Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
File: PvRdcGusxYrv9q5H8jLZKzwvsBg.mft (raw, json)
Hash identifier: aEmtQbjEcqhT6+jmx/Vho9pyxBb6j7NzyhQNLBl+e1Y=
Subject key identifier: 7D:14:DB:B2:FA:96:E3:B8:04:08:D5:A3:A3:FF:9A:65:C2:47:7F:A4
Authority key identifier: 3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18
Certificate issuer: /CN=3ef45d706bacc58aeff6ae47f232d92b3c2fb018
Certificate serial: 019F11F832FF7A66E7EF24ADD0BE8A607C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
Manifest number: 17
Signing time: Mon 29 Jun 2026 06:01:46 +0000
Manifest this update: Mon 29 Jun 2026 06:01:46 +0000
Manifest next update: Tue 30 Jun 2026 06:01:46 +0000
Files and hashes: 1: NL1w9Xj9eNNvZHja4bYi8u1uP0g.roa (hash: bGa7KQ5aQ4eZWg9YSqL9Pvq1iyjpLbcYhC9x7Z0XWS8=)
2: PvRdcGusxYrv9q5H8jLZKzwvsBg.crl (hash: dTP3Lc1p99fskpp9iLcaj300OZnPvOqBFyqfW2SSPfI=)
3: UGXYFC9jlohYNhw6f4qzRWdUTE8.asa (hash: EAHRau/OfR99p6HOKLABIO+IowH54Ml4zKfLXfBoos4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:32:ff:7a:66:e7:ef:24:ad:d0:be:8a:60:7c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef45d706bacc58aeff6ae47f232d92b3c2fb018
Validity
Not Before: Jun 29 06:01:46 2026 GMT
Not After : Jun 30 06:01:46 2026 GMT
Subject: CN=7d14dbb2fa96e3b80408d5a3a3ff9a65c2477fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:58:57:48:85:37:6c:1e:15:46:a8:46:42:
69:93:59:b1:92:01:30:c6:92:e5:a4:9e:92:91:7d:
9d:dd:c7:d2:dd:cb:47:05:5b:0f:c8:d2:e5:3c:03:
7a:3e:04:9c:d8:d2:a0:14:f7:66:f8:7a:45:28:52:
19:85:c4:ad:99:21:93:94:4d:cf:12:52:e8:04:79:
93:d5:f9:10:11:16:97:81:07:0c:94:c9:fb:7d:b9:
88:ab:90:bb:f4:18:a9:66:9d:67:b5:d7:e4:8b:5c:
12:94:74:b1:a1:4b:27:ca:b3:5c:e7:b3:99:4a:88:
23:66:c6:1c:e7:99:22:ac:b1:88:1b:6a:b8:b4:17:
62:f0:be:7f:cb:45:12:f0:67:ca:44:db:04:e5:47:
39:65:a3:42:a3:0d:24:42:53:aa:b5:12:14:ad:67:
05:b1:b7:ef:cc:de:15:e1:de:30:01:07:6b:a6:ed:
49:39:95:38:81:bd:e7:66:aa:f2:bb:65:ac:eb:42:
59:41:c4:cc:e1:40:e5:36:f2:a0:12:cc:51:c8:5a:
b9:1c:f0:67:6b:e3:4f:13:f5:83:08:05:18:0e:5d:
5d:af:f9:f6:85:c5:70:38:9a:2a:31:b2:27:67:f5:
7a:f7:ca:7e:a4:5a:d7:bc:a8:9c:8a:61:6b:b8:ab:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:14:DB:B2:FA:96:E3:B8:04:08:D5:A3:A3:FF:9A:65:C2:47:7F:A4
X509v3 Authority Key Identifier:
keyid:3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:14:b6:18:be:60:71:2a:ba:21:3f:ac:e7:66:94:8c:0a:96:
90:94:09:7d:6f:3c:ba:2b:c5:75:b1:18:44:89:3b:c1:c5:93:
fa:4b:fa:f3:2f:f4:c9:b1:72:d7:37:d9:55:e7:d4:24:d9:67:
90:01:95:19:db:bf:fa:b2:a2:72:2c:04:21:1f:15:9e:c2:89:
77:c1:34:51:88:00:fe:65:59:97:8b:49:56:12:fd:93:c1:1f:
03:85:4c:7e:c1:c9:96:ab:8e:c7:17:64:a0:83:68:10:1a:89:
8b:e7:e2:d3:af:52:5c:9b:da:fd:99:df:5e:7f:d7:ec:ca:84:
98:86:a4:d0:57:f4:95:da:b4:27:e3:cb:9f:24:ca:17:b4:ce:
5d:f8:10:c2:11:72:ce:12:bb:1f:65:5d:e3:4f:86:51:c8:df:
b3:92:c9:4d:82:e5:1c:47:06:87:81:6d:46:b7:aa:96:96:fd:
10:44:b3:d4:dd:b6:dd:54:79:b1:7f:ef:b2:83:3e:93:34:46:
7d:1d:5a:7d:33:3b:f6:6d:6e:3c:0f:48:2e:d1:fa:62:6e:7c:
06:f4:18:f3:24:fb:69:a0:8d:b8:7c:87:ad:a8:ad:eb:3a:fc:
5c:83:d5:ac:2e:86:9c:45:35:12:4a:b8:e0:ad:db:ba:30:a1:
ca:8a:78:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8R+DL/embn7ySt0L6KYHxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZjQ1ZDcwNmJhY2M1OGFlZmY2YWU0N2YyMzJkOTJiM2My
ZmIwMTgwHhcNMjYwNjI5MDYwMTQ2WhcNMjYwNjMwMDYwMTQ2WjAzMTEwLwYDVQQD
Eyg3ZDE0ZGJiMmZhOTZlM2I4MDQwOGQ1YTNhM2ZmOWE2NWMyNDc3ZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CBYV0iFN2weFUaoRkJpk1mxkgEw
xpLlpJ6SkX2d3cfS3ctHBVsPyNLlPAN6PgSc2NKgFPdm+HpFKFIZhcStmSGTlE3P
ElLoBHmT1fkQERaXgQcMlMn7fbmIq5C79BipZp1ntdfki1wSlHSxoUsnyrNc57OZ
SogjZsYc55kirLGIG2q4tBdi8L5/y0US8GfKRNsE5Uc5ZaNCow0kQlOqtRIUrWcF
sbfvzN4V4d4wAQdrpu1JOZU4gb3nZqryu2Ws60JZQcTM4UDlNvKgEsxRyFq5HPBn
a+NPE/WDCAUYDl1dr/n2hcVwOJoqMbInZ/V698p+pFrXvKicimFruKvxWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0U27L6luO4BAjVo6P/mmXCR3+kMB8GA1UdIwQY
MBaAFD70XXBrrMWK7/auR/Iy2Ss8L7AYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHZSZGNHdXN4WXJ2OXE1SDhqTFpLend2c0JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85OTkyOTUtMzFkYy00ZjhjLTg0Yjct
MzdlYWQ2YWI0ZWVjLzEvUHZSZGNHdXN4WXJ2OXE1SDhqTFpLend2c0JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85OTkyOTUtMzFkYy00ZjhjLTg0YjctMzdlYWQ2YWI0ZWVj
LzEvUHZSZGNHdXN4WXJ2OXE1SDhqTFpLend2c0JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBS2GL5g
cSq6IT+s52aUjAqWkJQJfW88uivFdbEYRIk7wcWT+kv68y/0ybFy1zfZVefUJNln
kAGVGdu/+rKiciwEIR8VnsKJd8E0UYgA/mVZl4tJVhL9k8EfA4VMfsHJlquOxxdk
oINoEBqJi+fi069SXJva/ZnfXn/X7MqEmIak0Ff0ldq0J+PLnyTKF7TOXfgQwhFy
zhK7H2Vd40+GUcjfs5LJTYLlHEcGh4FtRreqlpb9EESz1N223VR5sX/vsoM+kzRG
fR1afTM79m1uPA9ILtH6Ym58BvQY8yT7aaCNuHyHrait6zr8XIPVrC6GnEU1Ekq4
4K3bujChyop4kA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:31:26 2026 by rpki-client