45:88:b6:4a:c7:05:f1:99:33:56:98:f1:f3:e3:43:
1f:ee:d5:eb:98:63:f7:8c:f7:5b:3d:0f:2c:f7:39:
78:29:2b:dc:68:86:c4:5f:d2:b1:80:63:e6:8b:20:
0f:d3:10:86:3f:24:91:94:18:6f:cf:83:f7:e9:65:
ad:f3:13:ec:72:e0:b0:9f:b0:46:f3:5b:15:88:99:
a2:55:5d:e9:96:34:49:ea:8b:73:51:55:f0:3d:7f:
e4:50:35:05:ee:90:d6:7a:5d:66:97:70:4b:9d:a2:
b1:2c:4f:d7:ba:ad:ce:75:1e:37:f7:ef:2c:8b:4a:
f1:53:c8:8b:80:2e:6a:62:ba:7c:03:75:32:b0:6f:
2e:83:ae:bb:9e:76:28:68:f2:02:15:93:ef:91:8e:
c5:13:cb:34:4b:2f:11:48:89:45:1a:34:94:03:5b:
de:3c:d8:35:15:2a:f7:48:a3:24:3d:da:78:76:6f:
cc:4f:54:d6:89:b3:6f:ac:fd:f4:26:70:1f:d3:96:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:92:34:E6:38:89:0B:71:68:0B:99:35:1B:94:3C:63:C7:25:3C
X509v3 Authority Key Identifier:
keyid:A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:fe:ff:5e:79:44:7d:44:9a:69:97:03:d3:8a:b5:99:ac:14:
25:6f:f9:b7:2c:d9:98:1d:b7:1e:30:e2:1a:26:cc:46:d4:24:
cf:86:90:10:38:45:b1:36:21:bc:cf:2a:66:54:ec:64:d3:95:
86:32:b2:0c:ba:94:09:5e:4c:a0:61:d9:30:89:d5:a1:c1:6d:
ec:f3:bd:d0:74:dd:07:5b:dd:3e:39:8f:30:c6:ab:22:6c:7f:
94:48:5a:32:72:f3:cc:ff:ca:9f:2a:61:25:98:42:99:90:29:
79:a7:16:52:0b:4a:6a:63:c7:8f:d9:c4:e8:6a:0c:33:50:5c:
f4:3b:92:01:3c:35:90:a6:8e:3f:c1:c5:38:0c:0e:b1:4a:fe:
8a:84:d0:e0:df:4a:e6:4c:00:ab:4c:bd:71:52:05:d2:31:dc:
3c:91:74:86:f3:10:20:3b:33:c3:a5:f5:94:ea:85:e9:6e:ab:
0f:30:9d:e9:7b:00:7e:6b:4e:1a:f9:02:ec:1c:86:21:42:0f:
90:6e:42:e4:4b:4c:cd:2c:ee:2d:2d:e8:c8:bf:0e:e1:82:bf:
96:56:9b:a8:1e:f6:d9:b5:28:44:59:3f:ca:e2:6e:f6:e3:d8:
e5:58:45:8d:2d:27:60:72:b6:13:f6:df:10:d5:2e:6c:ab:e0:
16:c9:c4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:24:59 2026 by rpki-client