Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier: 5LoBz2+BTha17z8DPCmNUiiDaumfzmBuKjZAy3x9fWg=
Subject key identifier: FE:35:18:E0:54:F8:B1:1A:8F:61:D0:41:60:E8:B7:19:97:2F:C3:C6
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 019F8FEC0735AEE00E90137E3F4D3EF3CA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number: 19CD
Signing time: Thu 23 Jul 2026 17:00:37 +0000
Manifest this update: Thu 23 Jul 2026 17:00:37 +0000
Manifest next update: Fri 24 Jul 2026 17:00:37 +0000
Files and hashes: 1: 7UycSOA2fNBupvFy-hFdJV1v7Io.roa (hash: 5kwOqNqNs3Py67MnZDjj6z2WyhVaijv3n26KPo38psM=)
2: EUznPNdi1RBuO_YCf9akt2u9WRY.roa (hash: LZ23fGDWAJm3pcS6NWs5vwLClCe20PqadqZJEm5+Myk=)
3: VHAZMRbuJy6K49Zh7bvrBNs8QHU.asa (hash: erFKugp76cbDaqZL6jbZ+AatD/saCuONTcWq0wMAJBI=)
4: arHeDdPCjS_AVATAetTx45LL1Dk.roa (hash: wzrmHuwOdDJUETKg+nffMJxHljjlvyXkAo4P+Hrjp2w=)
5: bhbbDS-1fRi0YZYd4HQcXgCmraM.roa (hash: Oc1LIi9fo5CXFk5Nkm2KdL+/MECS7o+E4CeQBySDINk=)
6: gugoFb8q0SHtyIBkY0PLePdn0z4.roa (hash: PfJgvUjin+qon9RPc3E2cAaH5BLLpJd7HD9BJAEBX68=)
7: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: X8/NpKT/8WaM3Mj2/2Ss3UuWNffXsLaW3yl3cfqYVkw=)
8: xoRDajz4eJy11O_J5fLAv4U4v9E.roa (hash: CkGw0sLJe5mjxRbSsZKMcGEgfVdDoPyOYU+L3J4izT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:07:35:ae:e0:0e:90:13:7e:3f:4d:3e:f3:ca:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Jul 23 17:00:37 2026 GMT
Not After : Jul 24 17:00:37 2026 GMT
Subject: CN=fe3518e054f8b11a8f61d04160e8b719972fc3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:4b:9d:82:b5:89:02:ab:bc:6f:1a:e8:a1:
99:ce:a7:e4:ba:b6:35:b6:0d:e5:4b:a9:1b:ab:07:
2e:c7:02:fb:51:9b:9a:52:af:d5:ce:c4:04:e4:ea:
d7:2e:07:08:f8:24:32:d4:d9:8c:ce:95:ad:97:ed:
f4:28:e4:71:a3:65:01:83:c8:39:61:7f:ed:0c:c0:
1a:b6:54:ee:88:a6:29:45:b8:37:0c:ef:06:d3:97:
50:a5:84:5d:bc:cb:92:c4:af:bf:eb:8c:a4:f9:c7:
c3:e0:06:bc:8e:98:f3:d1:ce:1b:d1:16:e5:70:df:
a6:75:86:c1:bd:46:ee:4b:f5:1b:91:99:6b:59:17:
58:42:93:06:13:87:62:60:03:8e:45:b9:ad:d0:ea:
bd:4e:22:a5:5a:c7:8f:7b:03:88:87:91:66:c5:2a:
e0:9e:07:f9:fa:75:67:fd:94:24:58:63:e3:a1:37:
0a:0f:59:30:62:28:47:47:91:ac:ae:52:c4:72:22:
54:15:da:d6:fe:34:3e:5a:c4:07:39:a0:70:d6:72:
40:a5:9d:1b:7f:54:0b:f7:3d:2b:52:72:7b:13:7d:
b2:f7:92:7f:26:27:7a:d1:1e:bc:d9:2b:2e:32:55:
5b:a6:ff:08:fd:db:20:43:c5:29:66:98:d5:58:7d:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:35:18:E0:54:F8:B1:1A:8F:61:D0:41:60:E8:B7:19:97:2F:C3:C6
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d8:a9:1c:ed:de:da:63:86:7a:db:5c:be:eb:aa:cc:b7:e5:
22:db:1b:8d:94:16:9f:34:f9:cf:34:51:8b:e1:48:94:69:23:
40:49:63:18:3f:18:19:f7:04:1f:73:ee:6f:c5:fb:b7:7b:cb:
6e:30:6e:c7:11:5a:23:92:8a:b0:6e:e8:93:7d:8e:8a:4f:0f:
c2:c3:3a:9c:16:3e:8c:6d:f8:85:f2:5e:12:e6:1b:10:d9:07:
06:42:9c:02:91:78:79:d8:0b:3a:ea:62:39:e4:13:d3:e2:67:
39:46:c9:2b:32:f6:ca:7c:e3:d3:00:7a:a9:4c:f9:97:df:b0:
cd:69:25:0a:88:ff:c0:d5:46:7d:77:e5:3f:79:a5:8b:6d:ba:
b9:39:85:c0:ad:22:da:5a:28:e3:23:12:40:ad:16:ad:ca:20:
b1:1d:3a:7f:72:1c:38:a0:6c:00:72:14:36:ce:34:ed:1e:85:
a0:36:8a:23:20:2b:05:c2:a7:0b:61:9f:f9:4b:08:d3:8e:5a:
d6:ca:a1:31:7a:06:03:d3:02:4a:72:e7:4d:a7:54:99:ac:59:
48:fa:90:93:65:77:66:11:5d:4c:ec:c3:6d:0a:61:5c:8e:d7:
25:1e:6c:49:5e:d6:ff:0a:da:33:61:2e:4c:5e:ef:5e:dd:2c:
3d:97:8c:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7Ac1ruAOkBN+P00+88pJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTk5MDNkYWI4NWY2YTU5NzcyYjNlZGZkNGJmMGU0OTFh
ZjU3YzQwHhcNMjYwNzIzMTcwMDM3WhcNMjYwNzI0MTcwMDM3WjAzMTEwLwYDVQQD
EyhmZTM1MThlMDU0ZjhiMTFhOGY2MWQwNDE2MGU4YjcxOTk3MmZjM2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OxLnYK1iQKrvG8a6KGZzqfkurY1
tg3lS6kbqwcuxwL7UZuaUq/VzsQE5OrXLgcI+CQy1NmMzpWtl+30KORxo2UBg8g5
YX/tDMAatlTuiKYpRbg3DO8G05dQpYRdvMuSxK+/64yk+cfD4Aa8jpjz0c4b0Rbl
cN+mdYbBvUbuS/UbkZlrWRdYQpMGE4diYAOORbmt0Oq9TiKlWsePewOIh5FmxSrg
ngf5+nVn/ZQkWGPjoTcKD1kwYihHR5GsrlLEciJUFdrW/jQ+WsQHOaBw1nJApZ0b
f1QL9z0rUnJ7E32y95J/Jid60R682SsuMlVbpv8I/dsgQ8UpZpjVWH01swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP41GOBU+LEaj2HQQWDotxmXL8PGMB8GA1UdIwQY
MBaAFKSZkD2rhfall3Kz7f1L8OSRr1fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQt
NTdlYzEyZTg2NDFlLzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQtNTdlYzEyZTg2NDFl
LzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtipHO3e
2mOGettcvuuqzLflItsbjZQWnzT5zzRRi+FIlGkjQEljGD8YGfcEH3Pub8X7t3vL
bjBuxxFaI5KKsG7ok32Oik8PwsM6nBY+jG34hfJeEuYbENkHBkKcApF4edgLOupi
OeQT0+JnOUbJKzL2ynzj0wB6qUz5l9+wzWklCoj/wNVGfXflP3mli226uTmFwK0i
2loo4yMSQK0WrcogsR06f3IcOKBsAHIUNs407R6FoDaKIyArBcKnC2Gf+UsI045a
1sqhMXoGA9MCSnLnTadUmaxZSPqQk2V3ZhFdTOzDbQphXI7XJR5sSV7W/wraM2Eu
TF7vXt0sPZeMXw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:29 2026 by rpki-client