Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
File: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft (raw, json)
Hash identifier: fVhdSNZEj0LnzAj6lE87jMlTeGJu5+ixiXICUYv38LQ=
Subject key identifier: FA:BC:78:89:6E:65:47:03:FE:1B:BF:7D:31:24:37:85:1F:D7:3D:24
Authority key identifier: A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
Certificate issuer: /CN=a4c9f067007684facca9be8ce02da4676c09972a
Certificate serial: 019F9EF182EFCCC62F8E9FF2A2046EE45116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
Manifest number: 0A04
Signing time: Sun 26 Jul 2026 15:00:55 +0000
Manifest this update: Sun 26 Jul 2026 15:00:55 +0000
Manifest next update: Mon 27 Jul 2026 15:00:55 +0000
Files and hashes: 1: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl (hash: /+cedCL02/X6gCUu0y6TTSx4GMrlddlV7Wel1TUfqBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:82:ef:cc:c6:2f:8e:9f:f2:a2:04:6e:e4:51:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c9f067007684facca9be8ce02da4676c09972a
Validity
Not Before: Jul 26 15:00:55 2026 GMT
Not After : Jul 27 15:00:55 2026 GMT
Subject: CN=fabc78896e654703fe1bbf7d312437851fd73d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:59:0b:c2:55:29:ef:08:2c:f2:17:97:e5:
19:da:50:29:1a:0d:08:8e:f3:52:fc:6f:03:8e:88:
10:74:c4:d4:1d:34:8f:e9:3c:aa:60:ec:c4:9f:18:
88:df:3a:0c:37:7c:a3:32:e9:80:e2:0c:c6:cd:c2:
dd:72:8a:1c:b7:61:80:71:47:b9:0a:d6:05:57:ef:
6c:5a:92:45:b4:65:e8:57:88:6b:2e:c6:43:d5:ac:
f8:e1:3d:63:95:53:b6:f3:95:13:66:cb:33:e4:19:
30:c9:18:da:7c:8a:62:f6:ae:5a:06:a5:2c:f0:db:
4e:69:f2:ee:3c:59:1a:f3:56:e1:b2:11:05:4b:44:
b1:10:ad:c3:f6:96:cc:f0:d9:47:32:3d:15:0d:e9:
09:43:e7:94:88:06:49:ee:31:fb:0d:ca:5e:c9:2b:
7a:9e:40:94:a4:7d:2c:38:af:fd:02:a4:21:6e:2d:
a2:84:cf:20:68:9a:5b:45:55:b2:44:81:2b:e7:d3:
dc:58:9d:ed:57:d0:50:ce:98:39:90:d9:cb:65:9b:
b4:18:34:54:ab:aa:f8:f6:e7:7e:a6:4f:2d:57:ce:
8e:1b:92:8d:af:54:5d:7d:3d:7a:14:1b:64:81:b6:
40:7d:4c:84:dd:0a:d3:35:bd:24:64:f4:d6:54:d5:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BC:78:89:6E:65:47:03:FE:1B:BF:7D:31:24:37:85:1F:D7:3D:24
X509v3 Authority Key Identifier:
keyid:A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ec:c2:0d:2d:cf:39:5c:8c:cb:eb:31:b4:a9:53:b6:6e:bc:
17:01:9d:09:f2:3d:7d:b7:fe:b8:b1:e6:f9:77:20:df:b2:0e:
e9:9b:1d:d6:8e:b8:75:3e:47:ea:ed:06:a3:0e:69:b1:fc:a6:
49:c8:51:ee:47:cf:2d:4e:cc:1a:85:b4:d3:65:2a:73:60:48:
92:53:07:7f:2e:a3:c7:59:3d:31:e8:87:8d:06:a8:f0:10:2b:
67:34:d4:fa:f5:31:50:21:a3:d5:54:34:e6:1e:f3:d8:f5:8f:
3d:2b:85:a1:e9:a9:35:7c:c4:dd:0b:0d:73:1c:fb:88:6b:c3:
04:77:0f:0f:43:b2:fa:58:30:16:1c:23:3f:ac:d7:6a:81:cc:
57:65:23:23:e8:db:91:b8:4f:8a:ec:bc:bf:4e:15:63:f3:71:
e2:64:26:87:7b:16:3f:b5:24:20:bd:ad:da:0a:07:23:4f:94:
b7:00:89:3b:12:29:2a:ab:6b:4c:07:d4:d4:bc:13:bc:36:54:
0c:46:ac:9e:b4:99:ab:ee:9a:0e:a4:8f:68:f4:ed:e2:b7:40:
c2:c3:ad:19:f1:de:a6:59:70:21:ba:c6:82:07:41:d2:a2:a7:
cc:08:dd:7a:84:65:37:a4:ce:0a:ce:5b:2b:48:d6:5d:27:91:
9d:b4:e6:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+e8YLvzMYvjp/yogRu5FEWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YzlmMDY3MDA3Njg0ZmFjY2E5YmU4Y2UwMmRhNDY3NmMw
OTk3MmEwHhcNMjYwNzI2MTUwMDU1WhcNMjYwNzI3MTUwMDU1WjAzMTEwLwYDVQQD
EyhmYWJjNzg4OTZlNjU0NzAzZmUxYmJmN2QzMTI0Mzc4NTFmZDczZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuadZC8JVKe8ILPIXl+UZ2lApGg0I
jvNS/G8DjogQdMTUHTSP6TyqYOzEnxiI3zoMN3yjMumA4gzGzcLdcooct2GAcUe5
CtYFV+9sWpJFtGXoV4hrLsZD1az44T1jlVO285UTZssz5BkwyRjafIpi9q5aBqUs
8NtOafLuPFka81bhshEFS0SxEK3D9pbM8NlHMj0VDekJQ+eUiAZJ7jH7DcpeySt6
nkCUpH0sOK/9AqQhbi2ihM8gaJpbRVWyRIEr59PcWJ3tV9BQzpg5kNnLZZu0GDRU
q6r49ud+pk8tV86OG5KNr1RdfT16FBtkgbZAfUyE3QrTNb0kZPTWVNXpKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPq8eIluZUcD/hu/fTEkN4Uf1z0kMB8GA1UdIwQY
MBaAFKTJ8GcAdoT6zKm+jOAtpGdsCZcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE1ud1p3QjJoUHJNcWI2TTRDMmtaMndKbHlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jZjFkODMtMTlmYS00MGM0LTg1NDMt
NTExYWFjZWI4OTAwLzEvcE1ud1p3QjJoUHJNcWI2TTRDMmtaMndKbHlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jZjFkODMtMTlmYS00MGM0LTg1NDMtNTExYWFjZWI4OTAw
LzEvcE1ud1p3QjJoUHJNcWI2TTRDMmtaMndKbHlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+zCDS3P
OVyMy+sxtKlTtm68FwGdCfI9fbf+uLHm+Xcg37IO6Zsd1o64dT5H6u0Gow5psfym
SchR7kfPLU7MGoW002Uqc2BIklMHfy6jx1k9MeiHjQao8BArZzTU+vUxUCGj1VQ0
5h7z2PWPPSuFoempNXzE3QsNcxz7iGvDBHcPD0Oy+lgwFhwjP6zXaoHMV2UjI+jb
kbhPiuy8v04VY/Nx4mQmh3sWP7UkIL2t2goHI0+UtwCJOxIpKqtrTAfU1LwTvDZU
DEasnrSZq+6aDqSPaPTt4rdAwsOtGfHepllwIbrGggdB0qKnzAjdeoRlN6TOCs5b
K0jWXSeRnbTmnA==
-----END CERTIFICATE-----
Generated at Sun Jul 26 22:39:13 2026 by rpki-client