Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: Wm/Yl8MhMMYoPJfjj/5XM/AMN5GRp6+tlTyXlc5LRNI=
Subject key identifier: B5:D3:A4:0A:FA:95:01:74:12:8A:A4:4B:54:12:D1:8E:76:97:10:EC
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 01A0EC2EEF5AF7E3970E9701E438EA47DABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 1A7C
Signing time: Tue 29 Sep 2026 08:01:33 +0000
Manifest this update: Tue 29 Sep 2026 08:01:33 +0000
Manifest next update: Wed 30 Sep 2026 08:01:33 +0000
Files and hashes: 1: Svs8WaYMaBYooAK5Llbdr0Xwf0o.roa (hash: ulklpVL+jocMv3vi7VJBHLEzxNJlxmy7adHjaQUdJa4=)
2: liNOwl4ffjTNwLOg4lX3c6vkVXc.roa (hash: ec9XZ/8wZUP1CTV/xvGoOKI7TsGIEdOECU3xzYakfZA=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: 3y1woW9CGOyp9wBhB4BltHu80bvBHeT9tYIG+EgJUSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:ef:5a:f7:e3:97:0e:97:01:e4:38:ea:47:da:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Sep 29 08:01:33 2026 GMT
Not After : Sep 30 08:01:33 2026 GMT
Subject: CN=b5d3a40afa950174128aa44b5412d18e769710ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:cd:ae:fc:ef:a1:90:0c:c6:65:78:f9:7f:
75:94:6d:96:78:51:df:f5:a1:b4:c0:22:44:bc:90:
8a:f8:16:c4:cf:b2:6e:bc:9b:78:5b:50:29:fb:bf:
f1:0f:3d:27:a0:30:79:55:af:0a:2a:15:d9:43:9c:
c4:c5:bd:45:99:a6:c3:17:81:93:94:ac:13:82:c2:
07:63:07:0c:26:3d:88:c5:e7:df:ca:fd:a8:8b:03:
e5:7e:2c:71:81:fe:90:4c:60:35:dd:a4:8a:5f:7c:
38:04:4f:87:13:4a:f6:ca:9c:c4:c2:d2:35:6a:e1:
35:57:aa:a1:d6:7e:fa:2e:42:9c:a7:99:58:3b:df:
64:f7:aa:8d:56:6c:1d:5d:f6:ec:b8:6a:be:9d:e2:
7f:27:40:c3:a7:b9:e7:3b:58:40:15:af:5b:66:03:
21:da:39:61:6b:29:db:44:8e:09:91:ca:70:64:f8:
b1:34:f7:5b:04:6e:ea:fe:73:49:89:b5:6e:13:8f:
b2:92:ca:e7:7a:1a:e2:2e:b2:c7:48:30:1f:cd:d6:
5f:ef:75:5a:92:30:ce:d5:e7:2a:bc:d4:91:20:5f:
05:3f:36:c6:ef:80:de:df:b9:2a:3b:c9:46:14:c6:
19:d1:c8:83:86:de:c1:38:cf:bd:8d:a9:3e:d2:f4:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:A4:0A:FA:95:01:74:12:8A:A4:4B:54:12:D1:8E:76:97:10:EC
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c2:1e:b0:41:bb:d5:34:8a:b1:88:24:b5:49:7f:bf:0a:c1:
d1:cc:d0:8b:bd:aa:3d:94:26:a9:6c:87:31:55:e2:a2:97:45:
23:1a:41:97:2a:ce:7d:b2:d9:d3:ad:ab:14:69:5d:70:a4:0b:
98:8b:fd:85:42:02:fd:29:12:aa:0a:34:50:4a:b8:a8:50:70:
b4:50:ec:46:d5:dc:ee:7e:0d:41:b8:40:10:f0:36:0f:44:82:
0a:1b:99:f3:27:b7:d2:6e:1c:d7:ef:65:f8:48:8c:72:c6:02:
c9:30:63:c8:73:27:d4:bc:91:b6:08:d0:51:54:85:a6:e6:93:
75:54:49:a5:a5:de:7a:39:95:75:a4:5d:a1:16:a4:aa:91:e8:
ae:91:01:87:a8:7b:53:31:31:69:61:b5:eb:dd:3b:e3:fe:88:
11:61:61:36:c2:4c:08:67:be:58:6a:b6:17:27:0b:ab:09:e4:
68:f1:f8:12:ea:a5:a0:d1:3f:e2:ae:c2:f0:3f:2a:c6:f5:ec:
dd:9d:73:ad:3b:1f:dd:4a:bb:ff:55:44:c4:7b:a1:9a:69:13:
3f:d2:6d:c1:c7:1f:26:95:62:fc:ea:fa:fc:c4:73:e9:a0:e1:
ab:cd:2b:20:2b:96:2e:9e:7d:b0:23:54:8e:d7:46:21:ce:0c:
b3:2d:bd:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsLu9a9+OXDpcB5DjqR9q6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWFjODMyM2ViYjZiZTIwZmFlODlkMDk4Y2EyNDEzOGY4
YzkwMDUwHhcNMjYwOTI5MDgwMTMzWhcNMjYwOTMwMDgwMTMzWjAzMTEwLwYDVQQD
EyhiNWQzYTQwYWZhOTUwMTc0MTI4YWE0NGI1NDEyZDE4ZTc2OTcxMGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqjNrvzvoZAMxmV4+X91lG2WeFHf
9aG0wCJEvJCK+BbEz7JuvJt4W1Ap+7/xDz0noDB5Va8KKhXZQ5zExb1FmabDF4GT
lKwTgsIHYwcMJj2Ixeffyv2oiwPlfixxgf6QTGA13aSKX3w4BE+HE0r2ypzEwtI1
auE1V6qh1n76LkKcp5lYO99k96qNVmwdXfbsuGq+neJ/J0DDp7nnO1hAFa9bZgMh
2jlhaynbRI4JkcpwZPixNPdbBG7q/nNJibVuE4+yksrnehriLrLHSDAfzdZf73Va
kjDO1ecqvNSRIF8FPzbG74De37kqO8lGFMYZ0ciDht7BOM+9jak+0vQUCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXTpAr6lQF0EoqkS1QS0Y52lxDsMB8GA1UdIwQY
MBaAFKWayDI+u2viD66J0JjKJBOPjJAFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgt
ODNhZTVkOWM4MzJmLzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgtODNhZTVkOWM4MzJm
LzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssIesEG7
1TSKsYgktUl/vwrB0czQi72qPZQmqWyHMVXiopdFIxpBlyrOfbLZ062rFGldcKQL
mIv9hUIC/SkSqgo0UEq4qFBwtFDsRtXc7n4NQbhAEPA2D0SCChuZ8ye30m4c1+9l
+EiMcsYCyTBjyHMn1LyRtgjQUVSFpuaTdVRJpaXeejmVdaRdoRakqpHorpEBh6h7
UzExaWG169074/6IEWFhNsJMCGe+WGq2FycLqwnkaPH4EuqloNE/4q7C8D8qxvXs
3Z1zrTsf3Uq7/1VExHuhmmkTP9JtwccfJpVi/Or6/MRz6aDhq80rICuWLp59sCNU
jtdGIc4Msy29pw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:31:52 2026 by rpki-client