Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: MMCLXAIAG6gFUDXneXnkB6Xp3N25b1BtID1WHH8keXA=
Subject key identifier: EC:62:EF:76:21:7B:9D:BB:A6:E5:5D:67:4F:3C:7F:E4:39:06:65:68
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 019FAF08C2E7327BEABAC1C55870ACF0414E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 1372
Signing time: Wed 29 Jul 2026 18:00:14 +0000
Manifest this update: Wed 29 Jul 2026 18:00:14 +0000
Manifest next update: Thu 30 Jul 2026 18:00:14 +0000
Files and hashes: 1: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: FwVo355U0QTeMFBC+eErTPE5EytRUGjzkFmARwHjVSU=)
2: Rc1JKlzBWJzMspxz5Sz8_wKGjSQ.roa (hash: YXV2SDD7Lq/HvpspFTkxAD7KLYHXbsXZfXUiY1m7rzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:08:c2:e7:32:7b:ea:ba:c1:c5:58:70:ac:f0:41:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Jul 29 18:00:14 2026 GMT
Not After : Jul 30 18:00:14 2026 GMT
Subject: CN=ec62ef76217b9dbba6e55d674f3c7fe439066568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:3d:f0:5b:cc:a7:d2:ee:ea:d8:a2:b3:ad:
4d:84:fe:2e:5e:58:b5:b6:36:ee:fe:05:b0:a4:0c:
c2:ee:5a:b6:af:10:48:df:24:73:40:50:4d:fd:39:
e2:f4:74:cb:e6:72:8f:05:a6:cd:94:e8:6a:dd:63:
3c:b8:4e:e8:70:5f:77:6a:b3:fd:80:cc:a4:17:5d:
ff:75:6a:84:9a:d0:43:cd:b4:ca:04:47:49:0a:84:
98:60:a1:66:b4:1c:e9:59:8d:3f:0a:22:24:1f:0d:
d6:95:98:f4:7d:5f:25:42:78:97:5e:b3:98:e1:9d:
39:e0:ab:f1:e2:39:58:ad:4d:37:92:49:f1:af:c2:
dc:40:3b:e0:15:c2:9a:3f:ea:fd:f4:71:c5:31:f5:
b9:85:89:38:e1:ba:3a:90:a4:27:0b:a8:27:9e:db:
68:07:a3:f5:50:9e:43:81:b8:96:39:f4:c7:4a:5f:
6b:5b:b6:66:06:ac:e1:a6:33:39:53:42:a0:02:52:
51:b6:33:13:ba:d0:e9:ab:25:6b:d1:b2:aa:5f:30:
f5:a6:51:2f:3b:44:ff:04:d1:b4:7e:26:77:99:1f:
28:d2:cf:eb:53:45:d7:9e:39:61:39:a4:b5:b4:61:
d3:e7:7a:52:2c:aa:7d:b3:c5:aa:b3:ec:02:f5:b6:
ff:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:62:EF:76:21:7B:9D:BB:A6:E5:5D:67:4F:3C:7F:E4:39:06:65:68
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cf:ae:bb:89:c4:32:87:1c:78:57:d0:66:a7:c9:e7:ac:bd:
54:ff:ff:64:c8:c4:b1:3f:79:cb:a1:57:e3:3f:dc:cd:78:ed:
b6:64:fd:3e:94:c4:90:1b:e9:4c:2e:81:14:6b:4a:9c:97:39:
74:58:a2:e0:40:fd:c8:e8:6e:43:93:19:c7:54:50:a1:bb:4b:
4f:0d:68:48:d7:b0:f0:9e:29:af:d3:dc:d5:c8:55:a9:9c:6b:
1c:5d:44:0f:e5:48:ed:9f:e5:72:4b:cf:3b:f0:d6:47:71:f0:
88:37:eb:d0:07:e9:01:2c:25:5b:e0:aa:6c:6a:59:89:b6:32:
7f:bb:4a:1d:6b:84:b9:b6:c8:61:1a:9b:74:21:cd:ac:da:71:
9d:7c:1b:26:3e:27:9e:66:93:f7:2e:b0:18:b5:e7:b9:aa:96:
56:f5:16:73:44:b1:8f:a2:d3:1a:dd:86:09:7d:7b:28:43:86:
4f:3f:4b:25:f2:92:ad:56:d2:f5:5e:e2:45:79:03:03:a2:43:
92:82:9c:c5:f6:79:c6:3d:e5:94:cc:33:33:0e:b0:fc:7d:3f:
1d:70:b7:f0:7d:65:99:4f:2d:8e:1e:3d:be:7f:01:53:7a:c6:
ea:36:f7:7d:34:95:24:42:a4:5d:26:aa:dc:e6:ab:ce:77:07:
d9:7a:05:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+vCMLnMnvqusHFWHCs8EFOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTU1NDA5OGM3YTg4YWEzNDI2NGI5MmQ4YmYyMjU3ZWMw
YmNkYTQwHhcNMjYwNzI5MTgwMDE0WhcNMjYwNzMwMTgwMDE0WjAzMTEwLwYDVQQD
EyhlYzYyZWY3NjIxN2I5ZGJiYTZlNTVkNjc0ZjNjN2ZlNDM5MDY2NTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEQ98FvMp9Lu6tiis61NhP4uXli1
tjbu/gWwpAzC7lq2rxBI3yRzQFBN/Tni9HTL5nKPBabNlOhq3WM8uE7ocF93arP9
gMykF13/dWqEmtBDzbTKBEdJCoSYYKFmtBzpWY0/CiIkHw3WlZj0fV8lQniXXrOY
4Z054Kvx4jlYrU03kknxr8LcQDvgFcKaP+r99HHFMfW5hYk44bo6kKQnC6gnntto
B6P1UJ5DgbiWOfTHSl9rW7ZmBqzhpjM5U0KgAlJRtjMTutDpqyVr0bKqXzD1plEv
O0T/BNG0fiZ3mR8o0s/rU0XXnjlhOaS1tGHT53pSLKp9s8Wqs+wC9bb/+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxi73Yhe527puVdZ088f+Q5BmVoMB8GA1UdIwQY
MBaAFD6lVAmMeoiqNCZLkti/IlfsC82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAt
NjZkZTk4NjVkYmFjLzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAtNjZkZTk4NjVkYmFj
LzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUc+uu4nE
MocceFfQZqfJ56y9VP//ZMjEsT95y6FX4z/czXjttmT9PpTEkBvpTC6BFGtKnJc5
dFii4ED9yOhuQ5MZx1RQobtLTw1oSNew8J4pr9Pc1chVqZxrHF1ED+VI7Z/lckvP
O/DWR3HwiDfr0AfpASwlW+CqbGpZibYyf7tKHWuEubbIYRqbdCHNrNpxnXwbJj4n
nmaT9y6wGLXnuaqWVvUWc0Sxj6LTGt2GCX17KEOGTz9LJfKSrVbS9V7iRXkDA6JD
koKcxfZ5xj3llMwzMw6w/H0/HXC38H1lmU8tjh49vn8BU3rG6jb3fTSVJEKkXSaq
3OarzncH2XoFbQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:25:31 2026 by rpki-client