Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
File: PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft (raw, json)
Hash identifier: eIQzVSGQlVlFgP42z+ThqIbPeok3aFjN+KdUsPmt2rQ=
Subject key identifier: A7:C6:41:45:CC:A0:E0:D9:1A:AA:48:FD:22:1D:76:41:36:02:A8:54
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial: 019E2BF0CCFC6B5FEC4E6F24C431BBC51E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
Manifest number: 1918
Signing time: Fri 15 May 2026 14:01:01 +0000
Manifest this update: Fri 15 May 2026 14:01:01 +0000
Manifest next update: Sat 16 May 2026 14:01:01 +0000
Files and hashes: 1: PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl (hash: tvYu/yafdUFKZUtW/hJEjZi0RM0F/eBil+GyBp6NAYU=)
2: QHHv-lGS27dlf_Kcr4moiCURb3g.roa (hash: Lcy2JaAZZjozQ94TOOqc21SM3JNpF1vrI2NkHkiFmLY=)
3: gKrLEMKKBPn76EAbd2e67fa8nlA.roa (hash: 2MR02OlNV98WA7eo7V/sklDPjIr74dUCdC13yh8HK9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:f0:cc:fc:6b:5f:ec:4e:6f:24:c4:31:bb:c5:1e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
Validity
Not Before: May 15 14:01:01 2026 GMT
Not After : May 16 14:01:01 2026 GMT
Subject: CN=a7c64145cca0e0d91aaa48fd221d76413602a854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:c3:b0:cf:13:d2:0f:75:6e:10:c9:3d:28:
33:d0:84:df:b8:38:b9:79:e4:02:7a:67:4d:06:14:
2f:ae:61:51:0c:7d:55:82:61:b9:ab:e0:59:ac:09:
d2:75:06:b2:dc:9b:ed:3f:57:95:f5:54:51:05:2e:
42:7a:89:d3:44:de:82:e8:c7:b0:43:a4:a4:72:5c:
cc:18:90:ac:f2:d4:c0:1d:57:1b:29:a1:94:98:a8:
ce:ae:b2:75:3d:10:ab:f4:59:32:2c:de:08:29:3c:
0d:c1:9b:ce:0d:89:6f:e6:6b:67:54:13:44:1a:c2:
7f:87:8b:29:02:5f:05:dc:c2:8e:d5:df:92:ab:d7:
86:e3:94:2b:81:11:35:8d:86:23:a9:50:eb:2d:47:
13:5c:8b:7d:02:48:5d:76:b3:f2:c4:e5:8e:58:28:
ab:36:1c:b2:c0:d5:1a:24:33:5c:38:20:66:e4:17:
51:8b:00:8e:10:ad:fc:d5:71:fd:75:04:5d:15:54:
f1:14:8d:97:ee:7c:b2:cc:c0:c1:d5:53:42:49:6b:
c7:d7:37:00:74:37:c2:fa:a4:bf:e6:90:9d:35:37:
60:9b:3d:62:38:bb:9d:f6:cb:d3:74:8b:7e:28:95:
0c:2d:3f:4c:29:ea:86:9e:ce:be:b8:06:4a:0e:99:
d7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C6:41:45:CC:A0:E0:D9:1A:AA:48:FD:22:1D:76:41:36:02:A8:54
X509v3 Authority Key Identifier:
keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6d:77:f5:22:8f:cb:70:d9:40:cb:f0:71:7f:8f:bb:09:3e:
23:12:41:07:75:b5:cf:7f:a9:96:03:01:6a:af:05:c7:d9:75:
0a:6c:c8:53:fe:02:ea:a0:7c:78:a1:23:72:c5:54:9f:71:bb:
70:b6:d8:34:49:47:72:ec:95:b2:e1:1a:de:cd:2a:8d:e2:6e:
99:86:ae:81:0f:5e:5c:d6:c2:17:60:47:f3:99:75:6e:b3:2f:
ff:ac:7f:7c:94:f1:f8:1a:20:5b:fe:54:a5:d8:68:41:3b:ae:
a1:40:d0:e5:f8:ad:9f:ef:aa:54:14:e8:9e:b0:db:40:18:4b:
cf:76:b0:7f:6e:4a:8f:7b:e3:dd:c5:aa:78:27:9e:d2:fe:7a:
39:eb:25:5d:8c:8c:73:4f:9a:a5:f9:45:52:ae:75:8b:75:39:
5f:a6:30:9d:c0:65:ee:25:11:72:db:b0:ef:96:5b:04:ce:19:
49:02:1c:9d:02:f2:1f:9d:65:25:d0:80:54:28:e8:45:68:16:
52:2a:49:f5:a0:2a:9c:08:58:9a:7b:ee:a6:96:d2:07:e9:d4:
50:ec:8a:ec:33:01:ed:59:69:87:42:a4:76:14:b2:38:bd:f8:
98:ec:7a:41:d1:35:05:39:d5:32:e7:52:de:36:0f:05:61:53:
df:92:bd:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4r8Mz8a1/sTm8kxDG7xR5wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMTc3YjUyODA0M2E4NTk1M2ZjMjUwZjk5MWQ5ZDgwMjBl
MjgxMGQwHhcNMjYwNTE1MTQwMTAxWhcNMjYwNTE2MTQwMTAxWjAzMTEwLwYDVQQD
EyhhN2M2NDE0NWNjYTBlMGQ5MWFhYTQ4ZmQyMjFkNzY0MTM2MDJhODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx/DsM8T0g91bhDJPSgz0ITfuDi5
eeQCemdNBhQvrmFRDH1VgmG5q+BZrAnSdQay3JvtP1eV9VRRBS5CeonTRN6C6Mew
Q6SkclzMGJCs8tTAHVcbKaGUmKjOrrJ1PRCr9FkyLN4IKTwNwZvODYlv5mtnVBNE
GsJ/h4spAl8F3MKO1d+Sq9eG45QrgRE1jYYjqVDrLUcTXIt9AkhddrPyxOWOWCir
NhyywNUaJDNcOCBm5BdRiwCOEK381XH9dQRdFVTxFI2X7nyyzMDB1VNCSWvH1zcA
dDfC+qS/5pCdNTdgmz1iOLud9svTdIt+KJUMLT9MKeqGns6+uAZKDpnX+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfGQUXMoODZGqpI/SIddkE2AqhUMB8GA1UdIwQY
MBaAFDwXe1KAQ6hZU/wlD5kdnYAg4oENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZWQ1MjUtM2YzNy00YzcwLWEyZWMt
YTQxNTFiNWUyZmNmLzEvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81ZWQ1MjUtM2YzNy00YzcwLWEyZWMtYTQxNTFiNWUyZmNm
LzEvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEm139SKP
y3DZQMvwcX+Puwk+IxJBB3W1z3+plgMBaq8Fx9l1CmzIU/4C6qB8eKEjcsVUn3G7
cLbYNElHcuyVsuEa3s0qjeJumYaugQ9eXNbCF2BH85l1brMv/6x/fJTx+BogW/5U
pdhoQTuuoUDQ5fitn++qVBTonrDbQBhLz3awf25Kj3vj3cWqeCee0v56OeslXYyM
c0+apflFUq51i3U5X6YwncBl7iURctuw75ZbBM4ZSQIcnQLyH51lJdCAVCjoRWgW
UipJ9aAqnAhYmnvuppbSB+nUUOyK7DMB7Vlph0KkdhSyOL34mOx6QdE1BTnVMudS
3jYPBWFT35K9DQ==
-----END CERTIFICATE-----
Generated at Fri May 15 18:38:36 2026 by rpki-client