Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: cfCKRZ1NyGxAby2hhfHcySB7tI1YNwe3ya2bqREUsBU=
Subject key identifier: FB:71:32:2F:99:90:25:4A:33:5D:8E:08:4C:77:DE:5A:44:17:3D:9D
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 019EA864CFBF76CE04C2E3B194C036A54D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 194E
Signing time: Mon 08 Jun 2026 18:00:39 +0000
Manifest this update: Mon 08 Jun 2026 18:00:39 +0000
Manifest next update: Tue 09 Jun 2026 18:00:39 +0000
Files and hashes: 1: QPbL87CmRT1ll0u9cNfWuv1QlyA.roa (hash: 8Z1WQs/0Meh/R2Q6A9r9cYWb2lmAvHlCtOd8UxHsBvk=)
2: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: H69mdIGICUQVXUlCXCDH5wpVKVFJ/GU9QUo+yHu3xUM=)
3: zA-JAsK-5Dim3-SrX670VbjLnXQ.roa (hash: 8KB8obCvtfReso5cwgxqXrjE6TJfCW9MSYEyqCiQ9Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:64:cf:bf:76:ce:04:c2:e3:b1:94:c0:36:a5:4d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Jun 8 18:00:39 2026 GMT
Not After : Jun 9 18:00:39 2026 GMT
Subject: CN=fb71322f9990254a335d8e084c77de5a44173d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:cc:80:fb:37:33:8a:49:0c:58:bd:0b:f7:
10:cf:04:37:30:57:d5:b4:45:d9:7c:4d:19:b3:12:
d3:b9:9d:d1:fe:27:9d:33:e7:f4:f5:6b:2d:60:f7:
89:b6:ac:d4:d0:56:fc:ef:25:67:8b:b4:10:57:27:
49:9c:a6:42:33:ef:93:44:f2:c7:0e:2c:a2:1a:4e:
a2:c2:e3:39:67:a4:64:04:4c:f3:5c:e9:58:96:7e:
10:07:df:29:a6:4e:f8:41:38:06:4e:4d:d7:13:4b:
83:39:6f:54:2a:07:60:32:12:c5:ca:99:5d:42:6a:
c8:61:8a:1c:18:be:20:de:3c:cc:42:d3:b6:d0:c3:
78:a2:8c:12:3c:1b:8b:bf:cc:ce:6a:be:7d:0a:b0:
fa:cf:81:60:09:dd:7a:0e:e7:03:d0:4a:fc:00:35:
73:6e:82:ce:0a:bd:9f:e7:45:08:84:97:b6:4c:8b:
c6:13:af:bc:f8:f7:82:6f:49:f6:85:ea:ce:b6:42:
20:96:e9:6e:c5:42:a1:a2:6d:e9:48:8f:39:b1:10:
57:41:a3:65:51:03:a7:dd:50:04:a9:f0:e8:89:98:
68:4f:ee:28:3c:71:53:d0:58:c1:ab:fb:df:50:e1:
14:1d:4f:98:36:ea:5d:f6:01:80:0a:75:9c:c3:a3:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:71:32:2F:99:90:25:4A:33:5D:8E:08:4C:77:DE:5A:44:17:3D:9D
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b7:84:48:54:01:15:7d:3d:90:8b:c9:d7:06:f7:88:60:44:
69:df:6d:7c:3a:e8:c1:03:72:fb:62:7c:b3:2d:ed:ed:03:42:
99:72:37:08:78:6a:70:c9:ad:86:c9:67:4e:40:15:f9:5d:d8:
55:81:b6:c2:84:fb:d6:fc:b4:71:23:1b:7d:b5:f7:40:f5:13:
4b:8d:94:f5:32:35:2f:47:65:a4:b1:49:e6:8f:58:4f:f2:10:
6e:56:79:f1:9d:30:82:33:d6:75:b3:a1:82:eb:2b:be:7c:55:
f7:69:81:7d:34:3b:67:d5:5c:83:f4:4d:53:66:ee:f3:b3:b8:
b5:d2:a9:c7:3f:12:a5:91:3e:8a:16:60:43:e9:38:da:6b:cd:
2f:00:ad:a3:76:15:9f:c7:48:75:9b:8b:28:85:24:5e:42:3a:
c4:dd:a4:38:71:ae:cd:57:8d:c4:c7:e2:11:d3:f4:ad:7d:a4:
89:8d:07:b2:4e:ee:78:d8:50:78:d2:8d:18:da:01:df:84:d3:
6a:76:18:c2:31:03:74:89:f5:28:6a:bb:45:11:7d:ce:02:de:
e5:83:8f:a8:dc:1c:80:b2:7b:7b:2b:d1:1f:b9:81:00:20:53:
ed:2f:0e:c3:d3:c0:9c:39:e6:e2:6a:f5:94:1b:44:fc:f5:3a:
5a:ee:b9:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6oZM+/ds4EwuOxlMA2pU0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWFjODMyM2ViYjZiZTIwZmFlODlkMDk4Y2EyNDEzOGY4
YzkwMDUwHhcNMjYwNjA4MTgwMDM5WhcNMjYwNjA5MTgwMDM5WjAzMTEwLwYDVQQD
EyhmYjcxMzIyZjk5OTAyNTRhMzM1ZDhlMDg0Yzc3ZGU1YTQ0MTczZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeHMgPs3M4pJDFi9C/cQzwQ3MFfV
tEXZfE0ZsxLTuZ3R/iedM+f09WstYPeJtqzU0Fb87yVni7QQVydJnKZCM++TRPLH
DiyiGk6iwuM5Z6RkBEzzXOlYln4QB98ppk74QTgGTk3XE0uDOW9UKgdgMhLFypld
QmrIYYocGL4g3jzMQtO20MN4oowSPBuLv8zOar59CrD6z4FgCd16DucD0Er8ADVz
boLOCr2f50UIhJe2TIvGE6+8+PeCb0n2herOtkIgluluxUKhom3pSI85sRBXQaNl
UQOn3VAEqfDoiZhoT+4oPHFT0FjBq/vfUOEUHU+YNupd9gGACnWcw6ORKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtxMi+ZkCVKM12OCEx33lpEFz2dMB8GA1UdIwQY
MBaAFKWayDI+u2viD66J0JjKJBOPjJAFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgt
ODNhZTVkOWM4MzJmLzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgtODNhZTVkOWM4MzJm
LzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbeESFQB
FX09kIvJ1wb3iGBEad9tfDrowQNy+2J8sy3t7QNCmXI3CHhqcMmthslnTkAV+V3Y
VYG2woT71vy0cSMbfbX3QPUTS42U9TI1L0dlpLFJ5o9YT/IQblZ58Z0wgjPWdbOh
gusrvnxV92mBfTQ7Z9Vcg/RNU2bu87O4tdKpxz8SpZE+ihZgQ+k42mvNLwCto3YV
n8dIdZuLKIUkXkI6xN2kOHGuzVeNxMfiEdP0rX2kiY0Hsk7ueNhQeNKNGNoB34TT
anYYwjEDdIn1KGq7RRF9zgLe5YOPqNwcgLJ7eyvRH7mBACBT7S8Ow9PAnDnm4mr1
lBtE/PU6Wu65pg==
-----END CERTIFICATE-----
Generated at Tue Jun 9 03:25:57 2026 by rpki-client