Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier: e8ma12+NOgXq51GYZzYkfgyNCdLZ1TU0wC0OORfQ4kg=
Subject key identifier: DF:24:B0:98:77:33:BB:9D:B2:F6:11:C0:F3:FB:A4:F1:2B:2A:4C:03
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 01A11D1A39BDA84177C4CD77796C8CC4ACAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number: 042E
Signing time: Thu 08 Oct 2026 20:00:20 +0000
Manifest this update: Thu 08 Oct 2026 20:00:20 +0000
Manifest next update: Fri 09 Oct 2026 20:00:20 +0000
Files and hashes: 1: jYQejTs_VCB1cpCr7qrPeVI5_VI.roa (hash: RuEfXGQ8FdYs+It13SdSHwiFRFM5ZGec+HI06Kuq/Ik=)
2: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: HA2mlH4+LMrBQWWFQCdrS2VUbhs2obWimJYcn3o1Mww=)
3: sIQZHyrMKrx0aGLhGaxyLwG43WI.roa (hash: 1DHs9q3U0NDHbbr1v8UvKlsFj4sQc1jDRLQRmJtbDIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:1a:39:bd:a8:41:77:c4:cd:77:79:6c:8c:c4:ac:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: Oct 8 20:00:20 2026 GMT
Not After : Oct 9 20:00:20 2026 GMT
Subject: CN=df24b0987733bb9db2f611c0f3fba4f12b2a4c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:b6:fd:f0:83:a5:1b:97:9b:4d:ce:90:47:
c2:a6:34:f2:31:a0:02:41:db:86:f4:9a:07:1b:31:
bc:e7:1b:22:2a:6b:64:59:4b:1c:6f:3e:9d:a8:c6:
cd:d4:1e:50:46:a7:34:d5:76:d7:74:27:ea:94:1b:
40:35:b1:0c:23:26:1e:de:f3:49:91:a5:c7:2c:92:
f4:f1:bc:04:5b:90:46:ea:ea:42:d6:44:13:f0:50:
05:72:e3:bb:0a:93:7b:aa:80:a0:98:b1:28:bd:c3:
4c:ab:1f:cc:80:c4:60:02:73:f4:21:23:04:dc:2c:
d9:fb:fb:73:5d:d2:2f:7a:82:2a:61:06:e9:1a:9e:
a3:8c:ad:c8:f2:b6:6b:cb:5c:9c:82:4e:77:55:bb:
fe:b9:7f:91:ac:b0:3d:66:8c:e9:0c:c8:aa:af:16:
29:1b:1a:36:b5:f6:39:b4:c5:64:dd:91:b2:f7:75:
6e:e1:56:3c:41:95:23:79:76:5d:e7:57:1b:74:cf:
ac:ed:f6:19:94:7f:29:24:3e:2b:4f:70:fe:bf:79:
af:e8:ef:a7:21:56:66:e6:bb:2f:0e:67:fc:21:4e:
2b:06:49:5d:ab:7d:ea:20:bd:81:cc:20:87:c7:f1:
1f:59:2a:b9:38:9f:f2:6d:57:75:c1:a6:b4:78:4d:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:24:B0:98:77:33:BB:9D:B2:F6:11:C0:F3:FB:A4:F1:2B:2A:4C:03
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:98:20:3a:0f:1c:88:fe:f7:dc:d1:39:03:36:36:5b:7c:ba:
f0:55:b7:33:90:68:82:fe:ef:8c:4a:f6:c0:1e:58:fc:6d:71:
71:7d:41:e6:a8:0b:cf:cd:8f:45:6b:74:d2:43:5e:06:0f:c1:
24:72:a9:e4:82:4e:99:c5:bd:a7:29:17:51:03:d7:86:57:21:
fe:54:3f:32:d4:7e:41:17:f4:64:0b:9e:48:5f:62:2a:f8:ef:
5c:2d:09:7f:af:00:8a:40:0e:6e:24:28:27:a4:e2:ba:65:30:
b3:2c:ff:c5:7a:47:bf:39:c4:45:25:cf:c7:80:a7:a7:c1:bb:
5c:dd:7c:67:d5:45:8f:b3:e8:ac:27:fe:19:0c:0f:27:14:04:
ce:d6:a1:15:dc:b3:0b:7b:42:3b:08:72:b4:b3:6e:0e:6e:9f:
86:de:69:5b:b5:94:4f:ed:05:d7:ea:4b:e5:42:50:c5:e6:eb:
76:4c:0c:03:2c:43:a8:90:51:97:22:7c:b0:5c:40:21:d9:19:
6c:f5:3f:43:a0:7c:63:a5:24:3c:49:22:7a:b3:e0:ac:f8:84:
cc:da:02:a0:aa:7c:cc:7d:87:de:50:57:5b:25:52:af:42:f2:
12:ee:79:9d:2c:2e:a2:b4:80:3b:78:13:fd:a8:78:25:1a:d8:
3b:ae:42:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEdGjm9qEF3xM13eWyMxKyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjZkNjU3YzBmYTIxODI4ZDMxMzUwNzM1NGRlYzE0ODE1
ODBlZDYwHhcNMjYxMDA4MjAwMDIwWhcNMjYxMDA5MjAwMDIwWjAzMTEwLwYDVQQD
EyhkZjI0YjA5ODc3MzNiYjlkYjJmNjExYzBmM2ZiYTRmMTJiMmE0YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7S2/fCDpRuXm03OkEfCpjTyMaAC
QduG9JoHGzG85xsiKmtkWUscbz6dqMbN1B5QRqc01XbXdCfqlBtANbEMIyYe3vNJ
kaXHLJL08bwEW5BG6upC1kQT8FAFcuO7CpN7qoCgmLEovcNMqx/MgMRgAnP0ISME
3CzZ+/tzXdIveoIqYQbpGp6jjK3I8rZry1ycgk53Vbv+uX+RrLA9ZozpDMiqrxYp
Gxo2tfY5tMVk3ZGy93Vu4VY8QZUjeXZd51cbdM+s7fYZlH8pJD4rT3D+v3mv6O+n
IVZm5rsvDmf8IU4rBkldq33qIL2BzCCHx/EfWSq5OJ/ybVd1waa0eE1sXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8ksJh3M7udsvYRwPP7pPErKkwDMB8GA1UdIwQY
MBaAFKT21lfA+iGCjTE1BzVN7BSBWA7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYt
NWMyNzYzNjQ4ZjFjLzEvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYtNWMyNzYzNjQ4ZjFj
LzEvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZggOg8c
iP733NE5AzY2W3y68FW3M5Bogv7vjEr2wB5Y/G1xcX1B5qgLz82PRWt00kNeBg/B
JHKp5IJOmcW9pykXUQPXhlch/lQ/MtR+QRf0ZAueSF9iKvjvXC0Jf68AikAObiQo
J6TiumUwsyz/xXpHvznERSXPx4Cnp8G7XN18Z9VFj7PorCf+GQwPJxQEztahFdyz
C3tCOwhytLNuDm6fht5pW7WUT+0F1+pL5UJQxebrdkwMAyxDqJBRlyJ8sFxAIdkZ
bPU/Q6B8Y6UkPEkierPgrPiEzNoCoKp8zH2H3lBXWyVSr0LyEu55nSwuorSAO3gT
/ah4JRrYO65CTw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 02:12:05 2026 by rpki-client