Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier: NRAO+Mo7u6kfCT/An056ozvNTEqt1VERzRwducUkNyY=
Subject key identifier: AC:DD:06:40:46:89:DC:64:C4:E3:38:22:54:0E:77:8D:84:DF:4C:6E
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 019DCFAC40C7D56E37C3E6F7847B45272E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number: 18E4
Signing time: Mon 27 Apr 2026 16:01:05 +0000
Manifest this update: Mon 27 Apr 2026 16:01:05 +0000
Manifest next update: Tue 28 Apr 2026 16:01:05 +0000
Files and hashes: 1: 6tyXfV2-VjQvcpv87Kt9vE6HFzw.roa (hash: A154uIVBWW18JX5P8xttoUSBJ4YcDPO4IGCdrwKK67Q=)
2: 7UycSOA2fNBupvFy-hFdJV1v7Io.roa (hash: 5kwOqNqNs3Py67MnZDjj6z2WyhVaijv3n26KPo38psM=)
3: EUznPNdi1RBuO_YCf9akt2u9WRY.roa (hash: LZ23fGDWAJm3pcS6NWs5vwLClCe20PqadqZJEm5+Myk=)
4: VHAZMRbuJy6K49Zh7bvrBNs8QHU.asa (hash: erFKugp76cbDaqZL6jbZ+AatD/saCuONTcWq0wMAJBI=)
5: arHeDdPCjS_AVATAetTx45LL1Dk.roa (hash: wzrmHuwOdDJUETKg+nffMJxHljjlvyXkAo4P+Hrjp2w=)
6: gugoFb8q0SHtyIBkY0PLePdn0z4.roa (hash: PfJgvUjin+qon9RPc3E2cAaH5BLLpJd7HD9BJAEBX68=)
7: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: IIHlw5VqhNycMUzLuoS098Ft6CJ+kMUceD9lDFXj2BY=)
8: xoRDajz4eJy11O_J5fLAv4U4v9E.roa (hash: CkGw0sLJe5mjxRbSsZKMcGEgfVdDoPyOYU+L3J4izT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:40:c7:d5:6e:37:c3:e6:f7:84:7b:45:27:2e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Apr 27 16:01:05 2026 GMT
Not After : Apr 28 16:01:05 2026 GMT
Subject: CN=acdd06404689dc64c4e33822540e778d84df4c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7b:c3:3a:20:e4:c6:20:22:19:8f:c5:e8:8d:
27:e1:78:ab:73:6c:ae:b4:ab:c2:c6:c6:0f:da:5b:
eb:a1:ff:bd:9b:46:df:85:01:33:54:86:d4:0b:dd:
68:ca:a8:77:16:1b:66:be:1b:f3:34:db:f1:54:38:
2b:e7:24:54:e2:65:cb:35:9b:10:61:61:97:6f:a2:
4d:1c:2a:68:54:69:cf:37:75:b8:6b:4e:29:53:4d:
96:99:b0:92:d0:25:d6:7e:a5:6b:2d:7f:d4:13:ec:
56:05:71:61:2b:bb:07:31:98:f9:c4:af:7a:66:e7:
ef:f8:d0:56:b5:11:46:67:77:97:8a:cc:ba:03:d1:
72:ac:7f:14:10:66:81:97:f4:97:b4:8c:76:f4:ae:
6c:05:6e:eb:32:65:28:18:23:f5:27:1d:6b:74:cd:
ae:1a:60:42:1c:75:ce:0d:b8:20:5f:54:56:1a:04:
0b:a8:14:7e:9c:21:6c:c1:38:cb:e6:9b:20:94:ca:
8f:eb:43:d0:1f:8b:5f:2a:17:e5:9a:0f:8c:91:54:
8e:f7:3a:46:3f:93:1e:ef:d8:3e:25:6d:c3:f6:16:
3d:b7:76:16:5f:5c:f1:61:7d:20:9f:ff:3d:91:c1:
42:d4:72:a1:e1:0f:81:69:da:5d:ab:f1:7a:be:04:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DD:06:40:46:89:DC:64:C4:E3:38:22:54:0E:77:8D:84:DF:4C:6E
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5e:a7:46:b9:0c:96:f9:cc:dd:fa:be:7b:7a:64:a4:bf:97:
3b:e7:68:8a:c3:f5:d0:4c:f2:8f:11:87:45:94:84:a9:f2:30:
9a:8f:8a:2a:d9:33:e1:73:34:8a:57:88:82:75:6d:ed:88:19:
b8:a2:90:4f:19:69:0d:e5:74:fd:c7:6a:94:de:78:cb:3a:83:
ff:34:62:db:08:d0:d7:85:4a:5e:84:22:80:d6:1b:43:ac:9e:
4b:32:0e:63:9c:f0:2c:bd:45:50:8b:24:c6:27:da:8e:69:2b:
31:a7:92:d3:3c:54:f4:bb:d2:1c:8c:6c:b2:f2:bc:64:04:fa:
62:b8:3b:36:65:c5:d4:cf:c6:1f:a4:ff:d0:76:db:6f:b5:9d:
f5:55:b5:77:17:4d:8c:2b:b9:52:ad:05:63:4e:69:74:f9:da:
1c:36:01:cd:14:15:50:e5:29:7b:c9:be:e7:16:f3:71:ad:a4:
99:6c:a4:68:1f:0c:3b:c0:43:9d:72:ab:76:c6:a8:ce:94:08:
bc:e1:a8:51:0e:48:a6:fc:4a:c2:8d:de:ea:5f:59:db:64:e6:
44:13:82:fe:1b:c7:76:29:e5:39:f3:ad:ac:f8:33:cd:65:ef:
1a:a1:21:43:4f:4e:15:c0:59:1c:c7:49:5f:df:dd:d8:64:10:
11:79:ab:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PrEDH1W43w+b3hHtFJy49MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTk5MDNkYWI4NWY2YTU5NzcyYjNlZGZkNGJmMGU0OTFh
ZjU3YzQwHhcNMjYwNDI3MTYwMTA1WhcNMjYwNDI4MTYwMTA1WjAzMTEwLwYDVQQD
EyhhY2RkMDY0MDQ2ODlkYzY0YzRlMzM4MjI1NDBlNzc4ZDg0ZGY0YzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nvDOiDkxiAiGY/F6I0n4Xirc2yu
tKvCxsYP2lvrof+9m0bfhQEzVIbUC91oyqh3FhtmvhvzNNvxVDgr5yRU4mXLNZsQ
YWGXb6JNHCpoVGnPN3W4a04pU02WmbCS0CXWfqVrLX/UE+xWBXFhK7sHMZj5xK96
Zufv+NBWtRFGZ3eXisy6A9FyrH8UEGaBl/SXtIx29K5sBW7rMmUoGCP1Jx1rdM2u
GmBCHHXODbggX1RWGgQLqBR+nCFswTjL5psglMqP60PQH4tfKhflmg+MkVSO9zpG
P5Me79g+JW3D9hY9t3YWX1zxYX0gn/89kcFC1HKh4Q+Badpdq/F6vgSmlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzdBkBGidxkxOM4IlQOd42E30xuMB8GA1UdIwQY
MBaAFKSZkD2rhfall3Kz7f1L8OSRr1fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQt
NTdlYzEyZTg2NDFlLzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQtNTdlYzEyZTg2NDFl
LzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG16nRrkM
lvnM3fq+e3pkpL+XO+doisP10EzyjxGHRZSEqfIwmo+KKtkz4XM0ileIgnVt7YgZ
uKKQTxlpDeV0/cdqlN54yzqD/zRi2wjQ14VKXoQigNYbQ6yeSzIOY5zwLL1FUIsk
xifajmkrMaeS0zxU9LvSHIxssvK8ZAT6Yrg7NmXF1M/GH6T/0Hbbb7Wd9VW1dxdN
jCu5Uq0FY05pdPnaHDYBzRQVUOUpe8m+5xbzca2kmWykaB8MO8BDnXKrdsaozpQI
vOGoUQ5IpvxKwo3e6l9Z22TmRBOC/hvHdinlOfOtrPgzzWXvGqEhQ09OFcBZHMdJ
X9/d2GQQEXmrmQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:50:02 2026 by rpki-client