Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: Mv2yhjIT7PzDUfL0lJCpDaGme1MdoFigr0srDJLOYEg=
Subject key identifier: A1:3A:5E:61:87:98:7A:C6:88:AD:9C:46:90:24:0D:7E:B8:C4:5D:26
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 01A0D1C928AECC2A11EAECAC4559A93E36C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 05:00:16 +0000
Manifest this update: Thu 24 Sep 2026 05:00:16 +0000
Manifest next update: Fri 25 Sep 2026 05:00:16 +0000
Files and hashes: 1: 1iRbLYf4C0y3oJ3-4xIANjl72wA.roa (hash: UG6S1kmkOsd5y0L7phKRaWuOG6F5o7BKD1/4AyWvM5A=)
2: JjyvVDVovIRDvh2WAPN4qcYKbB8.roa (hash: YWVGU0nc40f+duH6QOCC8OFDRM3GdOHIxFuAUo2EzwY=)
3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: 0+Zjzaa02iEStAMAHwLZonmPwlEknJKTyo4RSX8Ah4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:28:ae:cc:2a:11:ea:ec:ac:45:59:a9:3e:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Sep 24 05:00:16 2026 GMT
Not After : Sep 25 05:00:16 2026 GMT
Subject: CN=a13a5e6187987ac688ad9c4690240d7eb8c45d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:ad:a4:1d:33:81:f4:cd:d5:51:15:2a:6e:
bd:c4:30:ad:87:d9:d9:04:e2:d5:bf:95:e8:d8:0d:
1c:50:70:7e:6e:2c:26:74:4f:66:9f:e6:cb:97:6c:
e3:2b:6f:7c:f6:42:86:f0:c4:9d:02:66:45:a5:0f:
51:27:ff:f9:64:45:78:3e:d9:7f:32:5b:84:2b:92:
0f:bb:7d:29:30:ce:30:15:a3:d0:b6:3e:16:09:72:
7d:0a:fc:77:4d:36:bb:bd:7e:6f:73:d0:fd:e4:b0:
91:ac:b2:c6:79:ed:82:18:a6:b4:79:c1:26:64:29:
69:d1:34:f0:d9:a8:61:61:af:b7:68:be:f7:71:d4:
1f:25:a9:c5:a5:30:ec:2c:d7:f3:6c:80:c2:ef:af:
50:e1:a0:9d:6e:4c:30:69:e0:f5:c1:7a:45:09:78:
3e:c6:42:41:68:1e:c0:11:da:0e:d1:4f:ca:79:42:
86:94:b2:1d:5e:9a:f1:ee:2a:81:ab:e3:8d:13:a5:
30:28:69:fb:af:79:56:df:a9:64:3d:20:b5:02:aa:
49:13:8a:8f:c3:28:17:b1:ca:71:f5:05:27:a6:08:
bb:67:7f:fe:7c:17:bb:9a:c7:c0:ff:6e:57:43:69:
95:64:83:64:a6:2c:89:33:c0:d3:2d:a3:b6:68:e4:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3A:5E:61:87:98:7A:C6:88:AD:9C:46:90:24:0D:7E:B8:C4:5D:26
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:88:02:5b:7d:7a:ad:72:09:ad:b8:79:94:d6:33:e7:4b:c7:
0d:4f:c4:f7:83:7c:47:20:02:ed:75:7e:ad:d6:c4:03:23:fb:
df:4a:75:58:bb:77:bd:56:2c:1f:7a:92:2c:89:c3:11:85:d3:
17:e4:12:37:e0:8b:23:48:e6:b7:d9:3f:2a:03:a3:47:49:c9:
45:de:32:45:7d:d2:b9:2e:1a:30:24:ed:d2:a9:3f:e3:1c:66:
60:fb:e1:d8:2c:b2:c7:cc:c7:90:69:73:43:7a:99:d0:dc:25:
41:e2:aa:27:e7:d5:30:c6:27:41:96:34:59:39:1d:e7:d1:14:
e4:97:52:fd:b1:12:ed:78:ef:a6:62:41:e5:7d:89:88:8b:f0:
be:1b:23:73:10:2a:ec:be:0f:60:6d:d6:ce:5a:df:fb:2a:c5:
68:ed:c2:a1:47:29:4d:c4:81:95:39:83:1b:ee:68:f9:4a:52:
a7:82:05:3e:c4:26:b0:1a:6c:dd:5a:33:47:ed:a3:a8:8d:1a:
6a:15:c6:ae:94:79:d8:51:4c:94:b6:be:50:e2:e5:47:e9:82:
51:16:95:06:cf:cc:d2:ef:f0:9a:44:42:31:7e:15:58:98:87:
5c:1d:a1:38:57:83:c0:8c:2a:b8:6c:42:51:0b:97:ae:b0:40:
11:d7:9f:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRySiuzCoR6uysRVmpPjbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZjMyNWVmNGNiYWE2NmNjNzFmZmNjNjg4MDg3N2U3NmUx
NDlhZmQwHhcNMjYwOTI0MDUwMDE2WhcNMjYwOTI1MDUwMDE2WjAzMTEwLwYDVQQD
EyhhMTNhNWU2MTg3OTg3YWM2ODhhZDljNDY5MDI0MGQ3ZWI4YzQ1ZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnetpB0zgfTN1VEVKm69xDCth9nZ
BOLVv5Xo2A0cUHB+biwmdE9mn+bLl2zjK2989kKG8MSdAmZFpQ9RJ//5ZEV4Ptl/
MluEK5IPu30pMM4wFaPQtj4WCXJ9Cvx3TTa7vX5vc9D95LCRrLLGee2CGKa0ecEm
ZClp0TTw2ahhYa+3aL73cdQfJanFpTDsLNfzbIDC769Q4aCdbkwwaeD1wXpFCXg+
xkJBaB7AEdoO0U/KeUKGlLIdXprx7iqBq+ONE6UwKGn7r3lW36lkPSC1AqpJE4qP
wygXscpx9QUnpgi7Z3/+fBe7msfA/25XQ2mVZINkpiyJM8DTLaO2aOQhuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKE6XmGHmHrGiK2cRpAkDX64xF0mMB8GA1UdIwQY
MBaAFD7zJe9MuqZsxx/8xogId+duFJr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUt
MzRkNzE0ODVjNTQ3LzEvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUtMzRkNzE0ODVjNTQ3
LzEvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIgCW316
rXIJrbh5lNYz50vHDU/E94N8RyAC7XV+rdbEAyP730p1WLt3vVYsH3qSLInDEYXT
F+QSN+CLI0jmt9k/KgOjR0nJRd4yRX3SuS4aMCTt0qk/4xxmYPvh2Cyyx8zHkGlz
Q3qZ0NwlQeKqJ+fVMMYnQZY0WTkd59EU5JdS/bES7XjvpmJB5X2JiIvwvhsjcxAq
7L4PYG3Wzlrf+yrFaO3CoUcpTcSBlTmDG+5o+UpSp4IFPsQmsBps3VozR+2jqI0a
ahXGrpR52FFMlLa+UOLlR+mCURaVBs/M0u/wmkRCMX4VWJiHXB2hOFeDwIwquGxC
UQuXrrBAEdefSA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:16:53 2026 by rpki-client