Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File: pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier: OYu2LmnfqhfGJvHsUwtVRgFhMMU4rbEgI5iKFh1E7K4=
Subject key identifier: 8B:07:E5:56:EA:EA:58:E4:7A:1F:D2:31:1C:83:BB:DE:97:E8:9F:FB
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 019DA3E6B012E0E104995848E42A8E8386D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number: 1383
Signing time: Sun 19 Apr 2026 04:01:37 +0000
Manifest this update: Sun 19 Apr 2026 04:01:37 +0000
Manifest next update: Mon 20 Apr 2026 04:01:37 +0000
Files and hashes: 1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=)
2: ExTCIeQK6Vb8OCwCNuc_-quqRmI.roa (hash: yAl2sJH2YaylYmZhqm6jDAUkF463bPlFn5SJl2V0nqk=)
3: JzElV8rMB35_r5yROjAIe1YSEGk.roa (hash: prxCAC9aS1jR/lGKgImoCaF1puXWY2FG75jnwkB+CC4=)
4: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=)
5: VXazB19Is6W_OKKCp0AvNqbD-rM.roa (hash: IwIknG6od+Fc8/mQwvVulKrK8qXdxe2y0/Y0Cy93yB0=)
6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: WUBGx7d8yYgK6d6KGu6muXY7BdO/gclnaM+D8bil4rY=)
7: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=)
8: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:b0:12:e0:e1:04:99:58:48:e4:2a:8e:83:86:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Apr 19 04:01:37 2026 GMT
Not After : Apr 20 04:01:37 2026 GMT
Subject: CN=8b07e556eaea58e47a1fd2311c83bbde97e89ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b0:a7:eb:42:71:c2:8c:bb:c0:25:33:98:9e:
fc:0b:07:19:3f:d2:e2:94:87:c1:4f:ea:ab:69:50:
9b:f0:0b:27:01:81:26:c0:e2:65:8f:eb:5a:90:c5:
3b:8f:72:4b:74:58:86:d1:d5:40:5e:e6:ff:3c:88:
fb:bb:65:50:dc:e9:04:50:37:b3:e3:29:2c:1d:86:
ad:d1:47:c8:58:1b:2d:4c:75:2f:65:41:73:f3:69:
7f:59:a6:0b:26:16:5f:32:81:ff:7b:8d:3c:57:fb:
f2:f6:8b:fd:d3:c2:14:e6:5d:13:8a:d5:62:e6:b7:
ae:fe:ca:45:76:db:ef:aa:2e:68:15:d0:87:9b:d9:
e0:b3:92:2c:0f:6a:84:f5:d2:5d:d4:f9:da:c5:45:
ab:82:fe:42:0b:5b:63:7c:86:e3:7f:b2:b4:32:d1:
ce:16:76:1b:c9:fc:6d:cc:fa:90:a9:cc:b6:bd:25:
11:0e:50:68:bb:12:88:11:e2:17:99:3d:b1:f5:c6:
d7:51:86:c8:95:3e:ec:5a:f5:aa:5a:1b:89:d5:01:
ce:dd:b4:f1:e4:a7:d2:35:50:df:df:93:d8:78:87:
b2:d2:30:2c:4a:c1:1d:ce:ae:d6:bf:67:6f:38:17:
ff:e9:47:1c:1c:08:75:2c:b9:28:db:76:8c:29:be:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:07:E5:56:EA:EA:58:E4:7A:1F:D2:31:1C:83:BB:DE:97:E8:9F:FB
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:45:90:62:a4:2b:79:06:cf:a2:e8:33:60:a3:f0:7e:55:ba:
fd:14:6e:6b:87:b7:a4:74:c9:37:88:10:a6:f4:00:bd:74:3c:
c1:0f:86:8c:4e:31:bd:df:93:fb:43:8e:97:4e:2b:05:ca:a7:
42:97:bc:91:2d:53:78:95:29:ad:4a:7e:e4:c2:12:0f:1e:b3:
6b:6e:78:62:50:be:81:a2:7c:e8:8d:fc:ee:fc:66:24:5b:61:
78:b1:1b:b3:1a:00:ef:42:25:a7:03:73:f6:04:42:71:35:e1:
ab:6b:43:59:9c:05:38:c9:28:e4:4a:78:98:1d:b0:80:07:8b:
2b:77:e4:a5:17:63:28:ca:12:bc:b5:34:3d:aa:f8:1a:d4:08:
c8:68:eb:30:53:3b:e1:c9:84:3a:9b:b1:69:3f:ef:ef:47:9e:
4e:0d:ca:83:89:f1:1d:d9:ec:e5:1f:8b:47:32:f0:b2:ec:c8:
c1:09:6a:ff:c4:ba:0b:98:bc:a0:a8:48:e3:eb:b6:cc:e9:64:
29:31:a7:c1:40:31:0c:f7:8a:c2:10:df:b4:82:c7:72:3d:5d:
8f:1a:59:da:42:13:ce:41:a1:ad:b8:0e:83:ec:5b:b8:5a:7b:
56:e9:ce:f8:94:18:1a:8a:4a:4c:3f:60:68:81:ee:36:10:2e:
a2:7c:e9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:24:09 2026 by rpki-client