Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier: 5qYiAhuLaByJIWaQSnTvvq2nurFamgdIeNhpWHy4+IY=
Subject key identifier: 51:E6:30:12:CF:FA:E3:83:3D:FC:88:40:F8:C9:6E:13:3D:C0:F8:87
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 019EC4B81C37639DA1025464320311867530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number: 0EDF
Signing time: Sun 14 Jun 2026 06:01:00 +0000
Manifest this update: Sun 14 Jun 2026 06:01:00 +0000
Manifest next update: Mon 15 Jun 2026 06:01:00 +0000
Files and hashes: 1: Z8sIth2fuLtbZU5YZYofujl3N3Q.roa (hash: OuZ+DZI7vPFF2f+5cYLFAwbQ08o0C2E+Uzidod1oA7I=)
2: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: EJ3K6t2HvlhsVdm/QPljVmkdXkCaIk0834sHgT9GWpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:b8:1c:37:63:9d:a1:02:54:64:32:03:11:86:75:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Jun 14 06:01:00 2026 GMT
Not After : Jun 15 06:01:00 2026 GMT
Subject: CN=51e63012cffae3833dfc8840f8c96e133dc0f887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:14:fc:8a:75:56:f3:24:7d:c0:89:f3:73:de:
84:58:c4:67:a2:0c:b5:7c:05:81:aa:6a:ea:5a:8a:
07:e2:c8:f1:6a:2e:95:67:08:8f:52:fc:d0:62:2b:
93:57:f3:2b:b9:9d:57:7c:28:1b:98:43:57:c2:c3:
2f:02:09:51:ff:43:67:6d:fc:af:c8:dc:fd:6c:19:
a3:ef:36:cc:9e:99:cc:75:96:ed:a7:d0:92:b3:af:
d9:9d:30:a5:5c:a8:66:9d:29:c0:1e:8c:31:49:df:
db:e3:b2:1b:be:0d:9a:a4:b6:f8:f0:54:67:b8:2e:
41:57:97:e9:3e:9c:f8:4d:4d:b5:c7:db:8f:96:27:
5f:5f:a2:94:bf:73:c0:f3:92:71:dc:72:b5:e4:da:
44:bf:b9:9b:54:6f:c4:75:e8:10:c9:18:1e:22:73:
bc:29:fe:4b:ef:00:f3:a6:f5:6a:96:4e:fd:c6:37:
fc:d8:34:76:ae:09:e6:17:45:06:6e:ce:e9:fc:97:
18:b2:10:a7:73:84:12:27:55:99:2e:d5:4f:5c:7c:
2a:23:ef:74:98:85:34:c2:04:d8:ee:56:5f:04:be:
3b:59:ed:7f:25:72:86:22:a9:a1:cc:03:08:39:05:
ae:34:86:3c:78:8e:82:63:d9:71:a2:62:c8:1e:b8:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E6:30:12:CF:FA:E3:83:3D:FC:88:40:F8:C9:6E:13:3D:C0:F8:87
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:95:8f:c0:4b:77:74:f9:72:73:4d:c6:77:7e:bb:ba:57:15:
53:8f:06:00:a5:f1:1e:45:8d:2f:f4:4b:f0:5e:99:11:75:71:
e4:41:1d:4d:61:32:fd:a3:89:af:d1:c1:0b:92:b6:93:5e:75:
44:21:aa:3b:e1:0d:46:23:bb:c2:65:0a:37:05:e2:f0:af:37:
71:57:83:7d:d4:75:b1:35:d0:a5:ed:c6:1b:e3:cf:1c:fa:0c:
45:2e:a5:bd:89:47:c5:9e:6e:19:2a:5d:97:f4:b2:d4:f8:6e:
e2:14:4f:54:03:5d:ec:33:43:45:2d:e2:b4:40:74:38:42:0a:
a9:03:e1:e0:90:52:4f:4d:7b:d9:f4:60:65:a1:39:1e:49:80:
fb:cc:c3:68:8f:d9:13:78:f7:35:ac:f9:11:68:8e:dc:32:a4:
7b:0d:83:f4:ae:fa:e6:58:ec:55:45:3e:5f:2b:eb:a0:67:32:
70:ca:b7:02:f9:fe:03:fc:34:81:50:87:e2:95:ba:28:f9:10:
f6:15:5e:67:97:a1:d4:01:1f:3b:70:a2:71:ae:71:cf:c8:17:
e3:aa:ac:be:3e:01:87:da:e5:94:3f:30:84:a1:d6:9d:91:9b:
8f:b4:e7:c7:0d:f6:d2:d2:d3:55:02:cd:6a:ad:c1:66:b5:48:
be:97:51:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7EuBw3Y52hAlRkMgMRhnUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MDhmYzkyNDYwNDI3NTExMTBkMmVjNTA2NWQwYzQ3ZDFk
NDNjZDAwHhcNMjYwNjE0MDYwMTAwWhcNMjYwNjE1MDYwMTAwWjAzMTEwLwYDVQQD
Eyg1MWU2MzAxMmNmZmFlMzgzM2RmYzg4NDBmOGM5NmUxMzNkYzBmODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xT8inVW8yR9wInzc96EWMRnogy1
fAWBqmrqWooH4sjxai6VZwiPUvzQYiuTV/MruZ1XfCgbmENXwsMvAglR/0Nnbfyv
yNz9bBmj7zbMnpnMdZbtp9CSs6/ZnTClXKhmnSnAHowxSd/b47Ibvg2apLb48FRn
uC5BV5fpPpz4TU21x9uPlidfX6KUv3PA85Jx3HK15NpEv7mbVG/EdegQyRgeInO8
Kf5L7wDzpvVqlk79xjf82DR2rgnmF0UGbs7p/JcYshCnc4QSJ1WZLtVPXHwqI+90
mIU0wgTY7lZfBL47We1/JXKGIqmhzAMIOQWuNIY8eI6CY9lxomLIHrgc6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHmMBLP+uODPfyIQPjJbhM9wPiHMB8GA1UdIwQY
MBaAFKQI/JJGBCdREQ0uxQZdDEfR1DzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNTk3YzUtM2VjNC00YjQ2LThjN2It
ZDkyMjQ4YWFiZTJkLzEvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hNTk3YzUtM2VjNC00YjQ2LThjN2ItZDkyMjQ4YWFiZTJk
LzEvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJWPwEt3
dPlyc03Gd367ulcVU48GAKXxHkWNL/RL8F6ZEXVx5EEdTWEy/aOJr9HBC5K2k151
RCGqO+ENRiO7wmUKNwXi8K83cVeDfdR1sTXQpe3GG+PPHPoMRS6lvYlHxZ5uGSpd
l/Sy1Phu4hRPVANd7DNDRS3itEB0OEIKqQPh4JBST0172fRgZaE5HkmA+8zDaI/Z
E3j3Naz5EWiO3DKkew2D9K765ljsVUU+XyvroGcycMq3Avn+A/w0gVCH4pW6KPkQ
9hVeZ5eh1AEfO3Cica5xz8gX46qsvj4Bh9rllD8whKHWnZGbj7Tnxw320tLTVQLN
aq3BZrVIvpdRmA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:26:55 2026 by rpki-client