Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: 1ueakvqHy1gMU+d4AWzMe1epzCXA9LEULYGI1JrXIaQ=
Subject key identifier: 18:DE:87:E1:E1:BA:01:E0:9A:4E:0A:F7:A1:D0:1D:84:1C:19:86:5E
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 019E9B177188858FC00216C1BA9C976AEEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 137E
Signing time: Sat 06 Jun 2026 04:01:05 +0000
Manifest this update: Sat 06 Jun 2026 04:01:05 +0000
Manifest next update: Sun 07 Jun 2026 04:01:05 +0000
Files and hashes: 1: N4Y10Ua1e6-XUNgoamRd4hJuHM0.roa (hash: u/ttBIhtxAmlNbTBEOD7s6FeOeykOPEDDbaJasWKOp8=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: ac01ETf49hP2VptqaQZ5KO7e/VLcPwR80UGoZSadW3U=)
3: P7s6SkBNrB3yuV7739uVskU8ZG8.roa (hash: ZmJidlTbaMdMKLRXvEzc/VS03klVrtlteUmPhSejjJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:17:71:88:85:8f:c0:02:16:c1:ba:9c:97:6a:ee:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Jun 6 04:01:05 2026 GMT
Not After : Jun 7 04:01:05 2026 GMT
Subject: CN=18de87e1e1ba01e09a4e0af7a1d01d841c19865e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:2b:72:ce:b0:7b:9b:82:dc:2d:a1:14:53:
c9:84:8e:d0:0d:66:fe:02:6d:5b:e0:40:96:eb:7c:
28:f8:92:82:9e:32:71:f5:21:7c:8a:c8:02:36:12:
ad:45:e3:6f:6e:2e:32:35:eb:c3:3a:29:9f:11:15:
f2:71:1f:94:45:31:eb:28:b0:1f:86:51:89:bf:47:
ec:e0:4f:c0:30:81:e7:4f:8d:4f:27:72:8b:19:46:
94:5f:22:df:8f:ff:0c:6f:d5:51:34:a2:2b:4f:af:
ba:95:d0:74:35:19:1e:88:29:72:84:8c:fd:10:da:
19:c2:46:01:bf:49:d5:70:f5:87:78:5d:6a:19:3c:
c3:42:62:3b:8b:39:13:f9:15:f1:83:ba:9a:8f:64:
6d:29:50:f8:90:1d:af:1f:fc:fa:36:36:62:cf:99:
78:39:44:81:dc:7f:f0:9b:77:20:84:c8:61:ed:58:
db:a8:26:aa:eb:55:00:ad:57:06:ab:ee:fd:ec:43:
09:d8:65:f7:11:bd:bd:d9:38:43:e0:7f:fc:c6:e4:
92:fa:f1:3e:a7:8b:95:8d:c7:67:06:44:97:88:e8:
b2:99:49:1f:01:14:f2:61:49:67:18:37:ca:10:96:
5e:09:25:47:42:34:5e:63:53:35:5f:af:eb:83:68:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DE:87:E1:E1:BA:01:E0:9A:4E:0A:F7:A1:D0:1D:84:1C:19:86:5E
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3c:dd:f1:cb:3c:78:1f:53:60:a9:05:b9:32:78:db:80:09:
6f:b1:2f:46:5a:e0:8f:11:ab:77:aa:bc:e1:87:fc:1c:14:78:
1f:bb:50:4c:2a:d0:70:8f:64:24:15:ca:70:5c:df:d8:ae:15:
c8:63:a6:c0:b3:b2:8a:a8:3a:8c:ab:5a:47:50:8e:b6:22:f1:
54:8a:8e:bd:80:d6:13:1f:a2:94:36:c3:30:44:13:92:dc:3d:
02:c4:14:38:67:dc:c3:45:fb:cb:fc:1f:8f:d6:c1:df:3b:a9:
6e:d0:f8:1d:25:97:f0:57:35:53:dc:9e:21:7e:0a:34:6f:ca:
1c:05:69:d7:ad:a6:32:fb:a1:b0:a3:1e:8c:84:39:29:93:2d:
73:d3:c7:ec:de:55:0b:0b:1b:d8:d5:a3:f9:26:22:38:5d:66:
ee:26:71:60:d6:87:40:ab:e3:31:db:39:89:b9:48:f6:10:d8:
84:81:67:82:97:0a:68:e6:5a:d0:98:c0:ae:f9:2c:33:5a:65:
94:95:2e:b4:03:c3:66:e0:8c:aa:cb:82:dc:7a:b5:d1:79:90:
e9:19:e1:87:7e:f0:69:e4:92:49:f3:5e:f6:16:16:05:35:40:
72:80:83:30:64:71:5d:33:20:0a:ae:4b:36:fc:19:b9:72:99:
b4:72:f6:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bF3GIhY/AAhbBupyXau7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOTY3MDNmMzBlMjA5OWEzZDkwMDZiZmE4NGU1YzZjNDg2
YThkMmUwHhcNMjYwNjA2MDQwMTA1WhcNMjYwNjA3MDQwMTA1WjAzMTEwLwYDVQQD
EygxOGRlODdlMWUxYmEwMWUwOWE0ZTBhZjdhMWQwMWQ4NDFjMTk4NjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5t0rcs6we5uC3C2hFFPJhI7QDWb+
Am1b4ECW63wo+JKCnjJx9SF8isgCNhKtReNvbi4yNevDOimfERXycR+URTHrKLAf
hlGJv0fs4E/AMIHnT41PJ3KLGUaUXyLfj/8Mb9VRNKIrT6+6ldB0NRkeiClyhIz9
ENoZwkYBv0nVcPWHeF1qGTzDQmI7izkT+RXxg7qaj2RtKVD4kB2vH/z6NjZiz5l4
OUSB3H/wm3cghMhh7VjbqCaq61UArVcGq+797EMJ2GX3Eb292ThD4H/8xuSS+vE+
p4uVjcdnBkSXiOiymUkfARTyYUlnGDfKEJZeCSVHQjReY1M1X6/rg2haNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjeh+HhugHgmk4K96HQHYQcGYZeMB8GA1UdIwQY
MBaAFD+WcD8w4gmaPZAGv6hOXGxIao0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4Nzkt
OTMzN2YzNzQxNjhlLzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4NzktOTMzN2YzNzQxNjhl
LzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzzd8cs8
eB9TYKkFuTJ424AJb7EvRlrgjxGrd6q84Yf8HBR4H7tQTCrQcI9kJBXKcFzf2K4V
yGOmwLOyiqg6jKtaR1COtiLxVIqOvYDWEx+ilDbDMEQTktw9AsQUOGfcw0X7y/wf
j9bB3zupbtD4HSWX8Fc1U9yeIX4KNG/KHAVp162mMvuhsKMejIQ5KZMtc9PH7N5V
Cwsb2NWj+SYiOF1m7iZxYNaHQKvjMds5iblI9hDYhIFngpcKaOZa0JjArvksM1pl
lJUutAPDZuCMqsuC3Hq10XmQ6Rnhh37waeSSSfNe9hYWBTVAcoCDMGRxXTMgCq5L
NvwZuXKZtHL2BQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:12:25 2026 by rpki-client