Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: OJwrX1ZexkI25yAkMtlNu1YBb/L/Bz8XJYqE5BMw028=
Subject key identifier: D7:12:CE:21:0B:56:C9:52:8C:2D:08:98:F7:26:B3:92:E2:E7:40:62
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 019DCD187D31631029CDC23F0E76F143EF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 04:00:27 +0000
Manifest this update: Mon 27 Apr 2026 04:00:27 +0000
Manifest next update: Tue 28 Apr 2026 04:00:27 +0000
Files and hashes: 1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: 0b6JZeYHXqMwLCEGK6EhTGH1o9qVBXnTwdYHeU66mfM=)
3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:18:7d:31:63:10:29:cd:c2:3f:0e:76:f1:43:ef:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Apr 27 04:00:27 2026 GMT
Not After : Apr 28 04:00:27 2026 GMT
Subject: CN=d712ce210b56c9528c2d0898f726b392e2e74062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d6:7f:6b:82:a8:a2:af:8c:47:4c:6a:d4:c9:
f5:d6:a8:31:a6:6d:dc:c0:7f:81:47:d8:81:38:37:
5e:c0:98:50:b8:28:27:28:35:2a:66:9a:a5:7e:dd:
af:03:40:a4:8e:19:a7:7c:c7:a5:85:56:b0:75:b7:
51:45:d8:99:01:27:2e:b8:9e:84:a5:6d:72:1e:96:
7c:01:bc:f5:fb:84:cd:cd:f1:cf:9b:65:e8:2a:6c:
a6:29:21:03:ee:0e:f9:2b:96:b9:41:24:8a:74:c9:
0c:f9:ab:82:a1:22:85:b9:89:78:79:d3:8e:a2:ba:
75:fb:c3:80:5d:d8:a0:f2:e7:ec:c4:1d:d2:c2:81:
1f:ad:c5:a3:8d:0b:69:bb:35:3f:35:4d:26:3f:1a:
54:62:8c:df:c1:92:53:fe:df:e0:6a:1d:06:9e:6d:
1b:c7:e3:72:ca:93:48:39:21:2c:51:79:25:13:af:
a3:94:07:8c:c7:4e:c5:6b:6e:11:30:60:7f:b7:25:
74:dd:95:f0:6a:f3:90:a8:d7:e1:93:fc:cb:95:4f:
ce:a6:7a:27:28:3f:34:0a:3a:0d:1f:9c:a0:65:32:
1d:a9:f9:89:fa:bf:3b:4f:6a:60:9d:ee:4d:35:81:
6d:4d:e7:1c:36:04:c2:3d:c2:43:54:d8:5f:6d:47:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:12:CE:21:0B:56:C9:52:8C:2D:08:98:F7:26:B3:92:E2:E7:40:62
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7d:c5:03:b0:e2:0e:ed:a5:d3:b3:91:2b:da:03:7d:fa:ad:
ee:78:14:06:25:da:db:37:08:8d:95:8e:e5:fc:11:6c:e1:5d:
e1:db:c2:26:3d:7b:9b:0d:01:77:86:10:09:a0:31:94:f2:0b:
b7:39:7a:6b:15:8f:fd:db:c0:a9:31:98:b1:c8:fe:2b:93:38:
60:04:11:3d:df:e5:e1:fc:32:41:12:77:5d:df:67:5d:49:de:
45:9c:af:c5:49:33:7c:d0:4a:94:84:1b:a4:70:a1:a5:36:9e:
8c:3d:ef:e7:f6:f0:2c:ea:15:29:cb:28:01:3f:29:02:5d:e1:
e3:9a:02:e2:31:2e:36:82:74:77:d6:5d:c9:8a:00:06:e4:c7:
75:0a:c4:16:cb:f6:f4:4b:1f:88:8e:47:3f:48:9b:bc:fa:a7:
93:56:4b:04:7b:45:cb:1d:ab:7f:1b:e7:1e:9a:ad:21:31:0f:
13:6b:7b:18:9e:85:bd:0f:7a:02:45:5f:89:51:1c:59:e3:62:
ac:71:fa:ef:6b:0a:65:da:a4:23:0f:6d:f7:a4:f8:6d:6c:b3:
c4:04:58:8b:34:11:37:a7:0a:69:e1:ec:e3:f8:bb:57:45:8b:
36:d1:b7:eb:41:67:0d:0b:8e:1b:08:a1:86:19:65:91:ec:96:
ae:cf:d4:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NGH0xYxApzcI/DnbxQ++HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzVkNDlkZWQyMDU2NmNhNzQ1YzI4ZjgwY2ZkOWE5MmY0
YjdkNDcwHhcNMjYwNDI3MDQwMDI3WhcNMjYwNDI4MDQwMDI3WjAzMTEwLwYDVQQD
EyhkNzEyY2UyMTBiNTZjOTUyOGMyZDA4OThmNzI2YjM5MmUyZTc0MDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtZ/a4Kooq+MR0xq1Mn11qgxpm3c
wH+BR9iBODdewJhQuCgnKDUqZpqlft2vA0CkjhmnfMelhVawdbdRRdiZAScuuJ6E
pW1yHpZ8Abz1+4TNzfHPm2XoKmymKSED7g75K5a5QSSKdMkM+auCoSKFuYl4edOO
orp1+8OAXdig8ufsxB3SwoEfrcWjjQtpuzU/NU0mPxpUYozfwZJT/t/gah0Gnm0b
x+NyypNIOSEsUXklE6+jlAeMx07Fa24RMGB/tyV03ZXwavOQqNfhk/zLlU/Opnon
KD80CjoNH5ygZTIdqfmJ+r87T2pgne5NNYFtTeccNgTCPcJDVNhfbUcxbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcSziELVslSjC0ImPcms5Li50BiMB8GA1UdIwQY
MBaAFD511J3tIFZsp0XCj4DP2akvS31HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2Qt
ODM2Mzg0NzVkOGFiLzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2QtODM2Mzg0NzVkOGFi
LzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN33FA7Di
Du2l07ORK9oDffqt7ngUBiXa2zcIjZWO5fwRbOFd4dvCJj17mw0Bd4YQCaAxlPIL
tzl6axWP/dvAqTGYscj+K5M4YAQRPd/l4fwyQRJ3Xd9nXUneRZyvxUkzfNBKlIQb
pHChpTaejD3v5/bwLOoVKcsoAT8pAl3h45oC4jEuNoJ0d9ZdyYoABuTHdQrEFsv2
9EsfiI5HP0ibvPqnk1ZLBHtFyx2rfxvnHpqtITEPE2t7GJ6FvQ96AkVfiVEcWeNi
rHH672sKZdqkIw9t96T4bWyzxARYizQRN6cKaeHs4/i7V0WLNtG360FnDQuOGwih
hhllkeyWrs/UZQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:11 2026 by rpki-client