Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File: P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier: YBzWca1ufeaKfi2yOidpTI++1MJpdkoePGK00vrCWmY=
Subject key identifier: 2A:C8:75:E3:9D:C0:CD:1B:8F:9B:8F:EE:F6:18:99:68:B3:20:BD:14
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 019FA9AB8CDC197C9278B2363C33A05A6E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 17:00:19 +0000
Manifest this update: Tue 28 Jul 2026 17:00:19 +0000
Manifest next update: Wed 29 Jul 2026 17:00:19 +0000
Files and hashes: 1: 8ncEIlz1-5zSR1QhL0rDdEkpqI4.roa (hash: nuQfSOfvY6zkx/iP7wr0MpQfCSukhDWy8/9CULyV7C4=)
2: IvA9B2nFsUB8N2tSxI1Z1owm5SY.asa (hash: Luu+iEJI9TF5mINkPbC0AuUUy8TwF281MV1BlQU5AFk=)
3: MhAe01ZmLmGIo1FB00FAZblkwBo.asa (hash: aUcLI++76yd3mnnAy6xNFCz8PJWqoY+FNcByDh9aH0o=)
4: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: ai4AopEKoeRGtiuB1Vy9qG7/WAgCTasaf64jThSbWhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:8c:dc:19:7c:92:78:b2:36:3c:33:a0:5a:6e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Jul 28 17:00:19 2026 GMT
Not After : Jul 29 17:00:19 2026 GMT
Subject: CN=2ac875e39dc0cd1b8f9b8feef6189968b320bd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:0b:cc:0c:e7:92:a7:97:43:5a:5e:6e:73:
29:59:be:0e:a6:0e:f0:6b:a3:a1:0b:11:f8:56:0b:
3f:ba:af:5a:8d:6b:ba:51:da:d3:04:b1:09:73:4a:
e9:f6:ce:f5:84:bb:36:d5:b5:a2:b5:5a:05:e3:e0:
47:b2:31:eb:af:e4:89:45:71:d3:ce:cf:82:1c:50:
20:1a:9b:fb:63:1e:ef:68:0f:80:f1:c9:ab:a6:86:
02:20:7f:9c:a6:0d:41:47:3c:f7:d3:8f:ab:75:0d:
55:1c:e2:23:e2:b0:7e:66:5a:88:19:09:60:20:17:
d7:2a:96:a8:26:d4:28:1e:d7:9b:14:15:d8:fd:5a:
81:83:68:b5:26:13:a3:82:20:94:ab:38:c0:df:04:
4b:24:36:da:ac:15:62:80:95:0e:4c:f6:55:c0:10:
21:36:04:40:b2:b3:f2:32:8a:c2:77:7b:d1:44:1e:
8e:d6:2e:7c:74:5a:5f:42:23:c8:0c:90:96:40:e9:
75:c1:dc:e9:85:25:7b:bf:8e:ef:11:17:a0:ad:ad:
f0:ee:f7:29:31:24:3c:6c:15:e2:cd:55:66:8b:ae:
af:f7:9f:dd:12:25:42:b1:84:4d:c9:1c:b5:0a:23:
a0:88:dc:b7:c3:15:b1:80:13:6b:35:67:4a:7e:77:
a0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C8:75:E3:9D:C0:CD:1B:8F:9B:8F:EE:F6:18:99:68:B3:20:BD:14
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4b:1b:3a:d5:7e:11:cf:1e:1d:ee:f0:36:d6:1c:86:11:11:
70:6d:dd:72:88:61:8d:39:46:4e:18:54:e8:11:d7:1b:28:90:
8f:dc:96:66:03:62:fb:43:a7:eb:65:85:9f:18:fa:77:f9:a4:
aa:ff:52:32:98:df:92:d6:8b:40:b5:3d:44:81:07:b5:99:a4:
9c:b6:7c:39:de:8b:a1:e5:1f:64:85:38:5b:58:41:6d:89:c7:
b5:dc:80:27:1e:eb:ad:e6:02:f5:9c:30:ec:a5:a2:e8:3d:7f:
0d:3c:6c:f8:0d:7d:98:60:27:47:b8:8d:fb:34:b5:3a:7b:46:
12:64:82:79:40:5c:72:c7:de:25:b7:cc:03:5c:e8:b5:6f:7d:
49:79:d3:72:22:6e:d8:4d:01:10:28:a1:d0:ea:1b:c2:76:5d:
69:a0:61:62:28:2e:39:ee:d8:1b:97:cf:3d:21:5c:bf:a8:4d:
59:dd:c4:2c:20:b5:dc:dc:2f:9b:80:f5:92:c7:d7:b8:e2:b8:
2d:83:4f:01:48:27:dd:4c:b1:54:14:1d:98:be:fc:79:df:d2:
73:e6:af:6e:f9:0c:59:62:32:52:e7:57:eb:4a:86:c6:24:6c:
d0:06:e2:34:26:98:db:3a:48:77:b7:ff:23:18:96:c0:62:08:
fb:0c:fe:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:07:25 2026 by rpki-client