Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: jZjh1C76LqPHUQjpoHY+kbc3UMeZSmqfqbGRSyl+DyE=
Subject key identifier: 72:99:19:29:9D:4B:DC:79:6D:F3:65:F2:36:00:CD:B3:B9:E0:78:90
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 019EC0369BBC280F9CB7C589937C472F190A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 09:01:04 +0000
Manifest this update: Sat 13 Jun 2026 09:01:04 +0000
Manifest next update: Sun 14 Jun 2026 09:01:04 +0000
Files and hashes: 1: 8xpf1H5jnrklNTBoaVn0u85Fw00.roa (hash: xVZEKXXOjsh0YBdOeRbRNQ2rIeuGE/aopxCQhkfvBRc=)
2: k1f4H5R1t7ioWxpD9zQTzDGVw34.roa (hash: UazRYiujjVi7Q1FCel0edXG5MOLygjSQmvy3K0uCobk=)
3: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: a7Mu6W+tCl7ul8I6KTRneslcFhCRotoEPPyYa2RJwh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:9b:bc:28:0f:9c:b7:c5:89:93:7c:47:2f:19:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Jun 13 09:01:04 2026 GMT
Not After : Jun 14 09:01:04 2026 GMT
Subject: CN=729919299d4bdc796df365f23600cdb3b9e07890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:6a:e9:79:7a:54:d1:00:99:5a:a5:f2:2b:
84:e4:21:56:d0:1b:3f:6e:4e:bc:58:d4:80:14:ef:
b7:e2:c4:db:5c:57:4f:1f:22:aa:7b:f9:a6:26:e2:
39:fe:17:90:01:6e:4c:e7:6f:88:d2:3b:ac:f6:b6:
01:64:8e:78:63:12:c3:92:24:4b:1e:95:67:b5:9d:
68:c5:6c:c2:b4:20:7e:27:a3:cb:5a:cb:e6:3a:ee:
e2:a0:0d:98:39:63:00:1f:23:1c:87:61:1c:3e:ea:
54:27:96:f1:36:d3:6f:87:02:b2:c0:22:f8:93:3c:
b5:85:a0:66:04:39:77:0b:0d:04:a8:a4:a3:e0:98:
8f:b3:df:54:78:48:ad:50:36:76:31:5e:2e:3f:da:
ec:11:98:7e:b2:d4:68:ec:14:82:ac:6e:ef:01:a6:
b1:25:56:5d:f2:53:68:33:c1:34:00:94:38:9a:d7:
9a:7f:82:79:f2:d1:b8:a1:1e:e9:af:87:0a:68:85:
5c:02:a5:e5:66:19:02:0d:bd:bc:dc:5e:0e:43:36:
f9:b3:54:d3:8b:5b:99:60:db:4f:51:31:0d:0e:59:
d7:7b:f4:ce:ed:ca:21:cf:84:00:07:d9:bd:21:bd:
df:8b:1a:05:10:31:6c:34:d0:70:79:ef:39:4b:0f:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:99:19:29:9D:4B:DC:79:6D:F3:65:F2:36:00:CD:B3:B9:E0:78:90
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d2:36:ac:a2:1b:d5:bf:98:65:0b:c7:78:1c:55:29:2a:83:
cd:a9:2f:0c:e8:29:e2:df:12:4e:5c:4c:ed:7a:b2:f7:d5:74:
dd:df:6f:39:58:de:37:b1:87:d3:e8:e4:de:84:4c:d1:1a:6b:
55:ee:29:3c:ba:01:ce:1f:17:66:ed:e3:aa:70:d5:fb:dc:f3:
90:f7:e9:76:7a:ee:c9:b3:4d:c3:28:62:03:58:cd:da:70:8c:
2f:ac:d0:4f:92:8c:99:2e:83:06:7e:fb:14:8e:67:29:3a:3f:
c7:bd:2d:6c:60:89:8a:75:c7:8c:97:da:30:b9:d2:42:18:05:
0c:f6:98:fc:c8:a7:79:e4:cf:db:ac:19:de:b5:83:de:31:20:
dc:e5:1d:9b:3c:06:69:0a:00:4e:90:33:78:57:8a:5f:d9:89:
79:b4:75:60:94:ab:c2:58:b5:eb:13:51:2c:09:3f:9b:9d:43:
8d:d3:21:8e:e3:62:0a:5e:f5:91:f8:16:5e:af:93:75:d8:d1:
85:a3:8a:6b:5f:11:a1:2a:3d:1b:55:3f:ea:55:bb:2c:7f:e7:
09:a7:ea:c8:d8:51:3f:12:8e:0b:48:e7:18:28:82:09:ee:a0:
5f:84:a5:52:ae:8f:54:08:d6:1c:b3:c3:5c:05:eb:0c:67:81:
1c:67:bd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:33 2026 by rpki-client