Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: +0HvGI0YUEzb7p7dZt9y6Y9L2+cEFFnZS3QwqsBE538=
Subject key identifier: 95:53:3C:01:66:7C:33:76:B5:BB:39:C0:30:26:E6:E5:A8:94:80:23
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 01A025E9C600EE26CCC8D378F6ADA6B5E82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 1A18
Signing time: Fri 21 Aug 2026 20:01:12 +0000
Manifest this update: Fri 21 Aug 2026 20:01:12 +0000
Manifest next update: Sat 22 Aug 2026 20:01:12 +0000
Files and hashes: 1: 1iRbLYf4C0y3oJ3-4xIANjl72wA.roa (hash: UG6S1kmkOsd5y0L7phKRaWuOG6F5o7BKD1/4AyWvM5A=)
2: JjyvVDVovIRDvh2WAPN4qcYKbB8.roa (hash: YWVGU0nc40f+duH6QOCC8OFDRM3GdOHIxFuAUo2EzwY=)
3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: LnrYCuNNNArBUHghzFa7AQLQ1pRDyyYRiNIkL+/U2DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:e9:c6:00:ee:26:cc:c8:d3:78:f6:ad:a6:b5:e8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Aug 21 20:01:12 2026 GMT
Not After : Aug 22 20:01:12 2026 GMT
Subject: CN=95533c01667c3376b5bb39c03026e6e5a8948023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:b8:fd:f9:5c:c4:06:36:c7:31:86:e1:80:
d3:f2:52:a5:56:85:b3:9e:2e:ab:32:14:fd:b7:53:
57:19:5c:53:07:5b:2e:cd:e9:cb:92:8f:9b:58:01:
84:6c:c3:55:83:69:db:57:64:4e:71:08:1a:6a:63:
a6:cf:ad:1c:f0:e1:2b:e9:b5:b3:2d:70:c8:06:45:
b0:3c:8b:76:cf:d7:26:c4:08:58:e1:b5:01:f6:7e:
07:34:cb:b7:c0:f9:c3:ff:91:d9:e3:bf:73:43:b1:
86:b5:90:9d:93:e5:a7:22:9c:47:3c:7b:b0:5a:64:
b6:eb:6a:d2:6f:84:39:7a:df:6a:3e:ac:13:f0:21:
7a:d3:6b:8f:57:c0:c0:33:dd:1a:91:72:b2:fe:b6:
f1:61:96:60:e5:6f:3a:4d:68:3d:f8:ed:86:a1:ab:
df:5a:3e:44:75:29:90:c0:08:9f:62:01:f6:67:42:
3f:53:5d:d8:53:8f:20:b0:a4:e6:b6:78:ba:9c:40:
b5:17:b4:a3:42:62:c1:b8:d6:85:ec:43:8b:b4:93:
b7:b7:17:6f:23:66:7b:62:84:a5:3c:75:48:6b:10:
00:72:fd:12:b7:27:ff:7d:d6:d1:d0:cc:b1:e6:0d:
5f:74:34:d1:8f:da:36:3f:5b:15:42:71:73:5f:fd:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:53:3C:01:66:7C:33:76:B5:BB:39:C0:30:26:E6:E5:A8:94:80:23
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:de:07:14:0c:a7:9a:e9:76:d5:08:2d:0b:2a:73:32:ce:df:
f7:a9:52:5b:08:98:ea:1a:47:bb:f6:da:48:33:8b:0f:73:b3:
a9:49:d3:64:d6:ea:53:35:b5:21:b0:60:e2:6e:05:32:aa:f1:
45:63:57:6b:62:d2:76:a4:10:31:7a:93:5f:63:5d:8b:8f:00:
58:5e:48:f7:66:87:df:54:71:01:1d:22:68:a5:7d:bb:7c:d0:
6c:56:10:9a:4a:70:b3:ca:d7:06:ec:f8:bd:97:5e:81:60:3d:
23:f0:c2:62:55:ab:1d:f5:07:a4:0e:62:c0:d6:dc:7c:8d:53:
8f:24:25:95:d1:bf:0b:dd:54:ed:b0:ba:a2:13:5e:03:d8:71:
0a:97:04:7d:d6:fd:e4:cd:a9:5d:b4:a6:0b:63:2c:4c:96:55:
fe:1b:26:9d:a3:e2:77:38:8f:ed:8b:7d:42:66:3f:41:f1:37:
50:85:c2:b8:e6:d5:4f:d6:8d:fc:61:ab:a3:88:b4:e1:f9:75:
9b:34:c0:60:fe:b1:77:a7:4b:52:fa:db:6b:81:27:74:fe:a0:
09:5c:ef:61:ce:1d:92:3f:69:c5:90:82:65:d5:bd:a8:54:c4:
9d:dc:7c:b2:a1:8d:1c:05:f1:e7:35:23:3c:16:37:c9:40:0c:
d3:aa:b7:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAl6cYA7ibMyNN49q2mtegsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZjMyNWVmNGNiYWE2NmNjNzFmZmNjNjg4MDg3N2U3NmUx
NDlhZmQwHhcNMjYwODIxMjAwMTEyWhcNMjYwODIyMjAwMTEyWjAzMTEwLwYDVQQD
Eyg5NTUzM2MwMTY2N2MzMzc2YjViYjM5YzAzMDI2ZTZlNWE4OTQ4MDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3S4/flcxAY2xzGG4YDT8lKlVoWz
ni6rMhT9t1NXGVxTB1suzenLko+bWAGEbMNVg2nbV2ROcQgaamOmz60c8OEr6bWz
LXDIBkWwPIt2z9cmxAhY4bUB9n4HNMu3wPnD/5HZ479zQ7GGtZCdk+WnIpxHPHuw
WmS262rSb4Q5et9qPqwT8CF602uPV8DAM90akXKy/rbxYZZg5W86TWg9+O2Goavf
Wj5EdSmQwAifYgH2Z0I/U13YU48gsKTmtni6nEC1F7SjQmLBuNaF7EOLtJO3txdv
I2Z7YoSlPHVIaxAAcv0Styf/fdbR0Myx5g1fdDTRj9o2P1sVQnFzX/2gNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVTPAFmfDN2tbs5wDAm5uWolIAjMB8GA1UdIwQY
MBaAFD7zJe9MuqZsxx/8xogId+duFJr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUt
MzRkNzE0ODVjNTQ3LzEvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUtMzRkNzE0ODVjNTQ3
LzEvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQN4HFAyn
mul21QgtCypzMs7f96lSWwiY6hpHu/baSDOLD3OzqUnTZNbqUzW1IbBg4m4FMqrx
RWNXa2LSdqQQMXqTX2Ndi48AWF5I92aH31RxAR0iaKV9u3zQbFYQmkpws8rXBuz4
vZdegWA9I/DCYlWrHfUHpA5iwNbcfI1TjyQlldG/C91U7bC6ohNeA9hxCpcEfdb9
5M2pXbSmC2MsTJZV/hsmnaPidziP7Yt9QmY/QfE3UIXCuObVT9aN/GGro4i04fl1
mzTAYP6xd6dLUvrba4EndP6gCVzvYc4dkj9pxZCCZdW9qFTEndx8sqGNHAXx5zUj
PBY3yUAM06q3hQ==
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:47 2026 by rpki-client