Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
File: pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft (raw, json)
Hash identifier: 0oE6Ic5arDC2PLHdcp5PIUzMH1TGcOJDmDft5hTh6F4=
Subject key identifier: 4D:17:5C:BE:B4:69:8A:89:49:74:A2:97:D8:4C:7A:9F:1A:2E:4C:9E
Authority key identifier: A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79
Certificate issuer: /CN=a4396ac14b77b1f033d9e459210c873b012e0a79
Certificate serial: 019F1A1F4A2EE834A695333529E28B69C13B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
Manifest number: 26
Signing time: Tue 30 Jun 2026 20:01:25 +0000
Manifest this update: Tue 30 Jun 2026 20:01:25 +0000
Manifest next update: Wed 01 Jul 2026 20:01:25 +0000
Files and hashes: 1: 2GYhbWHtfBWPF1UEk4OY2FR4BlE.roa (hash: w4kZnQsbsuOxKFHTlD0TVfi8ciQmtnzyEXnJDLUlaZo=)
2: pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl (hash: v+j5dqXb4R/jDiSjfpU4VAhzT6ykUY5/u9jbjrg3gDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:4a:2e:e8:34:a6:95:33:35:29:e2:8b:69:c1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4396ac14b77b1f033d9e459210c873b012e0a79
Validity
Not Before: Jun 30 20:01:25 2026 GMT
Not After : Jul 1 20:01:25 2026 GMT
Subject: CN=4d175cbeb4698a894974a297d84c7a9f1a2e4c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:4f:59:1a:0d:1f:25:92:70:72:ac:0d:2b:
99:d2:c7:f2:5c:06:ee:bf:fa:30:4e:e7:18:13:b1:
5f:6c:65:b8:48:ab:37:1b:49:d2:03:d6:cf:e9:68:
cf:cd:fd:13:0d:40:a8:8c:b3:53:81:1b:85:4e:bd:
df:f3:c0:bc:27:01:f2:cd:f5:c7:a7:9d:40:cc:bd:
b2:fc:80:c8:18:a6:9d:e3:95:d5:a8:bd:e5:68:de:
02:6b:3e:ed:69:7e:36:8a:b2:53:ba:e3:e6:27:e1:
02:39:b4:71:dc:06:f3:e4:f4:7e:36:36:d5:40:45:
a7:98:69:17:b7:4c:10:a6:b6:ac:7e:44:fd:16:70:
7a:2b:01:0e:53:c3:15:26:e9:95:90:22:cd:a7:94:
63:e8:3b:35:af:56:8b:63:b4:fd:30:de:d6:e2:02:
3d:e9:97:d2:47:7f:ee:87:c6:d8:5f:82:48:c8:94:
6a:51:1e:7e:d8:8b:6f:27:2f:42:0f:77:4c:d2:84:
e5:e4:f7:ba:bc:7c:1c:67:cb:b9:36:93:90:f6:a3:
d0:4f:01:da:4d:ab:ac:18:b3:38:b7:42:95:d0:7a:
c8:d6:75:01:8d:d6:94:1c:05:0f:d3:3f:bd:ee:93:
da:61:f8:57:41:cf:7e:86:31:ee:f2:19:99:89:c3:
42:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:17:5C:BE:B4:69:8A:89:49:74:A2:97:D8:4C:7A:9F:1A:2E:4C:9E
X509v3 Authority Key Identifier:
keyid:A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:45:16:8d:0b:b2:c8:9a:c1:3d:c8:3c:7b:a3:81:45:53:e2:
ef:8d:0d:f2:a6:cb:0d:44:59:13:8c:42:42:51:ee:be:7e:14:
08:fa:61:df:2c:3d:69:aa:b4:ef:61:dd:3e:6e:69:01:e9:9b:
f8:2c:c4:a9:a3:92:5d:3f:56:5b:48:92:f5:67:ad:fc:a2:05:
c0:1d:5a:b0:33:e6:c3:a9:e8:a1:6c:52:cf:8d:87:b1:74:bb:
91:9a:8c:dd:b1:4b:f0:ce:c0:5d:fe:0d:b7:79:4b:ff:2b:2a:
e1:7b:74:ca:ad:ef:6a:fc:2f:11:e7:e0:c0:7e:72:45:1f:85:
20:2d:1e:06:1c:46:a8:ba:8f:97:51:a8:69:41:c6:9c:86:92:
bd:1d:28:49:c4:54:34:d0:45:e0:1e:9d:f5:a6:d5:a5:f6:e4:
60:03:25:28:f4:86:68:ad:0c:da:de:41:4a:09:b4:51:db:1c:
0b:8f:48:d3:f1:c5:93:82:6b:cb:09:c6:32:ac:71:a5:d1:b8:
61:36:70:d6:90:36:35:14:15:53:7f:e2:4e:dc:91:41:ec:b0:
e2:43:ae:72:c6:e0:13:09:43:77:35:dd:bb:35:f4:0a:d6:61:
29:19:70:31:24:df:37:fd:c8:22:a2:de:76:ac:79:98:99:07:
a8:32:67:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8aH0ou6DSmlTM1KeKLacE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Mzk2YWMxNGI3N2IxZjAzM2Q5ZTQ1OTIxMGM4NzNiMDEy
ZTBhNzkwHhcNMjYwNjMwMjAwMTI1WhcNMjYwNzAxMjAwMTI1WjAzMTEwLwYDVQQD
Eyg0ZDE3NWNiZWI0Njk4YTg5NDk3NGEyOTdkODRjN2E5ZjFhMmU0YzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo5PWRoNHyWScHKsDSuZ0sfyXAbu
v/owTucYE7FfbGW4SKs3G0nSA9bP6WjPzf0TDUCojLNTgRuFTr3f88C8JwHyzfXH
p51AzL2y/IDIGKad45XVqL3laN4Caz7taX42irJTuuPmJ+ECObRx3Abz5PR+NjbV
QEWnmGkXt0wQprasfkT9FnB6KwEOU8MVJumVkCLNp5Rj6Ds1r1aLY7T9MN7W4gI9
6ZfSR3/uh8bYX4JIyJRqUR5+2ItvJy9CD3dM0oTl5Pe6vHwcZ8u5NpOQ9qPQTwHa
TausGLM4t0KV0HrI1nUBjdaUHAUP0z+97pPaYfhXQc9+hjHu8hmZicNCkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0XXL60aYqJSXSil9hMep8aLkyeMB8GA1UdIwQY
MBaAFKQ5asFLd7HwM9nkWSEMhzsBLgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERscXdVdDNzZkF6MmVSWklReUhPd0V1Q25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8zZGY2ZWUtMjM2Ni00YjkyLTgzOTQt
OTFjNTBhMDkwNDdhLzEvcERscXdVdDNzZkF6MmVSWklReUhPd0V1Q25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8zZGY2ZWUtMjM2Ni00YjkyLTgzOTQtOTFjNTBhMDkwNDdh
LzEvcERscXdVdDNzZkF6MmVSWklReUhPd0V1Q25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxkUWjQuy
yJrBPcg8e6OBRVPi740N8qbLDURZE4xCQlHuvn4UCPph3yw9aaq072HdPm5pAemb
+CzEqaOSXT9WW0iS9Wet/KIFwB1asDPmw6nooWxSz42HsXS7kZqM3bFL8M7AXf4N
t3lL/ysq4Xt0yq3vavwvEefgwH5yRR+FIC0eBhxGqLqPl1GoaUHGnIaSvR0oScRU
NNBF4B6d9abVpfbkYAMlKPSGaK0M2t5BSgm0UdscC49I0/HFk4JrywnGMqxxpdG4
YTZw1pA2NRQVU3/iTtyRQeyw4kOucsbgEwlDdzXduzX0CtZhKRlwMSTfN/3IIqLe
dqx5mJkHqDJnLQ==
-----END CERTIFICATE-----
Generated at Wed Jul 1 02:33:36 2026 by rpki-client