Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: qBA1wvKTvCnsFG/jW4+spmcgNKQj/dsTK7wo8U91g9g=
Subject key identifier: F4:D7:8D:2A:F1:D4:CC:DB:C7:E6:5F:D5:41:E8:CE:2A:EE:96:32:E9
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 019F927F3928442570DB514A9014F4B70339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 05:00:38 +0000
Manifest this update: Fri 24 Jul 2026 05:00:38 +0000
Manifest next update: Sat 25 Jul 2026 05:00:38 +0000
Files and hashes: 1: Svs8WaYMaBYooAK5Llbdr0Xwf0o.roa (hash: ulklpVL+jocMv3vi7VJBHLEzxNJlxmy7adHjaQUdJa4=)
2: liNOwl4ffjTNwLOg4lX3c6vkVXc.roa (hash: ec9XZ/8wZUP1CTV/xvGoOKI7TsGIEdOECU3xzYakfZA=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: NMoSCkDGtTehDAxY19vuCTorCbw9pWxJtYIJN3afD74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:39:28:44:25:70:db:51:4a:90:14:f4:b7:03:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Jul 24 05:00:38 2026 GMT
Not After : Jul 25 05:00:38 2026 GMT
Subject: CN=f4d78d2af1d4ccdbc7e65fd541e8ce2aee9632e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:81:5c:7c:e6:ce:1e:e6:f5:af:1a:c6:7f:
9c:71:5d:d1:b7:ef:bb:7e:d3:69:70:16:16:0b:c3:
92:97:e3:77:5c:7f:5c:f6:4f:ce:12:66:1c:6e:85:
fe:35:e2:b3:ce:11:30:bd:dd:27:d1:fe:df:d2:52:
0d:72:df:cc:fc:02:9f:f6:bb:51:4d:ff:6d:a3:f4:
ca:1c:18:5d:98:4c:1c:f7:40:8f:74:d7:92:cb:74:
ec:c8:e7:8c:c4:a7:ca:ed:fb:67:e9:99:63:2e:a2:
af:3d:32:02:09:ef:d4:a0:65:ad:79:d8:cc:0a:0b:
75:a4:97:a5:ed:ee:87:c2:4a:c3:b8:b1:a1:02:0e:
af:91:1d:d1:6b:7d:22:f3:5b:c7:16:e6:de:09:3f:
05:da:79:a0:2f:64:42:2e:9e:9e:e0:c8:f4:6f:1c:
67:53:5d:8e:ac:64:a5:e6:93:9c:de:77:18:bc:d4:
f0:d7:b4:45:87:03:9e:84:62:21:1a:30:04:8d:25:
c7:2e:38:38:28:48:e3:62:bd:17:30:9a:cb:87:a4:
ca:db:e6:dd:4d:2a:07:b5:b4:3f:10:d7:ab:a1:f3:
fd:2d:31:eb:e8:42:cb:b8:38:69:6f:28:04:8b:f7:
d6:88:b2:56:75:d3:74:6b:f5:ff:7c:85:1a:fb:ed:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D7:8D:2A:F1:D4:CC:DB:C7:E6:5F:D5:41:E8:CE:2A:EE:96:32:E9
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:59:d6:12:38:1a:74:14:21:9e:6b:07:61:f1:e6:15:7f:8f:
e8:36:ac:59:b2:bd:81:46:b0:53:0c:e7:67:5e:9b:ae:15:19:
8d:ab:e8:98:08:e0:94:48:c0:93:87:c6:35:5a:dc:70:88:43:
a4:74:72:35:c0:6e:66:2b:ae:32:f9:e5:04:48:cd:45:41:2f:
60:53:1a:69:6a:33:42:e6:c0:e4:19:a0:a6:ee:c0:42:d1:98:
80:d0:9e:02:74:48:8a:84:21:5f:cf:9f:3f:2c:e8:26:5b:13:
7e:7a:e7:ff:4e:0b:5c:0b:81:59:0d:e6:5e:c2:ab:33:2b:0f:
8d:c0:47:8f:d7:0f:33:a3:b6:ad:f9:c9:c0:6e:98:91:ee:de:
39:b1:72:1d:a8:ca:87:f9:90:be:32:be:5c:49:7a:5f:b9:bf:
34:04:7b:f0:ec:9f:03:a2:45:76:fa:ee:36:72:8d:90:99:6a:
98:ab:d5:59:20:ca:df:1b:f1:89:43:5f:08:44:ae:3f:bb:19:
f4:4a:5f:d3:10:cc:53:8d:b2:a7:5b:da:df:3a:58:86:c8:6e:
79:98:d0:87:ac:fc:11:29:27:3f:70:58:18:7e:ae:f0:88:a7:
74:b5:6e:33:d1:55:17:5d:4c:b1:ba:55:c9:67:4c:ea:ec:8e:
9c:6d:0e:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SfzkoRCVw21FKkBT0twM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWFjODMyM2ViYjZiZTIwZmFlODlkMDk4Y2EyNDEzOGY4
YzkwMDUwHhcNMjYwNzI0MDUwMDM4WhcNMjYwNzI1MDUwMDM4WjAzMTEwLwYDVQQD
EyhmNGQ3OGQyYWYxZDRjY2RiYzdlNjVmZDU0MWU4Y2UyYWVlOTYzMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLWBXHzmzh7m9a8axn+ccV3Rt++7
ftNpcBYWC8OSl+N3XH9c9k/OEmYcboX+NeKzzhEwvd0n0f7f0lINct/M/AKf9rtR
Tf9to/TKHBhdmEwc90CPdNeSy3TsyOeMxKfK7ftn6ZljLqKvPTICCe/UoGWtedjM
Cgt1pJel7e6HwkrDuLGhAg6vkR3Ra30i81vHFubeCT8F2nmgL2RCLp6e4Mj0bxxn
U12OrGSl5pOc3ncYvNTw17RFhwOehGIhGjAEjSXHLjg4KEjjYr0XMJrLh6TK2+bd
TSoHtbQ/ENerofP9LTHr6ELLuDhpbygEi/fWiLJWddN0a/X/fIUa++2MUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTXjSrx1Mzbx+Zf1UHoziruljLpMB8GA1UdIwQY
MBaAFKWayDI+u2viD66J0JjKJBOPjJAFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgt
ODNhZTVkOWM4MzJmLzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgtODNhZTVkOWM4MzJm
LzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1nWEjga
dBQhnmsHYfHmFX+P6DasWbK9gUawUwznZ16brhUZjavomAjglEjAk4fGNVrccIhD
pHRyNcBuZiuuMvnlBEjNRUEvYFMaaWozQubA5Bmgpu7AQtGYgNCeAnRIioQhX8+f
PyzoJlsTfnrn/04LXAuBWQ3mXsKrMysPjcBHj9cPM6O2rfnJwG6Yke7eObFyHajK
h/mQvjK+XEl6X7m/NAR78OyfA6JFdvruNnKNkJlqmKvVWSDK3xvxiUNfCESuP7sZ
9Epf0xDMU42yp1va3zpYhshueZjQh6z8ESknP3BYGH6u8IindLVuM9FVF11MsbpV
yWdM6uyOnG0OrA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:42 2026 by rpki-client