Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File: P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier: FSSuYANC72mJP+PaU4qzDebsnTccWUDpgsXl4Dqj3Po=
Subject key identifier: 0F:91:29:87:80:1B:85:7A:41:9C:3C:87:20:8A:99:71:E9:9D:E0:29
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 019F1153167906CA2C36DA3E3C4473203ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number: 1989
Signing time: Mon 29 Jun 2026 03:01:25 +0000
Manifest this update: Mon 29 Jun 2026 03:01:25 +0000
Manifest next update: Tue 30 Jun 2026 03:01:25 +0000
Files and hashes: 1: 8ncEIlz1-5zSR1QhL0rDdEkpqI4.roa (hash: nuQfSOfvY6zkx/iP7wr0MpQfCSukhDWy8/9CULyV7C4=)
2: IvA9B2nFsUB8N2tSxI1Z1owm5SY.asa (hash: Luu+iEJI9TF5mINkPbC0AuUUy8TwF281MV1BlQU5AFk=)
3: MhAe01ZmLmGIo1FB00FAZblkwBo.asa (hash: aUcLI++76yd3mnnAy6xNFCz8PJWqoY+FNcByDh9aH0o=)
4: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: 3jazryLQia3TBXmkIrxoOW5QZ+Cv5+MpkMqkACZBU2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:53:16:79:06:ca:2c:36:da:3e:3c:44:73:20:3a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Jun 29 03:01:25 2026 GMT
Not After : Jun 30 03:01:25 2026 GMT
Subject: CN=0f912987801b857a419c3c87208a9971e99de029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:e9:cb:9f:0e:f6:6e:dd:69:39:56:03:4b:
67:a4:42:fc:b1:a6:f6:94:6c:ac:96:d9:bb:5f:7a:
7a:32:c4:1c:8a:89:69:8a:0d:4b:cd:e2:24:44:70:
9d:47:9d:a1:83:8b:7d:1f:70:d6:d8:9a:34:76:d6:
cb:af:9f:56:5d:18:27:ad:66:24:40:5c:52:37:ac:
77:74:98:35:46:03:ed:a7:2a:53:3d:64:04:c5:21:
c3:f4:5b:db:21:4a:92:8a:79:43:68:d3:e1:2a:e5:
41:08:10:06:5d:9d:c8:0f:af:e5:3d:5e:e5:c7:04:
b7:c0:6e:d2:3f:a7:d4:df:b8:5d:2c:2e:39:57:02:
c1:58:67:e9:f4:c3:88:2f:2b:1e:73:15:69:81:44:
4b:b3:96:02:ea:63:62:cd:48:00:7b:8e:19:af:4e:
f2:f1:85:9c:0c:c6:f3:ff:f8:5a:91:4b:65:79:47:
96:a8:67:24:2a:f6:bb:72:88:71:38:f3:6b:58:60:
34:ed:7b:bc:71:37:f0:d7:d6:4b:cd:b8:4d:b0:66:
5a:47:7c:6f:6c:b0:6b:ea:19:87:6c:82:98:b4:d3:
a1:8d:c3:4f:d7:77:0e:5e:3f:50:52:9a:9e:3a:c0:
1f:1b:51:f9:2b:9b:71:95:7b:ca:32:0f:68:3a:06:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:91:29:87:80:1B:85:7A:41:9C:3C:87:20:8A:99:71:E9:9D:E0:29
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4a:02:8c:02:50:d7:e0:b5:03:d0:70:48:3a:13:2d:59:fc:
c6:54:03:0d:74:e5:68:ad:2a:d5:39:5e:44:7e:35:1d:17:21:
96:8f:d0:91:d9:24:01:b7:c7:4f:e4:aa:d3:6b:12:ec:4d:34:
ff:af:a1:65:08:18:41:b2:d6:b3:c4:2f:47:3d:1f:44:e1:dd:
fa:35:20:ba:64:67:72:36:73:8e:31:62:8e:e5:ad:1a:8c:09:
71:25:44:bd:df:a5:5e:f3:1a:3b:69:1c:13:ac:a8:e4:02:e4:
af:fe:22:ef:3c:42:a4:f2:c1:6f:89:e0:2f:55:3b:d2:31:de:
96:2c:0c:bb:ec:6c:9a:a9:b4:f7:18:9d:86:64:0a:6c:02:e2:
3a:a7:06:bd:cc:2c:62:d1:cf:49:31:18:b1:c1:d0:b8:a1:1d:
1e:e3:e3:e7:cb:aa:0d:4d:1e:58:a7:8d:03:17:a7:79:14:28:
55:90:36:99:38:4d:e0:94:bf:d1:af:51:9b:1c:bc:5f:b0:d8:
29:76:30:8f:b6:8f:56:1f:fd:d0:07:e4:2c:7b:d2:85:86:f7:
5e:12:9e:8d:08:14:84:87:ce:a4:75:fa:e9:70:e6:2a:a2:d9:
af:d5:3c:bf:87:25:b5:a2:3a:60:05:74:cc:56:89:bf:72:d9:
b6:95:84:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RUxZ5BsosNto+PERzIDrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOTYyNDA5OThmY2U0MTI0YzNjYjRkZmJhY2JiMGVkMTYx
ODQwNWEwHhcNMjYwNjI5MDMwMTI1WhcNMjYwNjMwMDMwMTI1WjAzMTEwLwYDVQQD
EygwZjkxMjk4NzgwMWI4NTdhNDE5YzNjODcyMDhhOTk3MWU5OWRlMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIDpy58O9m7daTlWA0tnpEL8sab2
lGysltm7X3p6MsQciolpig1LzeIkRHCdR52hg4t9H3DW2Jo0dtbLr59WXRgnrWYk
QFxSN6x3dJg1RgPtpypTPWQExSHD9FvbIUqSinlDaNPhKuVBCBAGXZ3ID6/lPV7l
xwS3wG7SP6fU37hdLC45VwLBWGfp9MOILysecxVpgURLs5YC6mNizUgAe44Zr07y
8YWcDMbz//hakUtleUeWqGckKva7cohxOPNrWGA07Xu8cTfw19ZLzbhNsGZaR3xv
bLBr6hmHbIKYtNOhjcNP13cOXj9QUpqeOsAfG1H5K5txlXvKMg9oOgZY/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+RKYeAG4V6QZw8hyCKmXHpneApMB8GA1UdIwQY
MBaAFD+WJAmY/OQSTDy037rLsO0WGEBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVZa0Naajg1QkpNUExUZnVzdXc3UllZUUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MGZlYzctMGI1MS00NDQ2LTliNWQt
Yzc0MWMyN2I0ZTIyLzEvUDVZa0Naajg1QkpNUExUZnVzdXc3UllZUUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82MGZlYzctMGI1MS00NDQ2LTliNWQtYzc0MWMyN2I0ZTIy
LzEvUDVZa0Naajg1QkpNUExUZnVzdXc3UllZUUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEoCjAJQ
1+C1A9BwSDoTLVn8xlQDDXTlaK0q1TleRH41HRchlo/QkdkkAbfHT+Sq02sS7E00
/6+hZQgYQbLWs8QvRz0fROHd+jUgumRncjZzjjFijuWtGowJcSVEvd+lXvMaO2kc
E6yo5ALkr/4i7zxCpPLBb4ngL1U70jHeliwMu+xsmqm09xidhmQKbALiOqcGvcws
YtHPSTEYscHQuKEdHuPj58uqDU0eWKeNAxeneRQoVZA2mThN4JS/0a9Rmxy8X7DY
KXYwj7aPVh/90AfkLHvShYb3XhKejQgUhIfOpHX66XDmKqLZr9U8v4cltaI6YAV0
zFaJv3LZtpWETg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:38 2026 by rpki-client