Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
File: pPAKrld-dFH4jqYEv2ozc0zQMAk.mft (raw, json)
Hash identifier: 9UE4guEX22aHt3p/3hj4fSS4T4lJ0qWBDS61M15PtJY=
Subject key identifier: 34:94:31:EE:E7:71:B7:3A:4F:B1:96:CC:AD:40:CD:19:B5:B8:CF:E4
Authority key identifier: A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
Certificate issuer: /CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Certificate serial: 01A1871B1BD9B974C6DF2FDBAC434F5AD636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
Manifest number: 1329
Signing time: Thu 29 Oct 2026 10:01:03 +0000
Manifest this update: Thu 29 Oct 2026 10:01:03 +0000
Manifest next update: Fri 30 Oct 2026 10:01:03 +0000
Files and hashes: 1: pPAKrld-dFH4jqYEv2ozc0zQMAk.crl (hash: d/Lf74/4MZooeHqUraqqd8MC+CFzeXS7RJW9aateD0g=)
2: wCMCzmGItEBLiq2zhCPR7XIYkCc.roa (hash: nQv2a3Px/0ZD2/O010YD46BOn/AzS13ORg3ozlLVCtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:1b:1b:d9:b9:74:c6:df:2f:db:ac:43:4f:5a:d6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Validity
Not Before: Oct 29 10:01:03 2026 GMT
Not After : Oct 30 10:01:03 2026 GMT
Subject: CN=349431eee771b73a4fb196ccad40cd19b5b8cfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:d1:19:e2:4f:04:2a:87:01:f1:ff:b5:29:
1a:41:f1:00:11:69:5d:a8:9c:33:69:42:0a:14:3b:
37:b2:71:b4:8f:43:03:81:bb:2b:0e:b8:bd:6c:f6:
d7:4a:39:51:ec:cc:13:9f:fd:e1:bf:19:e4:e8:9d:
f0:52:42:7f:26:b5:66:f9:9f:66:72:c0:67:58:fb:
3d:60:2c:8d:e7:41:7f:ed:15:54:68:a0:2f:33:ab:
99:8b:55:4d:aa:8b:e0:c1:c3:ec:18:69:ef:cc:43:
fc:c4:e2:c0:0f:b8:c2:95:19:62:44:3b:77:94:f0:
cc:c5:2d:29:a6:44:86:c5:68:26:66:72:56:41:0b:
2b:8e:f9:7f:67:be:a9:75:d0:33:26:06:88:d7:f8:
64:bf:bb:cc:28:fb:f8:13:62:0e:8b:f8:fd:6b:29:
4c:71:7e:ad:90:84:84:a2:05:e7:40:91:6b:7f:09:
41:c3:72:b0:8e:5b:91:8b:64:15:52:5a:0e:43:be:
1a:a1:ff:93:2a:af:74:18:8a:ed:b2:0b:85:ca:bd:
d9:3b:10:f3:88:63:8a:ba:2b:4a:6f:78:50:a7:e1:
de:f1:04:56:82:ff:50:a8:6e:c8:93:95:5c:7c:87:
39:0b:fe:51:29:92:ac:28:43:0f:07:91:08:14:7c:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:94:31:EE:E7:71:B7:3A:4F:B1:96:CC:AD:40:CD:19:B5:B8:CF:E4
X509v3 Authority Key Identifier:
keyid:A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ab:ad:5a:c7:8e:e5:e5:98:38:a7:11:47:a2:15:71:05:46:
4f:7e:9f:f6:f9:74:47:a0:db:3f:df:e1:52:79:67:47:8c:5a:
72:ea:99:c0:a3:1c:3a:2b:b0:db:19:97:ba:bf:8e:bd:17:fd:
13:95:20:fe:1a:07:ba:f0:0d:26:93:fd:02:6c:54:35:6e:20:
0f:11:c7:55:40:72:4b:0c:83:e3:93:42:ea:f7:d7:bd:97:3e:
6f:d1:a0:5a:6e:81:28:9c:5b:27:1c:1b:6e:aa:9d:81:6f:84:
17:61:5a:db:df:59:75:f0:31:4e:ef:53:df:58:41:82:c1:b1:
b7:c2:0e:b2:9b:de:0c:7e:bd:c7:f7:26:79:6d:ac:17:f2:a2:
b4:fc:3c:14:0c:1d:33:b0:5a:07:49:b0:34:e1:bc:b2:1a:32:
e2:39:ad:1d:8a:74:7a:9c:34:b6:75:e3:79:c1:4a:a6:58:d6:
79:17:2c:d7:2d:8d:e8:9d:43:60:8c:25:10:6a:d4:ea:7f:80:
aa:94:53:eb:2b:ed:77:32:21:0d:b1:23:23:1b:7b:38:81:9e:
13:e5:76:80:71:8c:3a:d3:d7:ca:c3:63:f3:ff:ff:11:0b:d7:
03:8c:0e:b4:af:bb:2f:56:5a:81:ef:ba:55:2e:d6:7a:3e:d4:
40:32:ff:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGHGxvZuXTG3y/brENPWtY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjAwYWFlNTc3ZTc0NTFmODhlYTYwNGJmNmEzMzczNGNk
MDMwMDkwHhcNMjYxMDI5MTAwMTAzWhcNMjYxMDMwMTAwMTAzWjAzMTEwLwYDVQQD
EygzNDk0MzFlZWU3NzFiNzNhNGZiMTk2Y2NhZDQwY2QxOWI1YjhjZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIPRGeJPBCqHAfH/tSkaQfEAEWld
qJwzaUIKFDs3snG0j0MDgbsrDri9bPbXSjlR7MwTn/3hvxnk6J3wUkJ/JrVm+Z9m
csBnWPs9YCyN50F/7RVUaKAvM6uZi1VNqovgwcPsGGnvzEP8xOLAD7jClRliRDt3
lPDMxS0ppkSGxWgmZnJWQQsrjvl/Z76pddAzJgaI1/hkv7vMKPv4E2IOi/j9aylM
cX6tkISEogXnQJFrfwlBw3KwjluRi2QVUloOQ74aof+TKq90GIrtsguFyr3ZOxDz
iGOKuitKb3hQp+He8QRWgv9QqG7Ik5VcfIc5C/5RKZKsKEMPB5EIFHwlgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSUMe7ncbc6T7GWzK1AzRm1uM/kMB8GA1UdIwQY
MBaAFKTwCq5XfnRR+I6mBL9qM3NM0DAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBBS3JsZC1kRkg0anFZRXYyb3pjMHpRTUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81OGE5NGEtOWUyOC00N2E1LTlmZDYt
OWM5MWIxYzUxNThhLzEvcFBBS3JsZC1kRkg0anFZRXYyb3pjMHpRTUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi81OGE5NGEtOWUyOC00N2E1LTlmZDYtOWM5MWIxYzUxNThh
LzEvcFBBS3JsZC1kRkg0anFZRXYyb3pjMHpRTUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqutWseO
5eWYOKcRR6IVcQVGT36f9vl0R6DbP9/hUnlnR4xacuqZwKMcOiuw2xmXur+OvRf9
E5Ug/hoHuvANJpP9AmxUNW4gDxHHVUBySwyD45NC6vfXvZc+b9GgWm6BKJxbJxwb
bqqdgW+EF2Fa299ZdfAxTu9T31hBgsGxt8IOspveDH69x/cmeW2sF/KitPw8FAwd
M7BaB0mwNOG8shoy4jmtHYp0epw0tnXjecFKpljWeRcs1y2N6J1DYIwlEGrU6n+A
qpRT6yvtdzIhDbEjIxt7OIGeE+V2gHGMOtPXysNj8///EQvXA4wOtK+7L1Zage+6
VS7Wej7UQDL/Mw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 18:15:40 2026 by rpki-client