Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File: pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier: mw94DF7IzLAuFFl1t16MIwMvtNCkCXLo2JbUf80nLVk=
Subject key identifier: F4:1C:D0:77:F3:E7:B8:0D:1D:B9:95:20:D0:BF:4A:D2:F8:B3:01:8B
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 019D9A3EB569AF8FA485087F6AFD78BB341D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number: 137E
Signing time: Fri 17 Apr 2026 07:01:34 +0000
Manifest this update: Fri 17 Apr 2026 07:01:34 +0000
Manifest next update: Sat 18 Apr 2026 07:01:34 +0000
Files and hashes: 1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=)
2: ExTCIeQK6Vb8OCwCNuc_-quqRmI.roa (hash: yAl2sJH2YaylYmZhqm6jDAUkF463bPlFn5SJl2V0nqk=)
3: JzElV8rMB35_r5yROjAIe1YSEGk.roa (hash: prxCAC9aS1jR/lGKgImoCaF1puXWY2FG75jnwkB+CC4=)
4: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=)
5: VXazB19Is6W_OKKCp0AvNqbD-rM.roa (hash: IwIknG6od+Fc8/mQwvVulKrK8qXdxe2y0/Y0Cy93yB0=)
6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: T8WIqUi/5Run1jwwp0exC9kaI94l0i0NMsqSGz7GJCk=)
7: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=)
8: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:b5:69:af:8f:a4:85:08:7f:6a:fd:78:bb:34:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Apr 17 07:01:34 2026 GMT
Not After : Apr 18 07:01:34 2026 GMT
Subject: CN=f41cd077f3e7b80d1db99520d0bf4ad2f8b3018b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:65:11:9e:4e:67:db:eb:25:41:b2:68:c3:86:
9f:03:3f:95:b4:be:1f:27:18:7c:b1:2c:51:c5:50:
94:57:0c:e7:57:0d:35:f0:46:66:40:b9:d3:00:b8:
cb:eb:5e:c1:e9:f8:2d:74:4f:ac:b0:3c:fd:b0:36:
a6:e3:7f:37:a7:98:26:e5:4d:12:9b:1a:49:31:42:
be:7b:41:72:95:96:9e:a0:42:45:25:44:12:ad:3e:
c2:b5:f1:48:d1:6b:12:08:0c:58:b5:e7:1a:16:1a:
4e:59:a0:8f:14:b5:3a:cd:09:70:49:ac:ff:4e:bf:
d6:5c:8f:fc:68:14:36:30:db:93:d6:bd:97:63:7b:
c8:34:89:14:fa:1e:b3:0f:3d:61:f7:a4:0a:db:da:
1c:98:b8:96:c2:b6:34:66:f9:54:08:5c:89:ef:c4:
77:f2:19:82:18:f1:54:6c:f4:f7:56:1e:de:1b:48:
50:5d:e1:db:fa:e1:af:82:06:a8:10:e2:86:a2:3e:
45:fa:a3:f9:2b:65:2a:de:f9:2c:0e:9c:5a:80:58:
56:cf:b3:d1:64:f2:4b:ed:ae:06:77:1a:82:62:38:
39:fd:38:58:8e:de:ab:3f:d6:b3:7a:0b:52:92:3e:
01:96:87:ac:91:bc:ae:f2:80:93:06:d9:48:2e:3a:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1C:D0:77:F3:E7:B8:0D:1D:B9:95:20:D0:BF:4A:D2:F8:B3:01:8B
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0a:a1:eb:53:9d:38:3f:25:84:d4:2e:0e:33:6a:07:a5:07:
ca:26:98:33:6d:9a:b0:41:e4:74:5a:89:0d:d5:e7:ac:11:c0:
6c:90:b7:e5:d2:24:38:48:e4:65:ae:1d:b2:e0:93:8f:0e:ce:
2c:f5:33:40:9f:d3:d0:5c:ae:98:92:42:e1:16:fa:7f:71:f3:
1d:fe:bf:11:66:c5:26:3d:3e:8e:2f:be:51:e8:68:c7:13:bb:
98:21:a5:90:63:61:f6:a8:a1:f0:74:61:02:e3:1a:c9:7d:e8:
68:00:80:07:44:9a:5f:26:cf:eb:d8:b3:b3:b2:92:03:55:1e:
fe:7e:c4:9a:e0:1f:9a:93:3d:60:cf:6b:52:1e:70:42:cf:18:
de:18:33:ca:d5:d2:f7:cc:78:20:02:ae:05:b7:af:90:e5:b5:
27:ba:71:3d:b5:a0:e9:1a:b3:32:88:60:9e:8a:55:2b:5f:8e:
fd:6b:03:bf:bc:22:82:f6:f3:6c:32:de:f7:81:d0:12:80:67:
1b:4f:e8:69:53:94:6c:bc:98:d1:76:b9:85:93:8b:50:5f:da:
64:16:dd:99:1e:d8:6f:74:dd:ff:69:b4:6d:31:de:07:78:71:
be:53:31:c6:e5:d9:20:c1:42:44:79:49:bf:53:52:86:a7:d0:
9e:de:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:32:32 2026 by rpki-client