Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
File: pNFmKbDakg__Ob-1rSmmjYR4BcY.mft (raw, json)
Hash identifier: eM9sD8lirox0yh1Ab0IZV9lrvZoThxJOvlE93/ExOWU=
Subject key identifier: A7:AB:88:1A:06:12:C2:96:31:99:8E:81:FE:84:D7:11:20:26:74:90
Authority key identifier: A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6
Certificate issuer: /CN=a4d16629b0da920fff39bfb5ad29a68d847805c6
Certificate serial: 019FA861EB3824FF55E979E39629B6FBC3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 11:00:17 +0000
Manifest this update: Tue 28 Jul 2026 11:00:17 +0000
Manifest next update: Wed 29 Jul 2026 11:00:17 +0000
Files and hashes: 1: Xn8W3aZI-6tppOJ-g922UvO2P1E.asa (hash: uXmwfFb/PO+RJeAl3LaUtqzCY+5ql2X+3/9TpSbCVCA=)
2: pNFmKbDakg__Ob-1rSmmjYR4BcY.crl (hash: m9XpmSJhiCGhLdMwM0mprvd37qBtPKn9ZYYy1lHCRVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:61:eb:38:24:ff:55:e9:79:e3:96:29:b6:fb:c3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d16629b0da920fff39bfb5ad29a68d847805c6
Validity
Not Before: Jul 28 11:00:17 2026 GMT
Not After : Jul 29 11:00:17 2026 GMT
Subject: CN=a7ab881a0612c29631998e81fe84d71120267490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:c9:69:bc:b1:76:4c:9b:4c:8a:45:30:6c:
78:57:ac:90:de:56:e0:8a:ed:13:7c:36:8a:75:6e:
53:b1:2a:5c:df:f2:a7:e3:ba:f1:1b:f2:8c:d7:6a:
75:d8:d2:0c:8e:11:69:f4:f8:54:98:04:5c:e1:a2:
a1:8f:5a:2e:44:0a:a3:f9:5f:a2:db:b8:36:e1:9f:
bc:9f:5a:6d:f4:25:78:4b:03:54:ef:7a:a2:e2:84:
b5:45:9b:43:a0:f3:50:49:62:44:1b:23:9c:22:64:
78:f8:9f:a8:2d:09:7c:fd:f2:32:5f:72:31:ce:12:
8a:84:cb:38:d7:6a:70:39:ff:92:3c:68:a6:60:50:
45:fa:e6:46:db:d5:79:14:55:d2:4e:1b:13:b2:b8:
37:5d:e2:b8:60:df:3d:7a:12:9c:28:63:fa:98:d9:
8e:9e:61:f9:93:3c:2e:65:da:ce:4d:2f:56:91:6b:
2a:68:e4:a8:bb:33:f0:db:f9:8e:e7:b3:7a:12:b1:
b2:a8:75:bb:fa:40:4f:7f:99:42:28:20:c2:11:8d:
81:e8:78:27:05:98:b4:8b:d4:4a:e7:5e:d3:66:06:
05:a7:ac:f0:d0:50:35:8a:80:43:60:a0:bd:cb:a0:
b1:93:8b:5b:b4:25:5f:b0:02:cb:59:1e:22:0f:2b:
af:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AB:88:1A:06:12:C2:96:31:99:8E:81:FE:84:D7:11:20:26:74:90
X509v3 Authority Key Identifier:
keyid:A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fb:40:88:84:7b:24:63:ab:d2:c2:94:29:ec:8a:15:6d:e7:
4b:2f:62:5e:71:11:61:7c:f9:9c:cd:8f:2c:fc:dc:c3:d0:0d:
e0:1a:84:b2:15:78:9f:f5:1c:f9:94:a2:49:45:ed:e6:d7:40:
f6:d1:8e:ba:0b:7b:ee:e8:20:87:57:63:8f:0f:ac:45:dc:ac:
34:3e:3c:11:ac:30:b1:53:e9:6e:e9:c4:92:96:1c:a3:70:a0:
35:4c:a1:ba:27:c2:a6:e1:25:f9:f6:2e:a1:13:50:5c:fe:da:
8a:ea:2b:b9:aa:a4:88:3e:a9:7b:96:24:f7:59:61:46:9d:08:
60:bf:0a:bd:a9:24:1d:90:53:6b:5d:b6:b5:ab:3b:23:2f:13:
8c:ab:36:56:89:e3:b8:57:df:db:60:e4:24:22:7b:97:2a:f4:
6a:2b:32:c5:a2:82:92:68:32:63:b6:fc:c3:0d:96:0f:52:27:
0f:4b:b5:f6:50:fe:88:1b:06:77:61:99:e7:64:91:e0:1a:03:
09:87:e2:9d:d2:e7:29:44:aa:b0:98:c4:9f:1a:f7:ec:f8:de:
7a:f9:08:66:9f:67:4c:de:4c:70:a9:a1:fd:29:10:d9:de:6f:
78:98:1b:aa:2d:04:20:b6:bb:b3:db:7d:d6:a1:38:81:f3:62:
7b:b8:b2:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYes4JP9V6Xnjlim2+8OtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZDE2NjI5YjBkYTkyMGZmZjM5YmZiNWFkMjlhNjhkODQ3
ODA1YzYwHhcNMjYwNzI4MTEwMDE3WhcNMjYwNzI5MTEwMDE3WjAzMTEwLwYDVQQD
EyhhN2FiODgxYTA2MTJjMjk2MzE5OThlODFmZTg0ZDcxMTIwMjY3NDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYTJabyxdkybTIpFMGx4V6yQ3lbg
iu0TfDaKdW5TsSpc3/Kn47rxG/KM12p12NIMjhFp9PhUmARc4aKhj1ouRAqj+V+i
27g24Z+8n1pt9CV4SwNU73qi4oS1RZtDoPNQSWJEGyOcImR4+J+oLQl8/fIyX3Ix
zhKKhMs412pwOf+SPGimYFBF+uZG29V5FFXSThsTsrg3XeK4YN89ehKcKGP6mNmO
nmH5kzwuZdrOTS9WkWsqaOSouzPw2/mO57N6ErGyqHW7+kBPf5lCKCDCEY2B6Hgn
BZi0i9RK517TZgYFp6zw0FA1ioBDYKC9y6Cxk4tbtCVfsALLWR4iDyuvEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeriBoGEsKWMZmOgf6E1xEgJnSQMB8GA1UdIwQY
MBaAFKTRZimw2pIP/zm/ta0ppo2EeAXGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE5GbUtiRGFrZ19fT2ItMXJTbW1qWVI0QmNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hOTExNTQtYjkxNy00MTVkLWFhYzAt
ZDUwMzI3N2Q3NDA2LzEvcE5GbUtiRGFrZ19fT2ItMXJTbW1qWVI0QmNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hOTExNTQtYjkxNy00MTVkLWFhYzAtZDUwMzI3N2Q3NDA2
LzEvcE5GbUtiRGFrZ19fT2ItMXJTbW1qWVI0QmNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvtAiIR7
JGOr0sKUKeyKFW3nSy9iXnERYXz5nM2PLPzcw9AN4BqEshV4n/Uc+ZSiSUXt5tdA
9tGOugt77uggh1djjw+sRdysND48EawwsVPpbunEkpYco3CgNUyhuifCpuEl+fYu
oRNQXP7aiuoruaqkiD6pe5Yk91lhRp0IYL8KvakkHZBTa122tas7Iy8TjKs2Vonj
uFff22DkJCJ7lyr0aisyxaKCkmgyY7b8ww2WD1InD0u19lD+iBsGd2GZ52SR4BoD
CYfindLnKUSqsJjEnxr37PjeevkIZp9nTN5McKmh/SkQ2d5veJgbqi0EILa7s9t9
1qE4gfNie7iyTg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:11 2026 by rpki-client