Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: v3buOUJTYV1qkv3lm0B6SxO6sCAlvcOzmf9eTOnHAOQ=
Subject key identifier: 49:B1:47:21:BE:ED:09:B8:DC:CA:A1:E1:5B:53:48:BC:02:9C:15:AB
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 019F916D7986B1A7AC527771786A3A7412D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 0C49
Signing time: Fri 24 Jul 2026 00:01:38 +0000
Manifest this update: Fri 24 Jul 2026 00:01:38 +0000
Manifest next update: Sat 25 Jul 2026 00:01:38 +0000
Files and hashes: 1: 6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa (hash: wpsN0tsYTVD9eZ1wIkFPmbb5yPxiazJ0MhFoB9FJQW4=)
2: DR9MoQCYtXaLoml4Dm1_5qJwPs4.roa (hash: nXlN3VKxLNyqdBBXWDPV2SzM6R5K4D1KJpMD50qdg/A=)
3: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: NoTKz9ZxbCiQfMVLhEy44R55jax9N9qZ7qF8q2IAz9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:79:86:b1:a7:ac:52:77:71:78:6a:3a:74:12:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Jul 24 00:01:38 2026 GMT
Not After : Jul 25 00:01:38 2026 GMT
Subject: CN=49b14721beed09b8dccaa1e15b5348bc029c15ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:d2:9c:c7:6f:2b:d2:4c:51:e5:89:20:d5:
61:c4:d8:14:66:ac:2c:92:78:d3:c8:84:0a:cf:e3:
6c:0c:20:af:65:a2:bb:b7:be:71:fc:71:80:d5:f4:
d1:f7:c6:c9:5c:2d:4e:a6:90:50:e7:21:88:f2:9e:
20:c1:a1:00:22:03:2d:41:b2:65:c4:d3:a5:80:df:
3b:81:fd:a5:fb:0e:65:88:0c:d3:16:89:50:97:55:
32:ef:b7:f7:55:de:d8:53:da:9a:22:e7:dd:8b:e6:
30:ab:6f:d0:62:1a:12:9b:7c:23:43:49:0f:e4:a2:
27:6e:ac:7f:77:5f:9a:18:a5:2c:f7:69:b9:0d:48:
9f:70:9f:a3:0f:56:49:a8:a6:da:3c:9f:75:88:53:
a1:d3:e4:92:07:d9:71:7e:2e:37:59:4e:54:06:2f:
42:3c:cb:ff:f1:ea:e9:31:80:19:83:24:6f:9f:03:
e9:3b:c2:29:2b:8b:68:1b:9d:79:e2:f9:69:1d:5b:
3e:af:d6:98:72:19:d1:45:9a:b6:7b:e7:d3:a7:28:
de:4c:55:f0:51:f2:c8:19:e0:01:8a:47:0c:c9:51:
3b:c3:9c:ea:4b:e9:ee:89:e0:14:89:8d:6b:76:f0:
fb:ad:82:79:93:3e:23:9f:1f:83:3d:1e:4f:29:79:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B1:47:21:BE:ED:09:B8:DC:CA:A1:E1:5B:53:48:BC:02:9C:15:AB
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d2:f7:02:26:54:f7:ba:66:c4:ad:1c:10:2a:88:e8:44:bb:
e0:09:76:3c:ae:bf:7e:2d:97:ad:c9:ec:0b:4f:b9:7e:af:ec:
60:c4:e0:ac:df:8d:e4:35:5c:19:f1:a6:7d:12:34:4b:d3:04:
bc:d1:bf:41:f1:d7:65:75:8a:8e:25:23:79:25:41:64:16:ef:
03:06:5d:ab:99:78:64:cb:8d:66:5f:ed:f6:98:1a:48:b0:a3:
cf:1b:05:8d:b4:8c:7b:7e:5e:6b:61:9c:77:78:17:88:67:2e:
5b:aa:e3:77:b2:45:ab:54:3c:88:dc:d6:df:95:21:24:b7:df:
9c:6d:22:f4:47:0a:2e:f1:5e:3f:ca:6c:fb:8b:4e:b0:1f:94:
99:2b:85:53:b8:7d:2f:d1:22:5a:f9:c6:87:76:96:fa:8c:f1:
1d:f8:01:0c:69:2f:f9:e2:9c:2d:b5:e0:9b:c8:73:27:7f:45:
31:2e:39:bc:59:a2:49:f0:8f:7f:b0:2e:8b:c5:be:31:2f:02:
2d:8c:e4:a9:f4:78:27:64:d8:51:1f:53:a1:b2:f5:00:e2:06:
11:04:f9:af:9e:b9:ce:b9:38:57:ee:c5:06:b9:1a:53:3b:e8:
a5:0e:f1:99:8e:26:ca:d4:55:2a:9b:79:3c:9f:02:82:15:59:
bd:e7:63:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbXmGsaesUndxeGo6dBLRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZGUyNDcwYzg1NjM5NDk0ODdhM2U3ODc0M2M1NDRjOTll
YzhhNjQwHhcNMjYwNzI0MDAwMTM4WhcNMjYwNzI1MDAwMTM4WjAzMTEwLwYDVQQD
Eyg0OWIxNDcyMWJlZWQwOWI4ZGNjYWExZTE1YjUzNDhiYzAyOWMxNWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcjSnMdvK9JMUeWJINVhxNgUZqws
knjTyIQKz+NsDCCvZaK7t75x/HGA1fTR98bJXC1OppBQ5yGI8p4gwaEAIgMtQbJl
xNOlgN87gf2l+w5liAzTFolQl1Uy77f3Vd7YU9qaIufdi+Ywq2/QYhoSm3wjQ0kP
5KInbqx/d1+aGKUs92m5DUifcJ+jD1ZJqKbaPJ91iFOh0+SSB9lxfi43WU5UBi9C
PMv/8erpMYAZgyRvnwPpO8IpK4toG5154vlpHVs+r9aYchnRRZq2e+fTpyjeTFXw
UfLIGeABikcMyVE7w5zqS+nuieAUiY1rdvD7rYJ5kz4jnx+DPR5PKXlHywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmxRyG+7Qm43Mqh4VtTSLwCnBWrMB8GA1UdIwQY
MBaAFDzeJHDIVjlJSHo+eHQ8VEyZ7IpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUt
NDQxNzFiMmY1OTllLzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUtNDQxNzFiMmY1OTll
LzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdL3AiZU
97pmxK0cECqI6ES74Al2PK6/fi2XrcnsC0+5fq/sYMTgrN+N5DVcGfGmfRI0S9ME
vNG/QfHXZXWKjiUjeSVBZBbvAwZdq5l4ZMuNZl/t9pgaSLCjzxsFjbSMe35ea2Gc
d3gXiGcuW6rjd7JFq1Q8iNzW35UhJLffnG0i9EcKLvFeP8ps+4tOsB+UmSuFU7h9
L9EiWvnGh3aW+ozxHfgBDGkv+eKcLbXgm8hzJ39FMS45vFmiSfCPf7Aui8W+MS8C
LYzkqfR4J2TYUR9TobL1AOIGEQT5r565zrk4V+7FBrkaUzvopQ7xmY4mytRVKpt5
PJ8CghVZvedjYw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:28:53 2026 by rpki-client