Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: HYVkQu7RaD5pldHjOHbrcidURIrCcIqKstirTqMvTY0=
Subject key identifier: E8:79:9E:A6:95:3D:54:96:35:D5:AD:A4:6C:47:76:3E:27:F6:D9:38
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 019E8DC99FC441A833B3CF0A002113DD15BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 1943
Signing time: Wed 03 Jun 2026 14:01:01 +0000
Manifest this update: Wed 03 Jun 2026 14:01:01 +0000
Manifest next update: Thu 04 Jun 2026 14:01:01 +0000
Files and hashes: 1: WCuXL5bdayCD-yg2u5cxoFH2Qss.roa (hash: fzizFDGzIYB7cPC/5AvExyYCWu5OSdpEHrHOTtkH4kY=)
2: odGmnWHV8DvWoy1JIU0WX6KSpRQ.roa (hash: KVh++uKmrCKdQJxhd1HSXSf6Faxjd8tG0oNOioQCVgk=)
3: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: B/dgKObsiA7OMsyfI6+CUw3zWfiPjL5yMm2UOKI+yg0=)
4: rHP4WUAqcSQvgCZtg8_htfcNuko.roa (hash: Mb29TkYRCVH9g/5FuCaCpqq3Nrrav/iSJCN1hGSFHTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:c9:9f:c4:41:a8:33:b3:cf:0a:00:21:13:dd:15:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Jun 3 14:01:01 2026 GMT
Not After : Jun 4 14:01:01 2026 GMT
Subject: CN=e8799ea6953d549635d5ada46c47763e27f6d938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:2b:f5:94:5f:7c:b9:3f:91:4d:78:91:fb:
e4:c0:6b:c9:e3:70:cd:fa:39:14:a4:39:d9:59:be:
3a:0e:50:3c:1d:dc:98:e7:fc:5b:e3:03:d7:2b:5b:
8d:dd:92:e5:b2:f3:7a:91:31:60:34:c4:88:8a:49:
00:7d:5c:26:7b:b3:98:51:f2:70:0a:2b:c6:26:86:
00:f5:f1:47:20:73:f7:56:b8:db:9b:8a:26:05:80:
d7:02:3d:0e:d6:81:1b:bf:c2:27:de:53:05:c6:7d:
b9:b7:24:11:6f:b9:1b:d7:71:6d:a6:c1:be:a2:32:
3c:2b:40:0d:ac:ac:bc:87:db:85:a9:2c:15:49:a1:
30:c0:48:0a:92:a1:11:4f:cc:f5:7c:1b:4a:b7:5e:
23:ff:71:fc:76:4a:d6:b5:8d:3f:4e:f5:dd:29:6a:
ca:cf:9b:31:66:70:17:03:d0:3d:54:dc:5f:de:ab:
aa:c8:e3:c9:55:b4:98:dc:6b:90:d9:92:7c:b0:46:
fa:13:1c:c1:d3:a7:22:33:c2:98:fd:ab:98:5a:a7:
37:fe:c0:d0:78:f8:76:89:d5:8c:c7:8a:27:f6:79:
61:f9:68:55:21:8e:4b:99:d7:15:30:8e:31:76:17:
da:95:b3:cb:bb:c9:4d:5a:b2:43:e6:79:27:e0:fb:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:79:9E:A6:95:3D:54:96:35:D5:AD:A4:6C:47:76:3E:27:F6:D9:38
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:04:10:1e:a0:e2:6b:1e:68:9c:46:10:33:1a:80:b9:45:cc:
dd:d3:bf:42:8f:ee:0b:0a:5a:9d:37:b8:93:2f:01:bd:63:c8:
e7:2f:b4:55:2b:8c:c4:0a:5d:cc:fa:cf:ce:8f:65:2b:4c:39:
ba:56:27:92:7e:58:0d:f3:d2:09:b8:ad:1c:97:3f:23:7a:28:
54:39:a0:22:99:5a:5f:af:fe:2d:ab:c7:4e:67:11:6d:17:98:
56:fd:56:90:95:f1:52:2d:a6:f6:e6:33:e8:66:73:50:9e:9a:
04:02:09:a0:eb:90:5f:ed:94:c3:e3:bd:5d:60:40:8e:1a:09:
5d:27:a0:94:bf:9a:77:7f:49:b1:ab:09:7a:df:6d:ff:82:c5:
da:7f:f1:ea:8c:35:b2:42:4a:6d:88:2f:55:2b:83:55:ce:c4:
0a:be:77:d4:5b:ca:00:c1:ff:7f:c5:9e:9f:cf:17:6d:4b:2f:
40:26:f0:57:7d:fa:d0:31:8b:db:60:4d:6f:21:de:4b:9e:1a:
e0:d6:66:9a:f4:01:4a:5b:48:41:03:a1:cb:04:1f:90:d3:8c:
de:61:e3:38:ee:45:72:da:78:76:f5:34:7f:4d:6b:83:2b:80:
1b:c6:1d:b0:33:ac:ec:92:c4:34:07:6e:3d:37:0b:62:63:5c:
c4:f6:6f:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6NyZ/EQagzs88KACET3RW7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZDAyOWYyYzMyMWFkYjU5ZWNhNWZjYTU3YTFlYjliZGY1
MzFkNmEwHhcNMjYwNjAzMTQwMTAxWhcNMjYwNjA0MTQwMTAxWjAzMTEwLwYDVQQD
EyhlODc5OWVhNjk1M2Q1NDk2MzVkNWFkYTQ2YzQ3NzYzZTI3ZjZkOTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrcr9ZRffLk/kU14kfvkwGvJ43DN
+jkUpDnZWb46DlA8HdyY5/xb4wPXK1uN3ZLlsvN6kTFgNMSIikkAfVwme7OYUfJw
CivGJoYA9fFHIHP3Vrjbm4omBYDXAj0O1oEbv8In3lMFxn25tyQRb7kb13FtpsG+
ojI8K0ANrKy8h9uFqSwVSaEwwEgKkqERT8z1fBtKt14j/3H8dkrWtY0/TvXdKWrK
z5sxZnAXA9A9VNxf3quqyOPJVbSY3GuQ2ZJ8sEb6ExzB06ciM8KY/auYWqc3/sDQ
ePh2idWMx4on9nlh+WhVIY5LmdcVMI4xdhfalbPLu8lNWrJD5nkn4Pv4BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOh5nqaVPVSWNdWtpGxHdj4n9tk4MB8GA1UdIwQY
MBaAFKTQKfLDIa21nspfyleh65vfUx1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDct
OGFkNmZmYjI2MTdkLzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDctOGFkNmZmYjI2MTdk
LzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQQQHqDi
ax5onEYQMxqAuUXM3dO/Qo/uCwpanTe4ky8BvWPI5y+0VSuMxApdzPrPzo9lK0w5
ulYnkn5YDfPSCbitHJc/I3ooVDmgIplaX6/+LavHTmcRbReYVv1WkJXxUi2m9uYz
6GZzUJ6aBAIJoOuQX+2Uw+O9XWBAjhoJXSeglL+ad39JsasJet9t/4LF2n/x6ow1
skJKbYgvVSuDVc7ECr531FvKAMH/f8Wen88XbUsvQCbwV3360DGL22BNbyHeS54a
4NZmmvQBSltIQQOhywQfkNOM3mHjOO5Fctp4dvU0f01rgyuAG8YdsDOs7JLENAdu
PTcLYmNcxPZvag==
-----END CERTIFICATE-----
Generated at Wed Jun 3 23:03:58 2026 by rpki-client