Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: JD2tIAuAGu20EpVP1D9+q1/TOMk4vD6iDi6dh4bMpZc=
Subject key identifier: 4A:B7:F7:00:DC:E2:81:56:9A:9A:33:BF:3A:D7:2E:4B:ED:FA:ED:9C
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 019FAC771135A8854B3F80C40FF140ABFDE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 0C57
Signing time: Wed 29 Jul 2026 06:01:52 +0000
Manifest this update: Wed 29 Jul 2026 06:01:52 +0000
Manifest next update: Thu 30 Jul 2026 06:01:52 +0000
Files and hashes: 1: 6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa (hash: wpsN0tsYTVD9eZ1wIkFPmbb5yPxiazJ0MhFoB9FJQW4=)
2: DR9MoQCYtXaLoml4Dm1_5qJwPs4.roa (hash: nXlN3VKxLNyqdBBXWDPV2SzM6R5K4D1KJpMD50qdg/A=)
3: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: oomjMT8wlWSLbJuKzXaacWPikmBFKpaZNb44AEjHcwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:11:35:a8:85:4b:3f:80:c4:0f:f1:40:ab:fd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Jul 29 06:01:52 2026 GMT
Not After : Jul 30 06:01:52 2026 GMT
Subject: CN=4ab7f700dce281569a9a33bf3ad72e4bedfaed9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:f7:6c:79:42:cd:d6:9a:99:bc:59:94:ea:
29:58:bf:3c:bf:12:c7:4b:da:69:d8:ed:83:af:eb:
e3:b9:32:57:8f:69:02:7f:29:82:c9:71:31:06:50:
ba:40:84:53:b6:03:13:7f:30:6a:a2:54:db:f3:a8:
ca:c0:ee:09:bd:6a:c1:7d:c3:45:48:bf:c0:20:eb:
79:e6:43:18:b7:83:50:2f:8f:8a:4d:0c:0c:52:e7:
8e:ea:7e:b1:ad:f3:c9:b9:8c:e0:71:5c:40:e0:32:
53:20:08:4c:76:84:33:31:31:90:09:6e:db:3f:1c:
b3:17:e3:be:85:2b:f5:35:9d:b1:7f:03:36:a0:ac:
ba:86:82:60:db:da:29:9d:2e:52:0d:6d:39:f0:b2:
3b:2b:69:e3:9c:22:18:54:7a:62:4c:d1:b3:01:53:
43:c1:b0:70:66:63:b8:b7:95:80:ed:7d:9b:92:bf:
9b:a4:60:4e:e3:97:81:74:fd:82:af:b6:3a:2e:72:
be:84:17:02:55:32:f5:16:9f:ac:41:e9:44:b4:66:
87:a8:ef:ad:64:ec:45:6e:f9:98:cb:06:e7:02:75:
02:27:09:ec:19:df:ac:ce:fb:15:3e:d3:6c:fa:06:
52:87:b2:61:9c:4b:7e:67:c1:a9:4b:10:19:33:1c:
15:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B7:F7:00:DC:E2:81:56:9A:9A:33:BF:3A:D7:2E:4B:ED:FA:ED:9C
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c1:f2:c4:45:04:e7:43:5c:21:4c:a4:81:92:86:59:18:ad:
7f:f1:1e:98:50:7b:8b:af:83:8b:24:41:9b:76:01:fd:e1:0b:
99:97:8e:04:c1:46:ed:9e:90:a5:1c:5e:d8:34:80:16:0c:62:
85:8b:ba:c5:f6:8b:9b:89:d6:e8:c7:7a:6c:43:7d:b1:b0:a5:
18:ca:65:78:e4:8e:e0:f7:b3:11:98:4b:5e:9e:86:20:fc:e7:
12:07:39:c9:95:a6:1a:c7:24:3c:cf:b6:b4:7d:78:50:14:54:
92:2d:ec:1c:cf:81:15:47:45:56:38:03:a6:97:f5:42:1b:e9:
37:8a:25:f9:3b:93:b0:59:a8:a5:72:0d:9b:0f:aa:4d:4d:40:
bd:62:c9:d3:6c:93:7a:e5:13:80:07:fa:c3:d3:85:5c:14:6e:
00:5b:fa:58:a2:ad:83:64:94:1b:fb:a9:df:03:24:02:21:64:
ac:91:31:21:a1:1d:5e:e3:d0:41:90:18:d8:7f:b6:c1:3c:75:
82:d0:80:9e:26:2e:07:e8:24:82:93:67:f4:9a:7d:23:e9:0f:
e6:48:5c:95:3b:ca:48:3d:5b:12:f2:82:00:51:50:03:5b:72:
56:d3:da:4b:66:b1:4b:9b:eb:9d:3d:5f:c6:03:90:8c:3e:36:
e8:48:51:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdxE1qIVLP4DED/FAq/3mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZGUyNDcwYzg1NjM5NDk0ODdhM2U3ODc0M2M1NDRjOTll
YzhhNjQwHhcNMjYwNzI5MDYwMTUyWhcNMjYwNzMwMDYwMTUyWjAzMTEwLwYDVQQD
Eyg0YWI3ZjcwMGRjZTI4MTU2OWE5YTMzYmYzYWQ3MmU0YmVkZmFlZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSv3bHlCzdaambxZlOopWL88vxLH
S9pp2O2Dr+vjuTJXj2kCfymCyXExBlC6QIRTtgMTfzBqolTb86jKwO4JvWrBfcNF
SL/AIOt55kMYt4NQL4+KTQwMUueO6n6xrfPJuYzgcVxA4DJTIAhMdoQzMTGQCW7b
PxyzF+O+hSv1NZ2xfwM2oKy6hoJg29opnS5SDW058LI7K2njnCIYVHpiTNGzAVND
wbBwZmO4t5WA7X2bkr+bpGBO45eBdP2Cr7Y6LnK+hBcCVTL1Fp+sQelEtGaHqO+t
ZOxFbvmYywbnAnUCJwnsGd+szvsVPtNs+gZSh7JhnEt+Z8GpSxAZMxwVuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEq39wDc4oFWmpozvzrXLkvt+u2cMB8GA1UdIwQY
MBaAFDzeJHDIVjlJSHo+eHQ8VEyZ7IpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUt
NDQxNzFiMmY1OTllLzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUtNDQxNzFiMmY1OTll
LzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsHyxEUE
50NcIUykgZKGWRitf/EemFB7i6+DiyRBm3YB/eELmZeOBMFG7Z6QpRxe2DSAFgxi
hYu6xfaLm4nW6Md6bEN9sbClGMpleOSO4PezEZhLXp6GIPznEgc5yZWmGsckPM+2
tH14UBRUki3sHM+BFUdFVjgDppf1QhvpN4ol+TuTsFmopXINmw+qTU1AvWLJ02yT
euUTgAf6w9OFXBRuAFv6WKKtg2SUG/up3wMkAiFkrJExIaEdXuPQQZAY2H+2wTx1
gtCAniYuB+gkgpNn9Jp9I+kP5khclTvKSD1bEvKCAFFQA1tyVtPaS2axS5vrnT1f
xgOQjD426EhRFg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:12:25 2026 by rpki-client