Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
File: PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json)
Hash identifier: cMpPULCpsHHcR9WFFA3cSpArF8mI9wiflh0R5lNefAk=
Subject key identifier: C6:37:56:EF:0E:B4:B3:5A:D1:F7:E8:7F:29:DA:9F:49:F4:93:C2:37
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial: 019FA14D298F0D4446920C3845462717801D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
Manifest number: 1960
Signing time: Mon 27 Jul 2026 02:00:16 +0000
Manifest this update: Mon 27 Jul 2026 02:00:16 +0000
Manifest next update: Tue 28 Jul 2026 02:00:16 +0000
Files and hashes: 1: 2dj72cUvrZqEtdbBtFlSnYa4QKM.roa (hash: 0SrJodFZpH/UDhRtcg5lODDwzwQCCfVOAxUCuTTXZOI=)
2: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: qE9aPaHxui+ww4+Y5aWSJHd5YlAFS6yoz9Rp02dAIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:29:8f:0d:44:46:92:0c:38:45:46:27:17:80:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f172439599d7da525797899bf213b8e63554914
Validity
Not Before: Jul 27 02:00:16 2026 GMT
Not After : Jul 28 02:00:16 2026 GMT
Subject: CN=c63756ef0eb4b35ad1f7e87f29da9f49f493c237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:d4:8b:6e:20:3c:6c:53:03:ad:36:73:0b:
12:80:c3:a2:04:fc:21:61:a7:f8:a1:2e:3a:ae:74:
06:db:50:70:97:b8:7f:79:33:34:3e:6d:7e:10:88:
b6:76:a1:6e:31:06:87:6e:f1:5c:4d:24:88:c8:68:
5d:5b:7e:79:bd:45:cd:98:26:9b:6f:a7:1f:1b:4d:
5c:e5:b8:e2:ca:8b:00:36:66:73:0f:62:c4:2c:6d:
a3:71:92:a8:c6:80:c4:29:92:83:6f:a6:8c:e1:77:
b6:48:75:00:b6:09:49:8f:97:a1:a8:6b:fd:57:86:
94:31:30:27:77:2d:51:12:64:e3:07:9f:65:d0:d7:
f3:9b:01:17:62:ce:b2:c8:7f:d7:31:6d:81:ee:98:
f8:fb:92:10:b1:2c:61:8f:20:1a:f8:66:f8:5b:d9:
a9:8c:d2:39:d9:4a:52:9c:af:58:ad:60:0b:1d:31:
7e:90:7b:12:fd:1a:ad:9e:5f:91:41:25:ed:3c:1b:
85:89:1a:d6:fe:dd:7c:a8:57:c7:40:8b:93:5a:83:
74:8e:52:a8:c6:14:57:8f:3e:95:4b:30:3b:d9:be:
cc:de:c7:ab:f0:9c:96:a3:dd:85:91:30:04:3e:5b:
6c:c1:73:83:ce:f6:7d:52:b4:81:83:99:20:18:86:
4d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:37:56:EF:0E:B4:B3:5A:D1:F7:E8:7F:29:DA:9F:49:F4:93:C2:37
X509v3 Authority Key Identifier:
keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:01:83:53:b4:24:c3:a0:26:da:9a:74:69:01:45:42:31:41:
ee:a4:39:a5:bf:c4:71:47:2e:99:d8:ba:f9:d5:78:d1:d1:5a:
15:9a:24:d0:8d:61:75:f8:c5:84:c3:39:35:ba:c5:15:1c:fa:
54:15:9b:c6:ec:bf:93:9c:fb:c7:94:8a:0f:3c:20:c0:f3:7a:
84:04:4f:3f:1b:86:24:68:a3:69:34:7d:0b:de:55:48:e4:f4:
01:71:37:f4:23:bd:51:72:f4:10:a9:7b:16:83:89:3f:b5:b4:
78:2c:e7:22:49:92:84:b6:c3:35:d3:05:ed:a5:7c:8b:73:cc:
66:e5:40:18:a1:63:78:be:5d:e4:0a:9a:00:b8:0e:67:d2:c6:
80:c1:1d:5d:e0:37:dc:ac:51:63:31:ac:91:76:ce:60:dd:98:
6e:f7:3c:a3:f4:6e:8b:5b:97:ef:25:3a:a2:05:12:cd:c1:98:
15:99:dc:99:99:36:04:80:82:5f:89:27:4a:61:6e:b0:98:0c:
6b:e7:53:53:78:4a:52:82:f4:48:5f:9c:45:aa:f1:3e:04:1c:
5b:e7:79:e8:0c:19:82:b5:72:1d:43:e5:cb:34:79:74:d1:9a:
4c:ae:85:ee:00:31:d2:6d:b2:e3:9a:e9:c0:73:b7:6d:2b:45:
7b:d0:d0:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTSmPDURGkgw4RUYnF4AdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMTcyNDM5NTk5ZDdkYTUyNTc5Nzg5OWJmMjEzYjhlNjM1
NTQ5MTQwHhcNMjYwNzI3MDIwMDE2WhcNMjYwNzI4MDIwMDE2WjAzMTEwLwYDVQQD
EyhjNjM3NTZlZjBlYjRiMzVhZDFmN2U4N2YyOWRhOWY0OWY0OTNjMjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtejUi24gPGxTA602cwsSgMOiBPwh
Yaf4oS46rnQG21Bwl7h/eTM0Pm1+EIi2dqFuMQaHbvFcTSSIyGhdW355vUXNmCab
b6cfG01c5bjiyosANmZzD2LELG2jcZKoxoDEKZKDb6aM4Xe2SHUAtglJj5ehqGv9
V4aUMTAndy1REmTjB59l0NfzmwEXYs6yyH/XMW2B7pj4+5IQsSxhjyAa+Gb4W9mp
jNI52UpSnK9YrWALHTF+kHsS/Rqtnl+RQSXtPBuFiRrW/t18qFfHQIuTWoN0jlKo
xhRXjz6VSzA72b7M3ser8JyWo92FkTAEPltswXODzvZ9UrSBg5kgGIZNnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMY3Vu8OtLNa0ffofynan0n0k8I3MB8GA1UdIwQY
MBaAFD8XJDlZnX2lJXl4mb8hO45jVUkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85ZjlhYTktMDljMC00OGNjLWIwYTEt
ODg3MzMxZWZiNzE1LzEvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85ZjlhYTktMDljMC00OGNjLWIwYTEtODg3MzMxZWZiNzE1
LzEvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwGDU7Qk
w6Am2pp0aQFFQjFB7qQ5pb/EcUcumdi6+dV40dFaFZok0I1hdfjFhMM5NbrFFRz6
VBWbxuy/k5z7x5SKDzwgwPN6hARPPxuGJGijaTR9C95VSOT0AXE39CO9UXL0EKl7
FoOJP7W0eCznIkmShLbDNdMF7aV8i3PMZuVAGKFjeL5d5AqaALgOZ9LGgMEdXeA3
3KxRYzGskXbOYN2Ybvc8o/Rui1uX7yU6ogUSzcGYFZncmZk2BICCX4knSmFusJgM
a+dTU3hKUoL0SF+cRarxPgQcW+d56AwZgrVyHUPlyzR5dNGaTK6F7gAx0m2y45rp
wHO3bStFe9DQeg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:05:41 2026 by rpki-client