Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: mtFS8kqhxyNWdWcxH2rOY2AGOU4yp/YNKz2sMgF5j68=
Subject key identifier: F2:D5:80:CA:B3:40:B1:7A:28:73:E9:52:EE:16:F8:54:9A:D5:2A:E6
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 019FAD88FB3904CC35518A9E3BD6CFE75831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 11:01:03 +0000
Manifest this update: Wed 29 Jul 2026 11:01:03 +0000
Manifest next update: Thu 30 Jul 2026 11:01:03 +0000
Files and hashes: 1: WCuXL5bdayCD-yg2u5cxoFH2Qss.roa (hash: fzizFDGzIYB7cPC/5AvExyYCWu5OSdpEHrHOTtkH4kY=)
2: odGmnWHV8DvWoy1JIU0WX6KSpRQ.roa (hash: KVh++uKmrCKdQJxhd1HSXSf6Faxjd8tG0oNOioQCVgk=)
3: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: cGJMMe8msrUXBh4s+Eh4jfI6rRoWa04zbcOkaj4k3f4=)
4: rHP4WUAqcSQvgCZtg8_htfcNuko.roa (hash: Mb29TkYRCVH9g/5FuCaCpqq3Nrrav/iSJCN1hGSFHTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:fb:39:04:cc:35:51:8a:9e:3b:d6:cf:e7:58:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Jul 29 11:01:03 2026 GMT
Not After : Jul 30 11:01:03 2026 GMT
Subject: CN=f2d580cab340b17a2873e952ee16f8549ad52ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:a7:28:df:32:49:05:47:44:73:81:e9:db:
66:82:ba:a8:4c:21:47:e7:d3:2e:75:4d:92:4d:5d:
77:04:ef:68:42:c1:e1:3c:df:50:a3:d3:6a:11:58:
6a:ce:1d:37:25:15:8c:30:9d:93:e8:09:9a:4b:3d:
15:ab:d5:8d:f5:19:c0:03:71:7e:bd:9a:32:d8:6f:
a1:4a:81:ae:ff:cb:d8:3e:11:d3:c7:bc:e8:95:69:
e1:89:8d:4c:27:60:ee:ae:e9:40:21:af:8a:bc:03:
14:ba:29:cb:2c:dd:a6:0a:38:a7:4e:8a:8f:47:88:
dd:94:25:78:87:cb:0b:c9:2e:5b:14:de:f6:2a:cc:
4a:d9:1c:b6:7c:42:99:d4:c3:0e:10:ab:7b:61:7f:
f3:5e:48:fc:68:67:c6:e3:db:c0:58:1d:bc:ca:24:
75:51:9d:df:20:59:f4:2f:2e:f5:48:b0:e2:48:f3:
a7:bd:5a:e5:74:e8:95:33:29:3d:82:9f:86:c2:04:
f7:20:4a:b9:fe:20:ed:04:1a:3b:4f:f6:95:aa:b3:
5e:96:e3:ff:05:b9:6e:ef:ee:9e:c7:40:78:2c:05:
25:c1:f8:b3:35:af:39:ea:80:fb:92:70:7e:05:8c:
d0:e0:25:9b:2a:9d:54:70:72:ca:3e:74:6d:99:cb:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D5:80:CA:B3:40:B1:7A:28:73:E9:52:EE:16:F8:54:9A:D5:2A:E6
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:09:04:96:f4:cb:37:30:21:fa:cb:97:d4:1b:77:93:f6:41:
59:21:e0:a2:3d:d2:db:5b:51:3d:7b:aa:4f:36:02:bc:4f:3b:
2c:67:ce:1a:0d:8f:51:1d:f2:a2:32:a9:f2:fc:03:50:0a:82:
c8:95:05:53:d7:35:18:24:c4:72:70:86:24:af:7c:31:f6:31:
d9:64:59:8d:8b:b9:74:b9:e2:1e:f3:1a:41:4f:7f:dd:3e:76:
b8:68:51:50:da:ae:d3:48:d3:37:39:9f:ad:93:91:02:53:4e:
52:6e:16:dc:45:74:e2:5c:22:3c:b1:9c:4b:3e:68:82:da:35:
7e:46:1d:f7:c2:9a:5d:a6:ec:a6:42:39:a1:c2:74:23:8d:74:
df:e1:df:6b:ac:55:9d:af:be:93:75:ad:79:3c:e1:b1:2c:71:
19:3e:f9:59:4c:b1:c7:1c:68:09:5a:40:03:f8:48:98:a4:ae:
71:8b:5b:c3:3e:81:d7:81:59:a4:24:36:f6:f1:9a:ba:5b:93:
8e:f3:5a:47:3f:f1:b1:7c:2f:b1:23:0a:7c:9a:c1:c0:33:9c:
8a:c9:6e:30:85:3f:dc:cc:ea:c5:d7:fd:53:ef:07:49:fc:44:
13:87:49:2b:a0:6a:91:9f:ba:d4:e7:1a:49:55:b0:23:c7:18:
e8:87:96:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tiPs5BMw1UYqeO9bP51gxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZDAyOWYyYzMyMWFkYjU5ZWNhNWZjYTU3YTFlYjliZGY1
MzFkNmEwHhcNMjYwNzI5MTEwMTAzWhcNMjYwNzMwMTEwMTAzWjAzMTEwLwYDVQQD
EyhmMmQ1ODBjYWIzNDBiMTdhMjg3M2U5NTJlZTE2Zjg1NDlhZDUyYWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIinKN8ySQVHRHOB6dtmgrqoTCFH
59MudU2STV13BO9oQsHhPN9Qo9NqEVhqzh03JRWMMJ2T6AmaSz0Vq9WN9RnAA3F+
vZoy2G+hSoGu/8vYPhHTx7zolWnhiY1MJ2DurulAIa+KvAMUuinLLN2mCjinToqP
R4jdlCV4h8sLyS5bFN72KsxK2Ry2fEKZ1MMOEKt7YX/zXkj8aGfG49vAWB28yiR1
UZ3fIFn0Ly71SLDiSPOnvVrldOiVMyk9gp+GwgT3IEq5/iDtBBo7T/aVqrNeluP/
Bblu7+6ex0B4LAUlwfizNa856oD7knB+BYzQ4CWbKp1UcHLKPnRtmcs+jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLVgMqzQLF6KHPpUu4W+FSa1SrmMB8GA1UdIwQY
MBaAFKTQKfLDIa21nspfyleh65vfUx1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDct
OGFkNmZmYjI2MTdkLzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDctOGFkNmZmYjI2MTdk
LzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArgkElvTL
NzAh+suX1Bt3k/ZBWSHgoj3S21tRPXuqTzYCvE87LGfOGg2PUR3yojKp8vwDUAqC
yJUFU9c1GCTEcnCGJK98MfYx2WRZjYu5dLniHvMaQU9/3T52uGhRUNqu00jTNzmf
rZORAlNOUm4W3EV04lwiPLGcSz5ogto1fkYd98KaXabspkI5ocJ0I4103+Hfa6xV
na++k3WteTzhsSxxGT75WUyxxxxoCVpAA/hImKSucYtbwz6B14FZpCQ29vGauluT
jvNaRz/xsXwvsSMKfJrBwDOcisluMIU/3Mzqxdf9U+8HSfxEE4dJK6BqkZ+61Oca
SVWwI8cY6IeWdA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:22:24 2026 by rpki-client