Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier: hGvQdXomqQzEikZ8Vo3UaPXUH2ESoAhKudCD0WlJ23g=
Subject key identifier: C6:43:67:3C:9C:CA:96:6C:F6:3B:C0:3A:AD:16:99:F8:3E:82:1B:56
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 019FAC7638479FFD4AC8378CEE416D0C985B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number: 0F57
Signing time: Wed 29 Jul 2026 06:00:56 +0000
Manifest this update: Wed 29 Jul 2026 06:00:56 +0000
Manifest next update: Thu 30 Jul 2026 06:00:56 +0000
Files and hashes: 1: Z8sIth2fuLtbZU5YZYofujl3N3Q.roa (hash: OuZ+DZI7vPFF2f+5cYLFAwbQ08o0C2E+Uzidod1oA7I=)
2: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: FabjW4QHIPc/x0YrfBsr7FzNyVl2hngQiT9OGAhsxF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:38:47:9f:fd:4a:c8:37:8c:ee:41:6d:0c:98:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Jul 29 06:00:56 2026 GMT
Not After : Jul 30 06:00:56 2026 GMT
Subject: CN=c643673c9cca966cf63bc03aad1699f83e821b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:cf:a8:b2:53:c2:cc:02:2d:16:e7:fb:5a:
6f:f1:48:7a:9b:ca:94:27:fa:02:19:50:e5:ab:e0:
25:0f:1c:ed:8b:7f:18:fc:4e:35:37:a4:92:62:69:
ed:aa:c6:c0:57:4e:b6:3c:df:df:f6:1a:ab:71:5b:
76:70:2d:b0:e8:a1:c3:c9:51:4d:3e:db:7a:5f:84:
cb:8c:28:96:d5:c8:3b:38:6f:8b:df:e7:9e:28:f2:
a1:5e:41:04:d0:4c:93:bb:7b:c0:1d:96:b6:08:33:
f7:cd:65:64:1d:f2:3f:c5:33:6f:79:e2:46:99:e8:
56:9d:3e:31:6c:38:6b:38:8f:2a:59:b1:ee:fb:7b:
cb:84:4d:1b:b5:46:ab:66:e9:7c:77:9f:81:9e:a7:
7f:0a:d5:47:76:f5:6a:e8:83:91:3c:85:d1:7c:78:
68:9e:f4:40:b4:07:99:16:85:fc:78:8f:57:53:2c:
80:2a:01:4a:70:69:f4:1b:8d:1e:78:7c:05:11:c9:
0e:c5:b6:39:7f:a8:8e:3f:97:a6:6f:97:5a:20:15:
49:a3:d6:4d:99:5c:82:64:d8:8d:c7:53:c4:6b:5d:
14:08:e8:4b:f8:9e:da:03:16:a3:36:0f:54:d6:6c:
26:b5:2e:e0:4c:d4:da:11:c7:0c:a0:8f:9c:94:be:
8b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:43:67:3C:9C:CA:96:6C:F6:3B:C0:3A:AD:16:99:F8:3E:82:1B:56
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c7:27:b0:2c:75:4d:dc:d7:7b:f7:2e:6f:b3:95:de:24:31:
04:42:73:60:aa:81:90:10:47:fe:55:7e:a2:dc:03:5a:69:86:
bd:e9:b2:41:20:92:bc:71:8d:ba:63:fd:26:5a:b6:5b:c7:2b:
81:97:f4:7e:d7:50:79:60:bd:09:6b:74:66:57:4f:43:58:b6:
d3:31:8d:f3:4c:00:76:c8:a9:09:d0:98:41:c4:52:72:84:a1:
64:f6:82:3c:7c:1c:d2:65:ac:19:a0:79:db:e7:f9:c8:e8:d1:
8d:35:98:5b:aa:83:64:2c:63:fd:ef:17:8c:6f:ae:09:c7:39:
f1:6b:37:8b:8a:6a:a8:5d:36:b8:fd:bc:5a:04:44:cf:33:c5:
61:65:62:52:0c:ed:6b:c3:5b:25:eb:4e:cf:e4:ff:b5:f5:e7:
1a:db:61:35:66:f4:cc:a4:93:02:16:4d:a4:c4:70:8a:c6:b5:
e2:d4:e4:f3:b8:ab:7f:08:55:62:86:94:e4:ec:6e:ec:59:ee:
f4:fa:30:13:ad:ec:12:0e:1a:a0:6e:01:f1:7c:88:a3:3d:32:
a2:ba:03:2f:30:91:53:4f:d4:20:93:93:02:d9:76:db:6b:a4:
88:75:7f:98:7f:93:2b:99:1f:4c:12:e2:43:9e:03:f3:0b:14:
90:17:2c:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdjhHn/1KyDeM7kFtDJhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MDhmYzkyNDYwNDI3NTExMTBkMmVjNTA2NWQwYzQ3ZDFk
NDNjZDAwHhcNMjYwNzI5MDYwMDU2WhcNMjYwNzMwMDYwMDU2WjAzMTEwLwYDVQQD
EyhjNjQzNjczYzljY2E5NjZjZjYzYmMwM2FhZDE2OTlmODNlODIxYjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CvPqLJTwswCLRbn+1pv8Uh6m8qU
J/oCGVDlq+AlDxzti38Y/E41N6SSYmntqsbAV062PN/f9hqrcVt2cC2w6KHDyVFN
Ptt6X4TLjCiW1cg7OG+L3+eeKPKhXkEE0EyTu3vAHZa2CDP3zWVkHfI/xTNveeJG
mehWnT4xbDhrOI8qWbHu+3vLhE0btUarZul8d5+Bnqd/CtVHdvVq6IORPIXRfHho
nvRAtAeZFoX8eI9XUyyAKgFKcGn0G40eeHwFEckOxbY5f6iOP5emb5daIBVJo9ZN
mVyCZNiNx1PEa10UCOhL+J7aAxajNg9U1mwmtS7gTNTaEccMoI+clL6L7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZDZzycypZs9jvAOq0Wmfg+ghtWMB8GA1UdIwQY
MBaAFKQI/JJGBCdREQ0uxQZdDEfR1DzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNTk3YzUtM2VjNC00YjQ2LThjN2It
ZDkyMjQ4YWFiZTJkLzEvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hNTk3YzUtM2VjNC00YjQ2LThjN2ItZDkyMjQ4YWFiZTJk
LzEvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQccnsCx1
TdzXe/cub7OV3iQxBEJzYKqBkBBH/lV+otwDWmmGvemyQSCSvHGNumP9Jlq2W8cr
gZf0ftdQeWC9CWt0ZldPQ1i20zGN80wAdsipCdCYQcRScoShZPaCPHwc0mWsGaB5
2+f5yOjRjTWYW6qDZCxj/e8XjG+uCcc58Ws3i4pqqF02uP28WgREzzPFYWViUgzt
a8NbJetOz+T/tfXnGtthNWb0zKSTAhZNpMRwisa14tTk87irfwhVYoaU5Oxu7Fnu
9PowE63sEg4aoG4B8XyIoz0yoroDLzCRU0/UIJOTAtl222ukiHV/mH+TK5kfTBLi
Q54D8wsUkBcsoA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:32 2026 by rpki-client