Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: AxfoM2oNAGZ07immSuHEYKUNyrwF60H+Yb21JEwJQLA=
Subject key identifier: 07:AC:0A:69:D5:A5:9E:B7:2C:AE:7B:35:10:90:C9:EF:6A:8D:AD:E1
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 01A15364EA513CDA1EBAD577D8C30FBCD4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 0D32
Signing time: Mon 19 Oct 2026 09:01:24 +0000
Manifest this update: Mon 19 Oct 2026 09:01:24 +0000
Manifest next update: Tue 20 Oct 2026 09:01:24 +0000
Files and hashes: 1: 6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa (hash: wpsN0tsYTVD9eZ1wIkFPmbb5yPxiazJ0MhFoB9FJQW4=)
2: DR9MoQCYtXaLoml4Dm1_5qJwPs4.roa (hash: nXlN3VKxLNyqdBBXWDPV2SzM6R5K4D1KJpMD50qdg/A=)
3: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: 3aVU99A8hUcdGDIaSC/fkWgS745YL0uTa5rRUGDb/Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:64:ea:51:3c:da:1e:ba:d5:77:d8:c3:0f:bc:d4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Oct 19 09:01:24 2026 GMT
Not After : Oct 20 09:01:24 2026 GMT
Subject: CN=07ac0a69d5a59eb72cae7b351090c9ef6a8dade1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:fe:95:31:2f:fd:71:9c:cc:b1:bc:d4:13:
1c:48:bd:dc:d3:ab:c7:b7:e6:23:97:b8:f2:f7:ec:
03:05:1e:a1:f5:b7:ee:f3:28:51:8e:b9:1a:da:c3:
be:fb:5e:1b:22:54:81:42:05:cd:17:b8:3b:2d:0a:
1a:4d:79:c8:1e:43:19:8a:26:f4:37:36:ad:6d:e5:
5c:c3:0c:3b:e1:4d:63:75:ee:7d:fb:85:af:88:f0:
22:e5:d6:9e:8f:0d:cc:ad:6d:da:13:bc:2a:9f:55:
65:23:42:19:cd:a3:95:a4:00:e9:46:a8:23:ea:a4:
6e:9c:58:e7:f1:cf:02:3d:84:5b:bb:15:91:8d:43:
65:13:69:5a:bd:4a:37:46:18:20:e1:35:d7:2e:b6:
50:c0:e0:7f:b7:07:f2:08:c8:c8:80:c3:89:0c:58:
26:0e:8f:3e:68:fd:ce:e4:7b:b4:07:27:05:1f:df:
e4:e9:d2:a4:10:b4:88:d1:c9:57:85:58:10:de:50:
99:cb:2d:dd:72:b0:a5:b0:82:5c:61:55:14:eb:de:
53:73:87:72:d7:f3:2e:ce:13:e9:c8:a3:76:af:e5:
b5:5a:28:5b:ab:6a:03:2e:67:6a:5c:59:f1:4f:5b:
10:a8:32:09:10:ad:5d:fd:43:a4:2d:2f:4a:dc:10:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:0A:69:D5:A5:9E:B7:2C:AE:7B:35:10:90:C9:EF:6A:8D:AD:E1
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3e:5a:6e:28:73:ac:73:d2:49:b2:68:8f:02:ee:1f:bf:8e:
b1:8c:eb:7a:43:ec:a0:08:5e:3d:d2:30:08:45:a4:ae:39:83:
88:00:e0:59:5d:ff:d4:26:7a:99:72:e5:3e:69:27:e9:86:58:
1a:a3:d8:87:de:65:d0:3f:e4:b7:0b:e0:c4:50:2b:60:8f:b0:
0c:2c:3e:00:31:a4:f4:0e:73:88:7a:36:96:7d:e8:b4:10:84:
c7:23:bc:42:cb:2c:d8:d0:7d:85:53:56:26:f9:5c:83:18:84:
81:26:a1:0c:49:b1:d4:08:a0:37:a2:a8:26:98:e8:ce:fc:fa:
04:99:a0:58:a6:59:fb:6a:fe:b3:53:18:db:f8:d6:9d:9c:8c:
06:ba:4a:1b:74:a2:28:a2:c9:bf:55:6a:79:0f:e7:d9:b6:1f:
15:dd:68:c4:46:0e:c9:43:e1:8f:27:3e:c5:d8:39:f2:ca:5a:
c3:32:3f:25:eb:8b:6f:9b:44:64:e1:7f:06:cf:46:01:fb:93:
66:bf:7d:4f:95:c6:ea:ad:ca:01:de:36:e1:97:08:bf:4a:a7:
bc:8f:3f:b0:8d:45:5d:2c:ee:2b:46:37:a4:e4:15:09:99:11:
da:5b:b6:61:fc:f3:db:13:3e:20:47:73:68:36:b7:05:9e:0b:
3d:72:d6:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFTZOpRPNoeutV32MMPvNTHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZGUyNDcwYzg1NjM5NDk0ODdhM2U3ODc0M2M1NDRjOTll
YzhhNjQwHhcNMjYxMDE5MDkwMTI0WhcNMjYxMDIwMDkwMTI0WjAzMTEwLwYDVQQD
EygwN2FjMGE2OWQ1YTU5ZWI3MmNhZTdiMzUxMDkwYzllZjZhOGRhZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXv+lTEv/XGczLG81BMcSL3c06vH
t+Yjl7jy9+wDBR6h9bfu8yhRjrka2sO++14bIlSBQgXNF7g7LQoaTXnIHkMZiib0
NzatbeVcwww74U1jde59+4WviPAi5daejw3MrW3aE7wqn1VlI0IZzaOVpADpRqgj
6qRunFjn8c8CPYRbuxWRjUNlE2lavUo3Rhgg4TXXLrZQwOB/twfyCMjIgMOJDFgm
Do8+aP3O5Hu0BycFH9/k6dKkELSI0clXhVgQ3lCZyy3dcrClsIJcYVUU695Tc4dy
1/MuzhPpyKN2r+W1Wihbq2oDLmdqXFnxT1sQqDIJEK1d/UOkLS9K3BC8cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAesCmnVpZ63LK57NRCQye9qja3hMB8GA1UdIwQY
MBaAFDzeJHDIVjlJSHo+eHQ8VEyZ7IpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUt
NDQxNzFiMmY1OTllLzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUtNDQxNzFiMmY1OTll
LzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUT5abihz
rHPSSbJojwLuH7+OsYzrekPsoAhePdIwCEWkrjmDiADgWV3/1CZ6mXLlPmkn6YZY
GqPYh95l0D/ktwvgxFArYI+wDCw+ADGk9A5ziHo2ln3otBCExyO8Qsss2NB9hVNW
JvlcgxiEgSahDEmx1AigN6KoJpjozvz6BJmgWKZZ+2r+s1MY2/jWnZyMBrpKG3Si
KKLJv1VqeQ/n2bYfFd1oxEYOyUPhjyc+xdg58spawzI/JeuLb5tEZOF/Bs9GAfuT
Zr99T5XG6q3KAd424ZcIv0qnvI8/sI1FXSzuK0Y3pOQVCZkR2lu2Yfzz2xM+IEdz
aDa3BZ4LPXLW1g==
-----END CERTIFICATE-----
Generated at Mon Oct 19 14:27:48 2026 by rpki-client