Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File: pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier: ng2CdPoEoy+c6j4AhCgnPOLGd1VAcewq1CYSgihLhF8=
Subject key identifier: D0:C0:69:EC:58:C9:A9:B2:6C:E4:0D:C6:F4:0D:2F:21:D8:DB:44:97
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 019DAF7D00EC8F2EC80B5D488E7FF3AAF3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number: 1389
Signing time: Tue 21 Apr 2026 10:01:38 +0000
Manifest this update: Tue 21 Apr 2026 10:01:38 +0000
Manifest next update: Wed 22 Apr 2026 10:01:38 +0000
Files and hashes: 1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=)
2: ExTCIeQK6Vb8OCwCNuc_-quqRmI.roa (hash: yAl2sJH2YaylYmZhqm6jDAUkF463bPlFn5SJl2V0nqk=)
3: JzElV8rMB35_r5yROjAIe1YSEGk.roa (hash: prxCAC9aS1jR/lGKgImoCaF1puXWY2FG75jnwkB+CC4=)
4: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=)
5: VXazB19Is6W_OKKCp0AvNqbD-rM.roa (hash: IwIknG6od+Fc8/mQwvVulKrK8qXdxe2y0/Y0Cy93yB0=)
6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: sMPj/WpMzUvoX+BxNP49Ug+AXMekEIV2WL86ymvmUcE=)
7: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=)
8: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:7d:00:ec:8f:2e:c8:0b:5d:48:8e:7f:f3:aa:f3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Apr 21 10:01:38 2026 GMT
Not After : Apr 22 10:01:38 2026 GMT
Subject: CN=d0c069ec58c9a9b26ce40dc6f40d2f21d8db4497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:4b:fe:9b:8d:d0:30:34:df:8d:22:94:2e:
93:70:cb:ed:d9:be:91:33:57:eb:54:b6:08:74:df:
a7:da:45:ee:2c:11:a0:ed:04:ad:3c:1f:98:b3:19:
78:13:b0:7b:57:25:de:f7:ad:ee:7b:94:cc:03:73:
46:b2:cb:90:fe:87:ce:a9:87:9d:7c:5d:08:8e:27:
f6:09:bd:e1:a6:33:a2:8b:d4:19:26:05:0e:98:29:
1e:69:1e:1a:83:e8:71:ad:dd:96:53:1c:33:8a:60:
36:06:78:93:9d:33:a3:75:b5:55:9c:7c:ae:7f:fb:
c0:f6:60:4e:1a:ee:ba:86:f2:3f:26:70:f4:cd:c2:
78:4a:46:23:f0:f7:ac:84:d8:8a:ca:e3:4d:68:ae:
23:a1:8a:a1:5b:f0:dd:40:01:30:5b:96:f6:74:e6:
53:2c:a2:64:7e:0c:15:9b:aa:be:40:98:5f:6c:20:
b6:cc:59:b6:6d:0e:75:a5:ae:98:f5:22:64:74:47:
c7:f8:c4:82:ea:d5:1f:b5:7e:5d:2c:9f:71:9f:52:
71:37:52:28:fa:6d:e7:fc:ca:0f:43:4b:60:5e:61:
8a:7b:9f:ec:7c:29:fa:e8:7f:07:ce:eb:8f:b0:2e:
f3:58:fe:f9:27:2f:40:82:6e:b0:b4:ab:47:ea:50:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C0:69:EC:58:C9:A9:B2:6C:E4:0D:C6:F4:0D:2F:21:D8:DB:44:97
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:db:7e:68:06:6b:17:3c:2b:40:2d:1e:05:07:24:c2:06:a5:
10:8f:4c:d7:c8:96:78:3c:6b:16:9b:81:30:1c:78:ae:b4:29:
19:7d:42:2f:45:aa:a0:4a:02:2d:60:8f:cd:7d:6f:ae:9c:24:
f3:64:6c:b7:24:3e:8e:bc:21:84:16:31:81:17:86:19:16:3c:
64:7e:2e:60:55:86:4b:c3:87:89:c2:8b:8e:49:00:07:0a:36:
87:08:20:b2:42:65:0a:b0:24:07:7a:68:27:e5:3f:1e:1a:81:
7e:b4:77:82:11:b0:3c:8e:6b:15:8e:22:f1:63:f1:b0:4c:d7:
12:1e:9b:fd:72:7d:c9:ed:6f:9b:16:af:59:75:3c:3b:16:e5:
94:10:95:73:74:8c:a8:0a:42:e5:82:df:2f:e7:9f:84:20:ee:
12:7c:56:60:94:e9:c0:a4:9f:8d:01:c9:72:33:3d:0a:dd:de:
79:24:5e:00:8d:63:d4:f9:c3:c1:12:63:44:06:66:c8:5a:fb:
3a:c2:1c:eb:81:bb:6e:0f:61:2c:9b:4f:d9:fe:a8:94:9d:00:
7a:78:3a:9f:b8:19:05:ca:e4:27:13:13:ef:f0:32:18:12:ea:
3e:be:4f:a4:d2:fd:ca:66:47:c9:db:14:6b:22:a5:71:15:92:
13:c0:20:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:02:54 2026 by rpki-client