Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: Bn+3auwXwawvqGg4ZR1mYpF/zc0SOaXkrbrN8Jc+cK4=
Subject key identifier: CC:FA:EF:FF:5A:23:0B:D6:57:A9:0C:9A:B1:CB:03:60:99:A8:D0:0B
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 019FA907605C180CB7959B9BBE5B8796437B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 0DC6
Signing time: Tue 28 Jul 2026 14:01:00 +0000
Manifest this update: Tue 28 Jul 2026 14:01:00 +0000
Manifest next update: Wed 29 Jul 2026 14:01:00 +0000
Files and hashes: 1: jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa (hash: heA9ElftnVcEx/Z56cUQXfy2JpdBhi/Gw5ToPa737lc=)
2: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: sDRgVbrpMblKE5is9fR5rGyuWAsQ/5qZQUX6m0ymva0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:60:5c:18:0c:b7:95:9b:9b:be:5b:87:96:43:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Jul 28 14:01:00 2026 GMT
Not After : Jul 29 14:01:00 2026 GMT
Subject: CN=ccfaefff5a230bd657a90c9ab1cb036099a8d00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ec:43:ed:26:d8:df:da:9a:cb:22:ef:5c:f4:
06:83:66:dc:09:35:4f:ec:61:6e:2a:15:cf:4d:e0:
bf:fa:ab:ee:06:bb:cf:cd:d2:b5:1b:c0:1c:1e:e6:
5d:3d:88:d6:f4:5c:e8:a7:0b:f5:69:5f:cf:68:80:
13:47:de:a0:5d:5c:4f:33:ca:f8:e7:1e:7d:f2:7d:
b6:fe:b0:54:01:3e:51:3d:bd:e9:e5:26:9d:42:bf:
8e:34:5a:85:fc:56:00:06:b7:1c:28:f1:9a:fe:44:
24:4b:53:f5:2c:2f:02:44:d0:1c:ac:8a:50:27:af:
ee:20:9d:74:c6:79:65:78:a5:16:a9:17:92:81:b0:
47:42:15:06:21:53:58:88:38:8c:a7:6d:a2:01:67:
2b:ac:27:12:d6:89:4b:8d:f9:98:81:9c:d7:51:80:
87:35:59:6f:3b:04:a1:23:06:0b:7e:7f:b2:ea:bb:
86:80:1b:8e:ea:dc:58:92:7a:b0:77:86:05:24:cb:
d7:c8:af:00:4d:b6:28:98:3b:e1:8e:64:4c:40:1f:
48:66:91:0c:e8:1e:97:12:e9:58:b5:f3:6e:24:c1:
e5:0d:08:d6:15:4b:0a:cd:c0:22:d0:85:9c:9e:2c:
d0:42:bf:82:00:73:57:e4:2b:50:d9:5a:69:b6:5d:
c1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FA:EF:FF:5A:23:0B:D6:57:A9:0C:9A:B1:CB:03:60:99:A8:D0:0B
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:66:27:8c:6e:58:46:60:55:48:0d:5b:3f:5a:c3:90:7c:c2:
65:3f:ba:7d:b4:23:71:01:b3:44:6f:3c:47:c2:25:4e:7f:94:
1d:ad:ea:e9:1d:43:03:db:ca:ba:8e:13:b3:f2:7b:4e:cd:29:
6f:e4:77:a2:78:b0:8d:cd:c8:b4:26:bc:34:87:12:b4:8f:5c:
5a:18:7f:f8:ad:bb:0d:24:3f:85:ba:19:a1:09:5b:ae:78:7d:
da:b0:95:cf:90:29:87:2d:a2:e2:00:0a:a9:86:0d:0d:c2:a9:
0f:59:bb:b7:8f:a7:89:ac:e9:59:a5:29:73:ca:e7:71:3e:2d:
b3:b7:e6:6c:0d:a4:d1:ca:9e:c5:c8:37:97:68:64:9f:71:a7:
0b:73:87:bb:ad:3a:eb:a8:27:74:9b:49:38:c3:e3:26:32:98:
e3:36:67:18:85:95:69:0a:91:b8:99:c3:e6:d3:4b:4d:6f:35:
5d:a1:2b:12:f6:8b:c6:85:8b:5b:f7:d8:80:7d:fc:4f:a4:09:
4c:4e:c2:0c:e2:c5:98:2c:d3:af:c4:4f:e1:93:d2:d8:1c:1b:
66:65:ec:6a:31:17:a6:06:07:34:18:e2:f1:1c:06:17:e3:ce:
46:a4:f3:c6:fd:1a:53:fb:53:1a:9a:fc:7e:57:be:43:b0:87:
f8:37:d5:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB2BcGAy3lZubvluHlkN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDc4OTNmYjViMzQ4ZTY4YTY2ZDU1YTI4ZjI3OGNiZjM5
MzFkZjQwHhcNMjYwNzI4MTQwMTAwWhcNMjYwNzI5MTQwMTAwWjAzMTEwLwYDVQQD
EyhjY2ZhZWZmZjVhMjMwYmQ2NTdhOTBjOWFiMWNiMDM2MDk5YThkMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uxD7SbY39qayyLvXPQGg2bcCTVP
7GFuKhXPTeC/+qvuBrvPzdK1G8AcHuZdPYjW9Fzopwv1aV/PaIATR96gXVxPM8r4
5x598n22/rBUAT5RPb3p5SadQr+ONFqF/FYABrccKPGa/kQkS1P1LC8CRNAcrIpQ
J6/uIJ10xnlleKUWqReSgbBHQhUGIVNYiDiMp22iAWcrrCcS1olLjfmYgZzXUYCH
NVlvOwShIwYLfn+y6ruGgBuO6txYknqwd4YFJMvXyK8ATbYomDvhjmRMQB9IZpEM
6B6XEulYtfNuJMHlDQjWFUsKzcAi0IWcnizQQr+CAHNX5CtQ2Vpptl3BnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMz67/9aIwvWV6kMmrHLA2CZqNALMB8GA1UdIwQY
MBaAFKZHiT+1s0jmimbVWijyeMvzkx30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDIt
ZDYyNDQ5NmRkY2M4LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDItZDYyNDQ5NmRkY2M4
LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGYnjG5Y
RmBVSA1bP1rDkHzCZT+6fbQjcQGzRG88R8IlTn+UHa3q6R1DA9vKuo4Ts/J7Ts0p
b+R3oniwjc3ItCa8NIcStI9cWhh/+K27DSQ/hboZoQlbrnh92rCVz5Aphy2i4gAK
qYYNDcKpD1m7t4+niazpWaUpc8rncT4ts7fmbA2k0cqexcg3l2hkn3GnC3OHu606
66gndJtJOMPjJjKY4zZnGIWVaQqRuJnD5tNLTW81XaErEvaLxoWLW/fYgH38T6QJ
TE7CDOLFmCzTr8RP4ZPS2BwbZmXsajEXpgYHNBji8RwGF+PORqTzxv0aU/tTGpr8
fle+Q7CH+DfV/w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:59 2026 by rpki-client