Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: uSXrCfNtNQY368EIcbMMuEAW6tOVttprsEkHCAlwovw=
Subject key identifier: D2:FF:BC:82:D1:D1:B7:80:62:FF:BC:C1:81:0B:2D:16:11:54:39:CC
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 019F9135D194BEB2E703BC536249F04F3013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 1063
Signing time: Thu 23 Jul 2026 23:00:51 +0000
Manifest this update: Thu 23 Jul 2026 23:00:51 +0000
Manifest next update: Fri 24 Jul 2026 23:00:51 +0000
Files and hashes: 1: 5t5_5MqWJNollBMPqdFua97XfMM.roa (hash: KTz9ZppQRmMMx9XPLOR36od8YyLkBIE5elG5FeL6i2Y=)
2: FSHrqYhJli1tSVyjlj_58RREeXk.roa (hash: uSCHyOKTAFU7tgMnLJvTfArI/447X68lLDwgFscWtJQ=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: tN2k3vj8O263vmKm2CN2mp+sTIZVNp6rcgCIhCNQNyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:d1:94:be:b2:e7:03:bc:53:62:49:f0:4f:30:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Jul 23 23:00:51 2026 GMT
Not After : Jul 24 23:00:51 2026 GMT
Subject: CN=d2ffbc82d1d1b78062ffbcc1810b2d16115439cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:0e:25:85:8f:09:47:e2:fb:04:03:e9:b5:
21:75:1e:37:89:ca:8a:b3:2d:2a:e5:9a:02:9f:0d:
e0:34:d0:72:8e:b8:44:33:61:a1:da:00:b2:97:1f:
b0:b8:61:f4:32:b2:6c:bd:94:74:4d:1a:b5:69:30:
b8:1a:af:f4:89:a3:3f:c4:76:44:47:56:c5:af:1a:
07:fc:47:30:fe:84:3b:d3:9d:d1:35:b3:ad:05:5e:
f6:6f:aa:30:b1:78:d3:bd:ab:e7:db:28:31:44:b7:
c0:d2:c4:8a:04:00:63:32:58:63:28:86:6b:3b:39:
f4:34:d1:9d:25:35:3a:24:14:c0:4a:8e:33:ef:ca:
b2:05:6c:09:b8:2e:35:0a:d8:c2:40:a9:72:ac:2e:
3d:80:6c:4e:40:9a:b8:74:5a:1a:4f:d4:6e:6f:44:
f4:ae:98:8e:6f:81:30:9e:d5:5b:f1:bb:55:20:03:
48:36:04:58:ed:ab:b1:a6:98:61:fd:fb:99:06:97:
a2:73:f5:71:ac:57:f6:ca:61:14:a8:67:ea:95:64:
96:64:33:0f:9d:e7:15:fe:54:f3:b5:51:40:aa:aa:
4d:54:b7:31:d6:ab:93:84:34:a1:51:91:1b:16:a6:
01:ad:5a:1a:89:df:7a:d3:d1:12:75:75:1c:91:f2:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FF:BC:82:D1:D1:B7:80:62:FF:BC:C1:81:0B:2D:16:11:54:39:CC
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:88:6a:c9:ee:7f:8b:44:52:38:22:69:0f:9e:af:42:69:d5:
7a:8a:b0:05:f9:1f:f9:ef:75:0e:58:03:f5:50:9e:51:5d:17:
9a:cf:1c:bf:78:4f:7b:90:5d:6a:cf:d4:a0:1b:54:04:4b:a8:
c8:0c:de:62:e8:65:12:3c:d3:ac:64:df:36:cf:74:34:80:10:
f0:74:27:38:79:d6:91:05:20:95:ed:fb:d1:51:60:cc:71:7f:
62:6b:cd:c2:48:37:eb:3a:d4:3c:f2:25:6f:ed:3c:41:79:b4:
73:15:4b:d4:1d:3d:6e:a2:7e:b2:be:cd:f0:90:a1:bb:88:4c:
1f:3d:6f:2b:0f:ff:14:5a:6e:a4:da:35:86:ef:e7:b4:09:d1:
12:98:5d:44:fe:60:df:54:d7:42:64:da:c0:f9:1b:16:6b:19:
78:73:8d:a8:60:f8:32:dc:e4:69:ab:25:df:17:6e:7a:34:3e:
8e:c7:30:58:26:5c:07:1b:78:13:10:bc:3a:f4:12:57:8b:1c:
64:30:de:70:eb:7c:a7:34:38:31:13:a6:d3:d2:79:34:5c:04:
32:05:26:8e:66:9c:9c:b8:fb:6d:e7:08:be:40:d2:0b:86:0c:
4d:a1:85:a3:3a:17:f5:93:e9:16:01:3d:d3:6c:a5:2d:55:07:
8d:86:3e:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNdGUvrLnA7xTYknwTzATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzM4MTY4Y2Q5ZDVhZjA2MDQwMTNmYzQyNzQxMjZmYzU4
MWYzY2IwHhcNMjYwNzIzMjMwMDUxWhcNMjYwNzI0MjMwMDUxWjAzMTEwLwYDVQQD
EyhkMmZmYmM4MmQxZDFiNzgwNjJmZmJjYzE4MTBiMmQxNjExNTQzOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreoOJYWPCUfi+wQD6bUhdR43icqK
sy0q5ZoCnw3gNNByjrhEM2Gh2gCylx+wuGH0MrJsvZR0TRq1aTC4Gq/0iaM/xHZE
R1bFrxoH/Ecw/oQ7053RNbOtBV72b6owsXjTvavn2ygxRLfA0sSKBABjMlhjKIZr
Ozn0NNGdJTU6JBTASo4z78qyBWwJuC41CtjCQKlyrC49gGxOQJq4dFoaT9Rub0T0
rpiOb4EwntVb8btVIANINgRY7auxpphh/fuZBpeic/VxrFf2ymEUqGfqlWSWZDMP
necV/lTztVFAqqpNVLcx1quThDShUZEbFqYBrVoaid9609ESdXUckfIMcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNL/vILR0beAYv+8wYELLRYRVDnMMB8GA1UdIwQY
MBaAFKQzgWjNnVrwYEAT/EJ0Em/FgfPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjIt
YzlkYjk4MWEyYTJmLzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjItYzlkYjk4MWEyYTJm
LzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIhqye5/
i0RSOCJpD56vQmnVeoqwBfkf+e91DlgD9VCeUV0Xms8cv3hPe5Bdas/UoBtUBEuo
yAzeYuhlEjzTrGTfNs90NIAQ8HQnOHnWkQUgle370VFgzHF/YmvNwkg36zrUPPIl
b+08QXm0cxVL1B09bqJ+sr7N8JChu4hMHz1vKw//FFpupNo1hu/ntAnREphdRP5g
31TXQmTawPkbFmsZeHONqGD4Mtzkaasl3xduejQ+jscwWCZcBxt4ExC8OvQSV4sc
ZDDecOt8pzQ4MROm09J5NFwEMgUmjmacnLj7becIvkDSC4YMTaGFozoX9ZPpFgE9
02ylLVUHjYY+jA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:21:37 2026 by rpki-client