Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: i5IuKCm5z14mr4ngQs5L6lYYLu/NSvkzjSP42GcZv2s=
Subject key identifier: D2:15:52:93:29:19:2F:FA:5B:E7:9D:64:27:DD:47:24:C2:D0:04:60
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019F9EBAC33204E143E92A1A4310442C1040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 140E
Signing time: Sun 26 Jul 2026 14:01:07 +0000
Manifest this update: Sun 26 Jul 2026 14:01:07 +0000
Manifest next update: Mon 27 Jul 2026 14:01:07 +0000
Files and hashes: 1: Owu-o7JvEybmXtpQNjtKXjhH9ug.roa (hash: 89sGeUxvhpVypElkHwSDvmrZnRJHBtaKeL9yMz7nC6U=)
2: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: KYSxnBYyHScEarJvtwEC/Iy06CSoDWoKa20W0V7YCGc=)
3: _b_jh41DtvYlyJbVt2vmUxy_03c.roa (hash: Y4f7kKKKelGhsZykUm6x2Et6p6M+4yMQNJ8fkfC21Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:ba:c3:32:04:e1:43:e9:2a:1a:43:10:44:2c:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Jul 26 14:01:07 2026 GMT
Not After : Jul 27 14:01:07 2026 GMT
Subject: CN=d215529329192ffa5be79d6427dd4724c2d00460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:48:37:1d:40:50:0d:29:41:54:0f:12:91:34:
ca:f4:86:14:71:11:1e:30:41:e4:31:1d:27:19:1d:
d4:f3:5d:4b:12:4d:45:56:b3:e5:21:64:bc:10:06:
43:76:49:35:3d:68:14:b2:73:54:b8:a6:45:65:5c:
0e:a6:4e:ce:33:41:da:34:d3:45:4f:8c:ee:b3:95:
ad:bf:16:f2:a5:2b:34:7d:b8:e8:32:19:6e:f5:c6:
f5:50:0d:f0:f3:72:94:9c:f1:48:60:08:02:aa:a7:
70:2c:b0:99:a4:02:c9:da:b5:c1:ce:f2:5b:4f:13:
9a:ea:cb:55:31:70:71:50:e9:2e:11:47:0e:51:44:
da:ea:56:de:0a:64:86:06:09:37:45:b3:3e:5a:b0:
ae:41:b1:62:7f:9e:18:c4:0a:9d:20:2f:c2:f3:cf:
a5:11:a0:49:f5:37:5e:1d:66:7d:8c:45:97:a3:bb:
b3:28:57:88:4b:4a:e9:ad:9e:49:29:09:25:dd:ad:
9e:89:46:ff:4b:e0:62:dc:01:99:f3:72:e9:b0:42:
1b:86:21:4e:a7:01:f4:46:1d:fc:01:b5:8a:6f:33:
ee:01:1d:e7:a9:2d:4b:93:b5:76:ee:51:c3:6c:e1:
63:cc:80:9b:7c:1e:95:91:6e:61:e5:e3:91:60:3a:
f9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:15:52:93:29:19:2F:FA:5B:E7:9D:64:27:DD:47:24:C2:D0:04:60
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ec:fb:e8:58:28:5f:e4:5f:a9:59:24:ae:75:7e:e8:70:43:
08:94:60:bb:29:6a:b6:2c:46:d8:05:ad:6b:30:07:84:bc:c6:
93:e9:8d:2b:b5:b4:b0:7f:a6:a8:6e:56:fc:a6:89:1c:20:f2:
6f:6a:21:2d:a7:c7:56:53:b6:5e:6c:17:50:7b:d2:b0:f4:d6:
3a:49:2b:8a:9c:18:a9:39:f2:f1:93:63:5f:6e:e2:f6:ae:e3:
4d:bc:fa:f7:9b:f3:e5:20:e0:27:02:e7:99:8e:1f:47:d0:b4:
20:a8:1f:65:5b:10:83:57:71:0a:8b:50:5b:a2:3c:5c:c2:41:
b5:91:a7:a0:10:d2:c6:e3:69:14:69:3d:5a:02:0e:9d:a8:34:
f7:d5:ab:c0:f1:f7:86:93:04:f8:4d:38:6b:24:45:60:30:0c:
75:6c:3f:2f:31:d1:af:75:6b:3e:b7:60:4a:8d:6c:67:95:25:
ab:f8:43:bb:03:61:dd:46:30:bd:7f:e1:d7:b7:c5:66:31:2f:
e6:36:c8:5f:1f:8c:4a:c2:f2:6f:cc:1c:e1:5f:9b:61:a9:6c:
ac:27:0d:a6:5f:3b:c8:c5:b6:17:66:19:e6:39:0a:18:d5:10:
77:11:4d:53:06:6d:e0:80:59:05:ce:85:f4:cf:24:fc:02:4a:
91:ab:80:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+eusMyBOFD6SoaQxBELBBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZmEyOTM2OGM4YmU2OWM4ZWRkNWFhMTkzNTU3ZmNiYTJh
NTdlYzgwHhcNMjYwNzI2MTQwMTA3WhcNMjYwNzI3MTQwMTA3WjAzMTEwLwYDVQQD
EyhkMjE1NTI5MzI5MTkyZmZhNWJlNzlkNjQyN2RkNDcyNGMyZDAwNDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEg3HUBQDSlBVA8SkTTK9IYUcREe
MEHkMR0nGR3U811LEk1FVrPlIWS8EAZDdkk1PWgUsnNUuKZFZVwOpk7OM0HaNNNF
T4zus5WtvxbypSs0fbjoMhlu9cb1UA3w83KUnPFIYAgCqqdwLLCZpALJ2rXBzvJb
TxOa6stVMXBxUOkuEUcOUUTa6lbeCmSGBgk3RbM+WrCuQbFif54YxAqdIC/C88+l
EaBJ9TdeHWZ9jEWXo7uzKFeIS0rprZ5JKQkl3a2eiUb/S+Bi3AGZ83LpsEIbhiFO
pwH0Rh38AbWKbzPuAR3nqS1Lk7V27lHDbOFjzICbfB6VkW5h5eORYDr50wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIVUpMpGS/6W+edZCfdRyTC0ARgMB8GA1UdIwQY
MBaAFD36KTaMi+acjt1aoZNVf8uipX7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODkt
YmQ1OGQwMDIxYTA5LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODktYmQ1OGQwMDIxYTA5
LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOz76Fgo
X+RfqVkkrnV+6HBDCJRguylqtixG2AWtazAHhLzGk+mNK7W0sH+mqG5W/KaJHCDy
b2ohLafHVlO2XmwXUHvSsPTWOkkripwYqTny8ZNjX27i9q7jTbz695vz5SDgJwLn
mY4fR9C0IKgfZVsQg1dxCotQW6I8XMJBtZGnoBDSxuNpFGk9WgIOnag099WrwPH3
hpME+E04ayRFYDAMdWw/LzHRr3VrPrdgSo1sZ5Ulq/hDuwNh3UYwvX/h17fFZjEv
5jbIXx+MSsLyb8wc4V+bYalsrCcNpl87yMW2F2YZ5jkKGNUQdxFNUwZt4IBZBc6F
9M8k/AJKkauAHg==
-----END CERTIFICATE-----
Generated at Sun Jul 26 15:52:01 2026 by rpki-client