Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier: myA7tlRIYlKmHI2l/1vXzQTURnSe+/gF/WdskBYHEQM=
Subject key identifier: BA:73:6F:3A:2F:E8:D7:59:2F:4A:9C:0A:7B:34:A2:A3:2A:F6:0A:BA
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 019EC30010638D7A95B27FC437D2338C42FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number: 0822
Signing time: Sat 13 Jun 2026 22:00:21 +0000
Manifest this update: Sat 13 Jun 2026 22:00:21 +0000
Manifest next update: Sun 14 Jun 2026 22:00:21 +0000
Files and hashes: 1: gJz6RmgOr74ogolKTIbJJ0khIbY.roa (hash: nc3zZ0AuWIJRv8B+9l+JRXdB9csW2X29DxKckbvvC9Q=)
2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: GQ7prLwWr0jjCr62KFV1jMQ1NubPPxF9ykBdG6Q6RTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:10:63:8d:7a:95:b2:7f:c4:37:d2:33:8c:42:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: Jun 13 22:00:21 2026 GMT
Not After : Jun 14 22:00:21 2026 GMT
Subject: CN=ba736f3a2fe8d7592f4a9c0a7b34a2a32af60aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:62:b3:e1:06:d7:02:be:f5:d6:49:89:a2:
bd:29:76:a9:a1:86:58:ce:7b:08:b7:f2:b1:c6:8a:
73:3a:cb:66:0f:21:4c:23:a4:b5:25:76:95:9c:d3:
96:9d:1d:05:0e:f1:cd:ea:3d:c3:46:b3:43:0e:38:
c0:db:e1:71:64:bb:63:62:0c:35:3b:98:a5:75:2b:
27:d2:ed:c5:0e:34:f4:0a:03:d0:61:d5:25:14:ee:
ab:38:8c:1c:98:a6:50:e2:32:4f:ff:60:09:27:dd:
61:b0:f3:73:83:01:e5:f1:15:1d:10:f3:9c:d5:6e:
6a:4d:17:d8:f5:4a:92:9f:8c:98:95:20:bf:36:c3:
ab:88:30:19:02:b4:5a:e6:6a:f2:02:2e:51:f2:99:
ec:ef:23:d1:a0:1f:b3:15:ef:19:36:0e:21:db:ad:
4c:c3:16:b4:60:9c:61:b3:ef:a6:f2:1b:af:8c:3e:
23:c8:f3:9c:57:4b:6f:ae:ac:f5:68:6d:41:f4:22:
61:f8:aa:b2:3b:1c:4e:c3:4b:8b:09:fd:00:a7:9c:
82:3d:66:69:a2:43:c9:a7:d7:80:fd:b1:51:4f:7c:
15:2f:54:b2:51:95:51:8f:1d:9b:77:d6:f9:70:bc:
26:8c:14:8e:0f:08:3a:3e:cc:a8:7f:2c:0c:3e:03:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:73:6F:3A:2F:E8:D7:59:2F:4A:9C:0A:7B:34:A2:A3:2A:F6:0A:BA
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fd:a1:9e:e3:b3:bb:97:3d:d7:55:fa:3a:f4:e3:8c:ad:af:
fc:a5:ff:fc:1d:1b:99:35:0e:60:80:70:d4:29:9f:3c:09:25:
58:b3:58:bb:65:77:19:00:35:85:cd:d0:4d:aa:3b:a9:22:aa:
6d:c3:ad:9a:04:27:aa:cb:cb:50:8e:fc:95:9a:af:73:7d:c8:
13:cb:55:84:d7:6a:a0:5d:b5:8a:fd:44:3f:04:cd:a2:db:3c:
60:2a:9a:51:4a:08:c7:d5:97:19:c8:3f:ef:21:4a:f5:41:ba:
1a:6a:e5:ca:23:c6:31:ad:53:b0:95:6f:c3:ff:71:ac:71:c8:
de:22:44:36:7c:67:02:38:3d:61:63:5f:35:5d:c7:85:ef:c2:
6a:00:90:5b:3e:45:1e:b4:ed:14:2f:99:6d:59:e0:56:f6:ee:
bb:70:dd:5c:d4:8d:52:78:19:72:26:eb:10:b4:6a:cc:ff:3e:
17:4c:8e:94:be:69:0e:39:f9:43:b0:cc:40:be:0e:ed:a9:11:
10:fe:f8:94:3a:66:a0:e7:1e:bb:01:54:cd:b2:02:9e:0a:31:
07:7c:76:6e:6a:3e:73:8a:1b:47:1f:b7:b2:ab:92:90:c6:ee:
e1:4d:13:77:91:9b:a3:40:d1:e8:7d:71:d7:49:7b:7f:d7:65:
4a:49:56:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DABBjjXqVsn/EN9IzjEL+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MDk3YTE1NmFlZjJmODJmZjEzYjNjMTZhZmY2ZjdlMTZk
YjAyYzgwHhcNMjYwNjEzMjIwMDIxWhcNMjYwNjE0MjIwMDIxWjAzMTEwLwYDVQQD
EyhiYTczNmYzYTJmZThkNzU5MmY0YTljMGE3YjM0YTJhMzJhZjYwYWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuRis+EG1wK+9dZJiaK9KXapoYZY
znsIt/KxxopzOstmDyFMI6S1JXaVnNOWnR0FDvHN6j3DRrNDDjjA2+FxZLtjYgw1
O5ildSsn0u3FDjT0CgPQYdUlFO6rOIwcmKZQ4jJP/2AJJ91hsPNzgwHl8RUdEPOc
1W5qTRfY9UqSn4yYlSC/NsOriDAZArRa5mryAi5R8pns7yPRoB+zFe8ZNg4h261M
wxa0YJxhs++m8huvjD4jyPOcV0tvrqz1aG1B9CJh+KqyOxxOw0uLCf0Ap5yCPWZp
okPJp9eA/bFRT3wVL1SyUZVRjx2bd9b5cLwmjBSODwg6PsyofywMPgNw/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpzbzov6NdZL0qcCns0oqMq9gq6MB8GA1UdIwQY
MBaAFKUJehVq7y+C/xOzwWr/b34W2wLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUt
MGQzMzk3MDdjYjg4LzEvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUtMGQzMzk3MDdjYjg4
LzEvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/2hnuOz
u5c911X6OvTjjK2v/KX//B0bmTUOYIBw1CmfPAklWLNYu2V3GQA1hc3QTao7qSKq
bcOtmgQnqsvLUI78lZqvc33IE8tVhNdqoF21iv1EPwTNots8YCqaUUoIx9WXGcg/
7yFK9UG6GmrlyiPGMa1TsJVvw/9xrHHI3iJENnxnAjg9YWNfNV3Hhe/CagCQWz5F
HrTtFC+ZbVngVvbuu3DdXNSNUngZcibrELRqzP8+F0yOlL5pDjn5Q7DMQL4O7akR
EP74lDpmoOceuwFUzbICngoxB3x2bmo+c4obRx+3squSkMbu4U0Td5Gbo0DR6H1x
10l7f9dlSklWKA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:08 2026 by rpki-client