Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: BC1dxVZQYq2X6FwDtdtQ+wePTscVdcxBwyopXttiDr0=
Subject key identifier: 26:09:62:A6:08:F6:90:8A:51:3B:67:3C:8E:89:1F:A1:C9:BD:B3:F7
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 019FA9E2EEC1EEE8C783D24C832C109847D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 18:00:49 +0000
Manifest this update: Tue 28 Jul 2026 18:00:49 +0000
Manifest next update: Wed 29 Jul 2026 18:00:49 +0000
Files and hashes: 1: 8xpf1H5jnrklNTBoaVn0u85Fw00.roa (hash: xVZEKXXOjsh0YBdOeRbRNQ2rIeuGE/aopxCQhkfvBRc=)
2: k1f4H5R1t7ioWxpD9zQTzDGVw34.roa (hash: UazRYiujjVi7Q1FCel0edXG5MOLygjSQmvy3K0uCobk=)
3: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: OzRS/dGF5CtiYeEmm6EN12WkXsmxcrS8miu6gwht6Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:ee:c1:ee:e8:c7:83:d2:4c:83:2c:10:98:47:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Jul 28 18:00:49 2026 GMT
Not After : Jul 29 18:00:49 2026 GMT
Subject: CN=260962a608f6908a513b673c8e891fa1c9bdb3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7d:68:15:d7:1d:a8:6c:6d:39:e0:72:43:56:
75:92:a8:06:ed:c2:27:02:0f:58:46:78:6f:1b:c0:
c3:b6:3f:8f:7d:57:87:fa:e0:62:da:e1:58:3e:f1:
9d:7c:ae:dd:a2:c0:01:3d:1f:d1:4d:7d:9f:87:9e:
cb:23:32:15:4e:e3:b1:06:dd:26:91:4b:d3:e8:27:
cc:f2:01:aa:c4:bb:65:f5:ab:82:c7:a8:2e:4c:ee:
1d:c5:8d:0c:23:bb:0d:c1:8a:e6:ea:8c:13:df:49:
b4:57:1d:fd:fb:4d:18:2d:61:22:f6:d7:12:65:68:
47:67:69:6a:71:fa:71:26:3b:43:ab:2c:a2:1a:64:
14:be:46:bf:40:8f:c0:0d:1a:4f:81:10:08:97:99:
64:5a:68:d0:ab:72:07:bb:24:b6:df:38:76:60:24:
d9:48:61:ce:2a:6e:ef:a1:30:1d:a8:e1:f7:73:0e:
e0:68:b0:1b:3a:08:4d:d7:f8:50:ec:c1:45:dc:70:
4b:6a:31:85:b1:37:71:1a:40:f4:b4:49:93:0e:ab:
ba:d0:0a:1f:b4:15:7c:c8:1e:6f:71:d5:92:b8:91:
d9:b4:68:5f:09:d4:88:11:ac:94:b0:92:34:62:b8:
dc:ca:04:f2:d8:68:5b:8b:cf:38:59:61:ce:a8:c5:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:09:62:A6:08:F6:90:8A:51:3B:67:3C:8E:89:1F:A1:C9:BD:B3:F7
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:87:d7:ba:82:5b:9d:50:43:72:7a:50:dc:b2:ca:4d:8f:f4:
f7:8d:e4:51:ef:01:8e:b1:57:1d:a8:e3:e6:44:6a:68:68:2e:
46:ef:86:34:a2:b8:e5:81:1f:cc:fe:19:c7:6e:a5:22:96:ae:
85:36:bf:a3:f9:3e:fd:17:16:72:c8:4f:df:fb:23:2f:97:3a:
d9:8f:22:26:1d:31:1f:96:20:2a:a2:9e:6f:54:89:f3:86:cf:
0f:df:62:c3:2e:b2:a8:1f:78:8f:47:cb:73:7f:e7:38:31:55:
54:e8:05:74:ec:e3:bf:7f:8d:f3:f8:5b:da:0f:98:7e:c3:27:
60:71:03:68:cf:97:56:0b:e1:6c:93:6a:d1:5c:a1:2f:f3:bb:
ef:95:10:0e:f6:ae:54:d2:05:3b:79:22:21:c2:9a:00:cd:8b:
49:03:db:3b:84:7f:63:a9:1d:53:9a:a9:26:41:10:83:c9:94:
ea:d2:5b:ea:0b:bf:b2:11:d0:90:26:34:67:54:8f:50:c0:e1:
09:8d:81:a4:3e:cb:c1:c0:2f:f1:b8:97:88:60:9f:af:53:5f:
75:01:3c:be:ed:28:3d:8a:ae:06:0a:b5:90:2d:40:99:3f:5c:
5e:70:e3:2d:f4:ab:ad:2c:86:8f:86:40:fb:9f:83:15:81:ba:
cd:d2:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:49:46 2026 by rpki-client