Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: NWCQvuQHGVubYRCN4BXPQhm000yMLayBoKufzKX1xvY=
Subject key identifier: E1:77:62:5F:5A:1F:D3:94:8F:D8:92:D5:AE:48:10:9D:64:4C:C1:08
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 019FAAF546C9CFCB943D51FA2F89C53A54E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0E35
Signing time: Tue 28 Jul 2026 23:00:28 +0000
Manifest this update: Tue 28 Jul 2026 23:00:28 +0000
Manifest next update: Wed 29 Jul 2026 23:00:28 +0000
Files and hashes: 1: UycNDBh6XIKJ82eOMM9nsWm3RUU.roa (hash: j5CuV0Ecvfd3t9K7/xrfKK4OIBdyHHKPYNpzUJ5l9jc=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: al53i3lLk5VWA3LOqc5OkXs7wLER/7wowyUIV+DNatI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:46:c9:cf:cb:94:3d:51:fa:2f:89:c5:3a:54:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Jul 28 23:00:28 2026 GMT
Not After : Jul 29 23:00:28 2026 GMT
Subject: CN=e177625f5a1fd3948fd892d5ae48109d644cc108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:d7:44:73:5c:1d:0d:4f:65:3e:c6:2b:c1:
2e:93:3c:64:fc:10:76:8f:9f:de:9c:2a:91:e8:85:
95:8a:5c:bf:41:6e:77:6d:a5:7d:b2:7b:f3:eb:b6:
0b:c7:2b:ba:a8:d8:ab:d3:88:58:54:97:7a:32:c7:
d5:30:73:69:9e:c2:6f:fa:84:bd:db:85:a8:bd:d5:
eb:a3:02:e0:42:7c:d1:f7:77:02:8a:8d:4c:55:ce:
d7:17:15:c9:c2:ec:2d:a6:a7:25:21:ea:b1:65:d7:
d4:4d:aa:ba:ef:e9:e7:ff:f9:dc:16:a2:67:ee:26:
3f:9d:66:67:a8:ba:11:92:4c:0d:f6:74:69:98:5b:
8c:75:5c:51:ad:47:5f:0f:c2:ca:ea:55:e6:d7:8f:
c3:ef:75:37:9d:cf:8c:f9:f7:f2:0b:8e:1d:56:58:
87:4f:58:78:d1:5a:f0:89:9f:fd:80:23:ad:14:66:
bb:20:7c:52:88:56:aa:b8:b7:b3:17:d0:33:9e:80:
2c:4e:0e:3f:65:d9:b6:cd:51:8a:49:ac:ff:2e:4f:
5c:87:cf:bb:99:62:08:cf:59:f4:0f:fe:fd:24:8a:
22:58:41:fa:59:1b:76:c2:fb:25:70:34:7a:18:87:
d3:3c:3f:a1:f2:cc:65:89:3e:14:d3:f5:63:af:71:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:77:62:5F:5A:1F:D3:94:8F:D8:92:D5:AE:48:10:9D:64:4C:C1:08
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:0e:58:83:af:e5:cb:71:fa:b4:0c:a9:28:08:dc:db:0c:f6:
b4:04:fb:fe:c2:8a:91:5d:f8:c1:8d:13:72:3f:ac:97:11:1f:
ff:a9:88:cb:6d:0b:48:46:8f:ec:30:c4:2d:73:36:87:03:51:
cd:3b:37:b0:43:b2:63:f5:5e:b8:b8:f1:d3:9a:58:bb:b8:8e:
b4:4e:95:50:75:5f:1c:37:5e:b1:28:9d:6e:4a:da:ee:72:23:
83:5c:01:77:a3:32:c4:84:e8:91:e5:72:4e:7e:be:28:b2:f7:
65:3d:d2:96:b2:98:ed:70:2c:f3:ca:35:c0:48:d3:9a:b6:2a:
28:7d:95:ea:44:ec:79:a6:c8:94:19:7d:06:b2:72:64:dd:4f:
bb:f1:18:39:de:2d:b0:0d:b3:b4:db:9d:46:6c:09:d4:da:51:
9c:f0:11:41:25:f0:60:5a:9b:66:9f:8f:bc:63:c4:66:6d:15:
57:45:d7:c3:18:f0:e6:9f:8f:2d:96:8f:ab:df:c6:2b:07:d2:
5d:6b:55:be:20:02:a7:91:dc:61:70:7d:14:5b:f7:0b:ad:ff:
57:1c:0e:f9:8b:f0:f9:5c:3f:a4:e4:87:3f:f6:66:df:4d:69:
49:4d:da:ed:42:0d:7b:6a:3e:e8:b4:66:d8:8d:a9:61:36:26:
5c:fd:ca:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9UbJz8uUPVH6L4nFOlTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OGY4ZjMyNTE0YTE4M2U5NzdhM2M3ZGYzNjQ3M2Q1NjI2
MGM0YTQwHhcNMjYwNzI4MjMwMDI4WhcNMjYwNzI5MjMwMDI4WjAzMTEwLwYDVQQD
EyhlMTc3NjI1ZjVhMWZkMzk0OGZkODkyZDVhZTQ4MTA5ZDY0NGNjMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1zXRHNcHQ1PZT7GK8Eukzxk/BB2
j5/enCqR6IWVily/QW53baV9snvz67YLxyu6qNir04hYVJd6MsfVMHNpnsJv+oS9
24WovdXrowLgQnzR93cCio1MVc7XFxXJwuwtpqclIeqxZdfUTaq67+nn//ncFqJn
7iY/nWZnqLoRkkwN9nRpmFuMdVxRrUdfD8LK6lXm14/D73U3nc+M+ffyC44dVliH
T1h40VrwiZ/9gCOtFGa7IHxSiFaquLezF9AznoAsTg4/Zdm2zVGKSaz/Lk9ch8+7
mWIIz1n0D/79JIoiWEH6WRt2wvslcDR6GIfTPD+h8sxliT4U0/Vjr3EMnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOF3Yl9aH9OUj9iS1a5IEJ1kTMEIMB8GA1UdIwQY
MBaAFLaPjzJRShg+l3o8ffNkc9ViYMSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zODg3ZTQtYjU5OC00NWUzLThkODUt
MjIxMGVkOWQwODYxLzEvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zODg3ZTQtYjU5OC00NWUzLThkODUtMjIxMGVkOWQwODYx
LzEvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3g5Yg6/l
y3H6tAypKAjc2wz2tAT7/sKKkV34wY0Tcj+slxEf/6mIy20LSEaP7DDELXM2hwNR
zTs3sEOyY/VeuLjx05pYu7iOtE6VUHVfHDdesSidbkra7nIjg1wBd6MyxITokeVy
Tn6+KLL3ZT3SlrKY7XAs88o1wEjTmrYqKH2V6kTseabIlBl9BrJyZN1Pu/EYOd4t
sA2ztNudRmwJ1NpRnPARQSXwYFqbZp+PvGPEZm0VV0XXwxjw5p+PLZaPq9/GKwfS
XWtVviACp5HcYXB9FFv3C63/VxwO+Yvw+Vw/pOSHP/Zm301pSU3a7UINe2o+6LRm
2I2pYTYmXP3KMg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:07:49 2026 by rpki-client