Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: sVDMdqS5KfDif5+lx+DLrgHq6JJWv0PBn9Q3YQs6XD0=
Subject key identifier: 84:AF:E1:89:7C:DE:BC:3B:DD:67:7E:FB:9E:18:3F:26:2D:CC:28:A7
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 019FA9E33F0923F8E2A1F8F21C7A1C6B3CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 18:01:09 +0000
Manifest this update: Tue 28 Jul 2026 18:01:09 +0000
Manifest next update: Wed 29 Jul 2026 18:01:09 +0000
Files and hashes: 1: 0ZH3kxew36RRFzQg_mo4-7q2H4U.roa (hash: k3MKGbvdmLnbLs9zehodMhvSl8HPr3KY+BJ978CUfo8=)
2: AydP7XNvWxhhDMLSuOqc0Oa5dE0.roa (hash: jUVgcjRvFoEADtpRITq72Z8KeRsnl4848PEL4Me2SIw=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: tAQvVYcza0TmeCyq+axpVgITjZjGW4gyfy0Lro3zSpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:3f:09:23:f8:e2:a1:f8:f2:1c:7a:1c:6b:3c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Jul 28 18:01:09 2026 GMT
Not After : Jul 29 18:01:09 2026 GMT
Subject: CN=84afe1897cdebc3bdd677efb9e183f262dcc28a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:26:81:85:ee:db:cc:01:5f:18:db:c8:ce:
bc:eb:ee:de:e6:11:9a:05:a0:65:d5:78:e2:86:8d:
85:33:6f:75:0c:19:d2:fc:8b:2d:50:28:6f:e5:40:
0a:b9:35:55:92:a7:11:72:14:47:7d:c7:df:75:00:
47:1b:90:84:36:4b:f7:0c:93:06:cc:68:69:40:e8:
c9:aa:6c:7c:f0:43:e2:17:41:d4:29:47:cb:9f:6d:
16:6f:95:dc:f4:67:a0:c0:a4:d7:92:f2:b7:cb:32:
3f:b8:7e:a9:93:42:32:be:57:0a:e0:ef:6c:2c:a8:
5b:72:08:48:1f:4e:96:39:12:6b:72:1c:9a:d7:d0:
fc:57:c4:c3:91:c2:1a:10:8d:63:a3:91:ae:f1:29:
7e:c8:c7:26:16:77:d2:6d:9a:17:d7:2f:d9:eb:9d:
50:8f:83:4a:06:6d:5d:a2:fa:f3:c6:8d:6e:c1:1a:
d8:9d:57:3f:31:90:12:6c:37:7a:1f:c5:b9:96:8d:
af:ef:33:bb:1a:42:b4:40:7f:de:ba:86:40:8f:65:
0a:bb:a3:66:78:a1:e0:65:3e:e0:65:ee:1c:11:2f:
cc:d4:b0:27:bf:07:29:da:d7:5a:88:32:74:bf:89:
01:13:0d:23:b6:12:2f:7c:8c:4e:9f:ff:59:74:b8:
54:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AF:E1:89:7C:DE:BC:3B:DD:67:7E:FB:9E:18:3F:26:2D:CC:28:A7
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cf:c0:9c:dd:2f:e3:cf:98:c2:de:92:cb:77:8a:06:b5:88:
7f:30:c2:70:5d:88:b5:93:4f:57:6f:18:28:86:80:04:13:b8:
7f:d0:37:dd:79:b8:79:e1:89:08:3b:68:38:f6:8f:e5:74:43:
71:47:3f:40:23:18:c0:fc:c3:fb:07:43:42:af:45:b1:22:54:
70:7b:ee:ac:75:16:73:c5:a5:4a:32:8f:3c:9a:a6:17:bf:ff:
b3:9f:f6:4b:fb:78:d1:c2:fe:91:9c:42:64:b9:0d:95:7d:58:
33:93:bc:9f:e6:10:3c:61:55:f5:54:f8:e5:22:f7:05:fa:66:
50:de:e4:ab:21:fa:00:d9:3f:df:58:ba:eb:b3:47:63:93:0c:
fb:ab:ab:76:8a:95:5d:8d:4c:35:71:cb:11:a3:67:bc:f3:b0:
a9:10:df:f1:6e:14:10:09:8c:ff:0b:b8:35:22:2f:e0:39:e4:
3a:9f:6e:6a:c0:87:01:0e:90:0b:f6:11:98:59:2e:25:4c:be:
ec:3c:7e:53:c1:e9:23:87:02:00:7d:10:12:02:22:1c:44:c0:
82:14:a7:5c:87:15:c0:3b:4e:bf:ce:5f:c4:57:80:f4:45:e5:
5f:3f:50:ec:21:cc:e4:c5:33:49:ba:6d:7c:e4:4c:cf:64:15:
12:1f:9b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:41:49 2026 by rpki-client