Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
File: PvRdcGusxYrv9q5H8jLZKzwvsBg.mft (raw, json)
Hash identifier: go3ynr6Z0bflc7kC6EGZqazx2eSuil0OFdFCYhxKMYI=
Subject key identifier: BE:47:7F:C9:C9:D7:A7:95:04:AF:E9:49:14:86:B8:26:36:92:1D:6D
Authority key identifier: 3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18
Certificate issuer: /CN=3ef45d706bacc58aeff6ae47f232d92b3c2fb018
Certificate serial: 019FA899C77F4CEE767DF4C44F589A7AD562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
Manifest number: 65
Signing time: Tue 28 Jul 2026 12:01:18 +0000
Manifest this update: Tue 28 Jul 2026 12:01:18 +0000
Manifest next update: Wed 29 Jul 2026 12:01:18 +0000
Files and hashes: 1: NL1w9Xj9eNNvZHja4bYi8u1uP0g.roa (hash: bGa7KQ5aQ4eZWg9YSqL9Pvq1iyjpLbcYhC9x7Z0XWS8=)
2: PvRdcGusxYrv9q5H8jLZKzwvsBg.crl (hash: lpw3izS73kBC2eZ0O9OzuqRJfVg106acNVpOxGPk8X4=)
3: UGXYFC9jlohYNhw6f4qzRWdUTE8.asa (hash: EAHRau/OfR99p6HOKLABIO+IowH54Ml4zKfLXfBoos4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:c7:7f:4c:ee:76:7d:f4:c4:4f:58:9a:7a:d5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef45d706bacc58aeff6ae47f232d92b3c2fb018
Validity
Not Before: Jul 28 12:01:18 2026 GMT
Not After : Jul 29 12:01:18 2026 GMT
Subject: CN=be477fc9c9d7a79504afe9491486b82636921d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:4d:a1:33:7d:5a:6f:72:39:a1:9f:e5:b8:
36:83:26:03:05:56:0c:06:7e:f3:14:db:f8:9a:f1:
ae:8e:4c:30:ac:2c:43:39:b2:1a:1f:70:8e:6e:08:
30:f8:44:b5:89:04:89:12:62:2c:ff:d5:b4:91:89:
18:3c:40:26:ea:66:5f:30:94:0e:e2:6c:fc:27:7b:
a7:42:4a:28:a1:78:0a:36:e5:43:41:57:f4:00:d1:
12:9e:f7:15:d9:aa:0a:3d:e0:e4:79:56:5e:3f:89:
94:98:b1:ca:9c:01:25:89:58:bd:55:1b:43:85:6f:
7e:d8:72:ed:7d:52:34:04:81:4e:a5:2a:a8:8b:fc:
18:f8:39:ea:09:9b:de:7e:c3:64:30:50:39:cf:ee:
dc:de:2a:b4:26:52:a6:b2:58:ee:80:dc:78:43:7d:
9b:6d:b4:b1:c2:04:f9:9f:b2:c8:db:7c:d5:f6:5f:
50:f2:2a:c0:94:e7:bc:78:a3:31:7d:b8:a4:9c:54:
1b:ee:31:e0:c1:57:d4:f6:43:6e:77:17:5a:63:a5:
52:56:ec:c8:dd:04:ba:06:57:66:62:d2:d8:e1:f6:
32:41:dd:35:40:da:46:3a:b2:a3:82:1f:ec:0c:7a:
66:15:35:ea:da:d7:79:01:14:93:4d:2c:08:9f:68:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:47:7F:C9:C9:D7:A7:95:04:AF:E9:49:14:86:B8:26:36:92:1D:6D
X509v3 Authority Key Identifier:
keyid:3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a7:6f:b3:bd:4c:80:fb:84:8f:38:2f:70:f3:04:15:81:5c:
7b:9e:d7:8f:85:31:7a:3b:57:a9:a5:d3:3c:ac:58:53:de:f3:
1c:77:84:bc:37:1d:15:a9:96:dc:b0:3c:7f:62:0f:ab:75:a6:
1c:38:81:a4:22:59:8e:cd:4b:1a:37:1e:9f:fe:8a:01:4d:c9:
3d:d6:27:0c:de:03:1e:21:10:40:26:8c:36:a2:e4:57:7e:39:
e1:57:d6:7a:ec:82:e0:a4:68:0a:71:a4:ea:83:eb:ad:1e:3e:
80:63:c4:23:55:27:f7:f8:ce:1c:4f:de:ae:09:cb:b3:93:a8:
29:37:2a:d2:ed:d3:e2:23:cf:eb:ae:ce:53:a6:c2:5c:2e:1d:
37:e0:4d:9f:fe:d5:24:6d:9a:e3:fe:8b:af:4a:c8:12:40:1b:
68:f8:59:20:54:4e:9c:b4:a0:7f:e3:14:60:cd:21:3e:d5:87:
44:fa:e5:74:52:55:5e:82:2a:98:15:43:ba:67:4c:18:f7:bf:
e0:6e:86:bf:17:b4:65:5d:53:4b:30:75:85:8d:46:c7:9f:63:
b7:6a:fd:0e:b9:02:76:9d:05:22:21:8e:5c:ef:00:e7:5f:96:
9c:8e:b8:f7:06:79:ea:a7:c8:a7:17:d0:54:33:bc:4b:01:ea:
bf:c5:c8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:08 2026 by rpki-client