Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
File: pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft (raw, json)
Hash identifier: u37stP1Xqo5XUnJ3VL/eyqu+GGp4alxa5+jM5VDrnNs=
Subject key identifier: DC:BF:5C:EF:32:C5:47:49:85:11:EF:06:E5:A7:99:06:60:09:E2:59
Authority key identifier: A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
Certificate issuer: /CN=a4537cbedad356819cbc77ae3fca17d65431c280
Certificate serial: 019FAA88C54018C1970A9FA088B8F795BD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:57 +0000
Manifest this update: Tue 28 Jul 2026 21:01:57 +0000
Manifest next update: Wed 29 Jul 2026 21:01:57 +0000
Files and hashes: 1: AmJH-oKP8JDfCGjtvLBdScjcl94.roa (hash: JYSfH/iBbNzkn+YYYr8OyA3qLrDl+3bHlmfyOFI1Y70=)
2: BnfQ_AzrFoZh3KLGYso6JJ9GXdo.roa (hash: ENsW9JPhfPIhP5yk5NQtzakTi0pxm6wJtb9Q7w/b4ZM=)
3: FBnng7ak4AJweaj7mNiiDGPhP-A.roa (hash: 7O6BMYqqhyaPH6JejfjvmE43i9bE4Safke5zHGTaAxk=)
4: NwJicw-oNTpUA4v64y45-zeOf4g.roa (hash: INZDhCKr9gd0n290T2UKiTgj0PQTfi5Y3hHK5PYeBA0=)
5: aZqL4PQIRKXk-Nf9g8MWjRBJYWY.roa (hash: oswi/PqLXiY69b2lF56784lBrhIisxDRepTm/CrpEY8=)
6: pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl (hash: NC8azm14mN9Rx359ypYYzCljrEuzD8zngsdN2kHlEgY=)
7: qThwM4VOPtwJ-fORifwyTLzk-FM.roa (hash: inwDpdNUtTVuD4hxozBiGnVD6vXL05h5rizEBbo4mSI=)
8: vlQgVNHMOMDCgexHalesjIDPMos.roa (hash: NKNm5ZfHR4kcXtf4m4rKT2uIMrcP5kuQXn9iZz+SX+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:c5:40:18:c1:97:0a:9f:a0:88:b8:f7:95:bd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4537cbedad356819cbc77ae3fca17d65431c280
Validity
Not Before: Jul 28 21:01:57 2026 GMT
Not After : Jul 29 21:01:57 2026 GMT
Subject: CN=dcbf5cef32c547498511ef06e5a799066009e259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:6c:d1:3e:a9:be:c4:f8:66:a1:e4:48:0c:
66:09:1f:4b:cd:69:2e:1a:9c:da:4f:18:f9:32:a2:
36:dd:c7:ee:74:52:4e:96:7c:49:d4:eb:0c:d1:aa:
17:27:e5:64:2f:33:64:ae:00:37:ae:86:77:9a:b1:
10:d7:6c:c2:94:6f:f0:b0:05:bb:03:53:a2:21:ef:
67:6b:a8:35:e8:62:cc:87:4a:e2:36:a0:da:34:63:
fe:d1:61:78:a0:03:c2:f5:dd:9b:c7:12:2d:1a:62:
3e:22:36:a6:0c:a0:69:62:43:ea:5b:0f:ee:fd:0c:
16:25:3d:38:0e:17:47:b2:24:79:5d:93:07:a2:23:
0f:9a:10:5a:47:d3:3d:ea:28:61:56:ca:be:54:c3:
2e:83:14:e7:0e:fa:01:6e:1e:6e:0f:60:42:84:68:
ee:c3:4d:d7:8d:eb:8f:92:37:c6:12:52:c1:b3:ed:
7d:2c:59:2d:5b:ad:56:4a:b7:5c:a9:c9:3b:03:08:
7b:1e:74:5b:6b:a0:7a:21:14:1f:67:60:87:60:9c:
f8:ed:be:d1:a9:c7:88:ec:31:e4:f2:cd:9d:e8:9b:
bc:9f:69:49:6d:b4:0d:d3:60:8c:22:a3:e1:55:a0:
2e:dc:3e:40:89:ad:60:cb:60:3f:81:b5:6c:85:62:
3f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BF:5C:EF:32:C5:47:49:85:11:EF:06:E5:A7:99:06:60:09:E2:59
X509v3 Authority Key Identifier:
keyid:A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:63:19:bb:16:31:29:41:ca:8d:9a:14:f9:69:f8:ad:72:f4:
c8:71:85:2e:ae:33:3b:7f:21:1b:de:f3:d9:a6:cb:d0:ab:ec:
99:c1:8a:cb:9f:fb:23:86:7f:e0:eb:94:d5:e2:f0:4e:b7:22:
17:35:e9:7e:da:74:00:45:98:02:a1:e1:8d:fb:a7:d8:99:2f:
62:22:67:eb:c9:85:59:46:dd:fe:1e:d0:31:b1:3f:3c:36:cf:
e7:7c:25:ec:e9:d3:11:bc:10:c7:d2:ca:8a:8f:8e:ad:01:62:
6f:52:a7:f0:bd:12:26:4c:de:5b:67:5c:60:9e:95:b3:1d:06:
3f:a0:0b:5c:ef:ef:d0:c9:ad:ba:f0:ac:f4:c4:a2:61:74:20:
b7:09:3a:c1:37:a7:7f:e0:78:3e:52:12:3a:8f:25:61:c4:1b:
28:17:84:c8:9c:f6:c1:45:ee:42:e0:a8:65:c4:02:6b:70:b1:
21:e7:d5:90:e5:c4:50:c3:e8:a0:6b:67:16:bf:a7:9a:05:b7:
64:4c:84:02:76:9a:a7:0e:a6:44:04:af:6a:81:5e:e7:99:e9:
67:15:4e:37:ad:1f:ab:22:30:98:c7:34:65:22:22:9e:2a:96:
57:bb:01:a3:c2:91:02:b7:42:dd:aa:78:e5:ad:90:50:22:50:
6c:48:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:24:28 2026 by rpki-client