Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json)
Hash identifier: 5TutCNIIIG6iVHWRqSQMBLY0O5TwMaRpAK9j/0DZ2V8=
Subject key identifier: 23:B5:F6:5D:4F:B1:3B:59:57:21:84:3A:DD:07:BF:9C:39:19:1E:61
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial: 019FAA87E7A33AB8C0DC828A85EF944EBC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
Manifest number: 0667
Signing time: Tue 28 Jul 2026 21:01:01 +0000
Manifest this update: Tue 28 Jul 2026 21:01:01 +0000
Manifest next update: Wed 29 Jul 2026 21:01:01 +0000
Files and hashes: 1: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: 6A+8av58GliT0jcBcofpNPwGb/ah3ZEEcBWL6gWQxPM=)
2: t83QwmnsF94N1e2quVeWFqxv3Q4.roa (hash: S00r80MkvAcmYicBdHFKql/0j/7ix5B+Lwxl0Q6uMXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:e7:a3:3a:b8:c0:dc:82:8a:85:ef:94:4e:bc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Validity
Not Before: Jul 28 21:01:01 2026 GMT
Not After : Jul 29 21:01:01 2026 GMT
Subject: CN=23b5f65d4fb13b595721843add07bf9c39191e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:1f:cb:22:50:8f:fb:21:a8:a7:e0:6e:2c:
8f:34:ef:7a:2d:1a:5d:bb:e7:6c:08:31:46:d2:9d:
bc:ce:56:f4:30:2d:b9:31:56:ff:87:48:8f:86:38:
a7:d0:13:dd:10:f0:1a:e2:17:9f:3f:5c:d4:15:04:
9b:61:ba:04:03:de:cb:e0:3c:07:3a:84:c3:df:d5:
1e:08:fc:3d:43:72:f3:98:a7:60:36:0c:8d:c3:52:
88:63:25:e6:79:e7:36:35:d5:17:60:7b:a8:ed:62:
13:c5:71:50:82:f2:78:34:29:f2:2d:7a:da:9f:1c:
ec:6f:e8:59:28:d5:4d:12:36:7b:56:55:89:07:d4:
d9:b4:3e:87:7b:47:ef:3a:03:d8:10:ef:71:ae:c5:
0e:7c:02:03:41:88:95:4a:af:ad:04:b7:89:62:52:
44:de:73:1d:16:7b:25:14:8e:59:48:0c:dc:d3:0a:
8a:96:83:dd:27:f0:f8:9b:3f:df:63:30:d2:e2:1a:
ad:17:e0:5e:d3:f9:2e:a3:48:5f:3c:2b:c0:92:34:
83:52:15:33:e2:d2:38:94:db:2a:e8:c6:a4:88:e2:
b4:7b:04:7b:a2:fd:65:1a:f7:51:e5:f2:e5:fe:18:
32:df:eb:87:67:c5:23:34:dd:44:35:df:e6:ed:51:
d7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B5:F6:5D:4F:B1:3B:59:57:21:84:3A:DD:07:BF:9C:39:19:1E:61
X509v3 Authority Key Identifier:
keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:71:85:65:27:25:89:a4:75:06:e4:d9:41:94:d0:30:ca:0e:
96:dd:94:62:59:1c:72:1b:09:84:94:52:ee:f5:e4:2b:c2:18:
08:f1:1e:a2:39:bb:dc:b9:ec:9b:d7:62:62:4c:d5:65:e1:d0:
f5:be:63:7b:e3:3e:c8:15:db:8a:46:20:32:7a:16:15:40:c6:
42:67:22:8c:0d:a8:4d:4d:fa:62:2d:f7:66:38:9c:d8:10:9c:
09:e6:25:f1:a6:ff:f7:c0:07:f3:d8:a6:c4:16:9d:2d:90:a1:
61:c6:00:9a:04:c8:30:22:c6:d9:a1:6b:f7:d7:c5:b4:26:92:
f7:9b:01:10:f4:ab:01:0b:05:22:ca:fc:f3:8f:99:b5:a6:dd:
71:c7:2d:39:c9:3b:81:5a:46:0a:cb:f7:54:8e:80:a9:66:83:
3d:01:7f:7e:8c:e6:9e:91:ab:2c:05:c5:f1:31:b8:bd:07:11:
bd:a1:30:95:83:7c:f7:6d:52:70:2c:35:7b:ae:1b:16:dc:0c:
9e:66:dd:e3:0c:d9:a9:d4:3e:5c:b3:74:1f:e2:5c:a1:b7:d7:
d0:fc:8d:f3:15:e8:fe:00:a2:da:60:a9:94:b0:5a:82:9c:9c:
f4:42:c5:ed:9b:75:57:8a:45:8d:21:32:70:b3:4d:9b:b1:30:
34:cf:95:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:58 2026 by rpki-client