Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: JnCPoqdNhffVisOIkYZlA36CYuXJUDjCM3REBexVr1Y=
Subject key identifier: 1F:B2:70:26:65:6A:EA:F2:FE:6E:71:62:17:5B:E6:FE:7F:52:B5:B3
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 019E2135FD05D6EFDF75FE8B8A2F980B2838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 12A4
Signing time: Wed 13 May 2026 12:00:46 +0000
Manifest this update: Wed 13 May 2026 12:00:46 +0000
Manifest next update: Thu 14 May 2026 12:00:46 +0000
Files and hashes: 1: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: tKybAxX2W8M4tqabh02AzouPnwm19uOTSb+WusJYyWE=)
2: Rc1JKlzBWJzMspxz5Sz8_wKGjSQ.roa (hash: YXV2SDD7Lq/HvpspFTkxAD7KLYHXbsXZfXUiY1m7rzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:35:fd:05:d6:ef:df:75:fe:8b:8a:2f:98:0b:28:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: May 13 12:00:46 2026 GMT
Not After : May 14 12:00:46 2026 GMT
Subject: CN=1fb27026656aeaf2fe6e7162175be6fe7f52b5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fd:95:dc:9b:be:e2:6d:f4:1d:a3:3b:3b:ac:
f2:1d:73:23:66:23:5c:e6:8d:ae:20:b0:b7:09:25:
d0:01:e3:a1:34:08:d2:d9:e7:dc:8a:e1:9f:bc:60:
b3:5c:6f:8f:b3:2b:f0:65:37:7f:56:5e:71:1d:c5:
c0:4b:96:b2:e6:bf:b9:99:a4:6f:6c:2f:10:8b:58:
5e:04:26:aa:9f:4f:9f:89:05:18:dd:1c:85:e9:e8:
1c:6d:94:88:21:81:af:66:21:46:70:a0:9e:22:6c:
10:c0:fb:f2:67:4c:d8:a5:d7:fe:37:07:d3:db:45:
85:6c:54:8f:b5:21:b8:25:4a:fd:29:50:b5:72:ce:
7f:eb:d4:cc:ce:4f:6b:37:76:f8:68:13:ef:8f:18:
3e:44:ab:eb:0d:e8:d6:ef:10:67:2f:62:45:7a:2e:
4a:c0:df:d1:5a:55:5f:d8:8a:94:04:01:48:34:12:
0b:3e:53:7a:66:b0:bf:cf:64:40:74:af:17:97:e3:
11:34:98:5f:fa:43:b7:39:6e:4c:53:83:c7:1c:bc:
b0:b2:70:85:e3:b9:73:8a:bb:06:3f:28:2b:10:7f:
3c:32:71:72:f5:26:66:b7:de:84:ed:8b:98:af:c4:
e1:50:ba:82:27:3c:9f:51:4f:f7:7d:8a:0f:ee:8b:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B2:70:26:65:6A:EA:F2:FE:6E:71:62:17:5B:E6:FE:7F:52:B5:B3
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1a:0e:55:77:58:40:57:38:71:af:53:7b:4d:98:e5:4d:26:
f0:01:6d:69:93:26:5e:c9:f1:76:8e:57:3f:59:7b:ac:59:d3:
57:af:22:ce:d2:97:92:1f:ab:8e:4f:f8:3c:db:7d:17:8f:a4:
8c:8e:0f:cd:68:29:71:a0:80:8d:a7:3e:2c:f0:58:7e:ab:9e:
24:f0:d7:9b:c9:01:5d:ed:fc:76:76:55:09:80:01:dc:8c:6e:
c9:dc:9e:d7:84:5b:03:95:b0:81:d3:7f:c8:71:c4:f5:8f:7b:
59:86:98:f7:c2:fa:41:a9:b3:91:12:8b:2b:99:5d:c9:11:62:
23:b1:91:ff:fe:b8:12:b4:2e:09:57:7e:50:92:83:48:5f:78:
14:fe:18:23:be:92:c9:16:46:60:b7:84:36:16:37:39:1b:e0:
70:d9:37:07:16:3a:ae:7c:29:57:73:09:e2:ac:c9:87:0a:80:
51:cd:47:fd:16:c2:b2:d2:d4:2d:2f:ad:80:52:24:c2:51:58:
0f:2c:ae:c3:ca:9e:5e:82:e1:4a:fb:71:68:64:3c:82:e7:88:
f5:96:bb:c6:5c:ae:c2:86:e4:a3:96:f8:e6:77:ad:30:22:c6:
b4:5d:98:49:83:02:55:e2:46:8e:2d:f8:1f:4d:be:ab:1f:24:
44:8d:bb:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hNf0F1u/fdf6Lii+YCyg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTU1NDA5OGM3YTg4YWEzNDI2NGI5MmQ4YmYyMjU3ZWMw
YmNkYTQwHhcNMjYwNTEzMTIwMDQ2WhcNMjYwNTE0MTIwMDQ2WjAzMTEwLwYDVQQD
EygxZmIyNzAyNjY1NmFlYWYyZmU2ZTcxNjIxNzViZTZmZTdmNTJiNWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v2V3Ju+4m30HaM7O6zyHXMjZiNc
5o2uILC3CSXQAeOhNAjS2efciuGfvGCzXG+PsyvwZTd/Vl5xHcXAS5ay5r+5maRv
bC8Qi1heBCaqn0+fiQUY3RyF6egcbZSIIYGvZiFGcKCeImwQwPvyZ0zYpdf+NwfT
20WFbFSPtSG4JUr9KVC1cs5/69TMzk9rN3b4aBPvjxg+RKvrDejW7xBnL2JFei5K
wN/RWlVf2IqUBAFINBILPlN6ZrC/z2RAdK8Xl+MRNJhf+kO3OW5MU4PHHLywsnCF
47lzirsGPygrEH88MnFy9SZmt96E7YuYr8ThULqCJzyfUU/3fYoP7osh4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+ycCZlaury/m5xYhdb5v5/UrWzMB8GA1UdIwQY
MBaAFD6lVAmMeoiqNCZLkti/IlfsC82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAt
NjZkZTk4NjVkYmFjLzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAtNjZkZTk4NjVkYmFj
LzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABoOVXdY
QFc4ca9Te02Y5U0m8AFtaZMmXsnxdo5XP1l7rFnTV68iztKXkh+rjk/4PNt9F4+k
jI4PzWgpcaCAjac+LPBYfqueJPDXm8kBXe38dnZVCYAB3Ixuydye14RbA5WwgdN/
yHHE9Y97WYaY98L6QamzkRKLK5ldyRFiI7GR//64ErQuCVd+UJKDSF94FP4YI76S
yRZGYLeENhY3ORvgcNk3BxY6rnwpV3MJ4qzJhwqAUc1H/RbCstLULS+tgFIkwlFY
Dyyuw8qeXoLhSvtxaGQ8gueI9Za7xlyuwobko5b45netMCLGtF2YSYMCVeJGji34
H02+qx8kRI27og==
-----END CERTIFICATE-----
Generated at Wed May 13 15:38:43 2026 by rpki-client