Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: odJ7+K/gQ1vKYHsLXxnyx6G+2+/kI2YRK/ro15nNXf0=
Subject key identifier: CF:AF:71:91:B4:0A:42:C3:29:52:08:6C:C0:5C:DB:4C:C0:74:DE:6F
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019E1E6C9972F57F6FCF8D2BA40C0E39645B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 1347
Signing time: Tue 12 May 2026 23:01:34 +0000
Manifest this update: Tue 12 May 2026 23:01:34 +0000
Manifest next update: Wed 13 May 2026 23:01:34 +0000
Files and hashes: 1: Owu-o7JvEybmXtpQNjtKXjhH9ug.roa (hash: 89sGeUxvhpVypElkHwSDvmrZnRJHBtaKeL9yMz7nC6U=)
2: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: wsKraaUE+U5y4iYh+4xfhYtK0nUtoPZ3UlEP7ZSTIeM=)
3: _b_jh41DtvYlyJbVt2vmUxy_03c.roa (hash: Y4f7kKKKelGhsZykUm6x2Et6p6M+4yMQNJ8fkfC21Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:99:72:f5:7f:6f:cf:8d:2b:a4:0c:0e:39:64:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: May 12 23:01:34 2026 GMT
Not After : May 13 23:01:34 2026 GMT
Subject: CN=cfaf7191b40a42c32952086cc05cdb4cc074de6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:47:b3:8b:a1:35:24:a7:7b:19:73:62:14:
16:a9:97:f9:f8:02:bd:e9:eb:bf:b4:16:be:5e:bf:
d5:ed:42:c5:38:b9:9b:35:21:92:41:12:af:0c:38:
7d:60:44:6c:80:0b:11:8b:2f:57:fd:04:9a:3c:b4:
92:dd:21:60:8f:ce:62:f3:9c:ba:81:1d:97:47:ad:
b9:62:25:2e:70:63:60:24:4e:2c:05:2d:99:8f:49:
25:24:08:88:77:6a:80:26:b1:01:a3:eb:58:bd:66:
25:20:2c:02:98:94:fd:b5:d2:d4:2d:00:58:ca:d8:
fa:0a:be:49:8a:5e:32:d8:54:1d:8e:bc:c5:43:a3:
ba:ef:07:93:07:97:ec:e8:71:84:cd:c2:bd:c8:c3:
86:b0:62:cc:ab:b1:a0:36:96:37:4f:b0:8b:49:f6:
eb:c3:cc:a8:af:12:25:bb:e5:30:7f:c9:4f:a8:26:
db:00:1f:47:fd:d7:eb:63:c8:ba:49:65:98:1d:03:
57:fa:e4:0c:e3:87:85:ae:b1:6f:02:45:c3:37:13:
4c:fa:af:40:bc:93:b3:4b:14:77:26:a7:08:20:93:
76:a7:38:dd:02:06:1a:4b:18:d2:7b:79:cb:c9:6e:
ee:69:f4:d8:0c:e6:a3:5d:42:55:b2:d6:db:66:65:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AF:71:91:B4:0A:42:C3:29:52:08:6C:C0:5C:DB:4C:C0:74:DE:6F
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8a:fc:63:52:69:23:25:12:42:c9:a8:87:c5:ee:64:4a:c4:
32:20:21:72:00:63:ac:c0:78:55:bd:a2:16:9b:35:64:3c:3b:
8a:49:0b:fe:73:b2:24:17:21:df:f9:f0:d7:98:21:a2:ab:fc:
fa:50:51:c0:80:e6:af:1c:57:a1:1e:c9:ed:0a:4b:1e:33:f9:
da:9d:b8:60:9f:d3:9b:14:48:2a:bc:3d:63:e6:6f:d5:3d:e2:
c5:78:56:bf:56:be:7d:da:d3:3d:35:11:f7:86:4a:25:8a:43:
11:b2:e0:bf:1f:1e:c1:28:99:6d:67:dd:a5:9b:6a:a9:71:b0:
ee:6b:27:d4:c9:2c:cb:62:84:23:73:59:d5:8d:b5:57:3e:35:
5f:23:57:88:e3:f7:d5:e7:bd:1a:69:dd:d6:2b:cf:5a:d7:29:
f2:40:b6:0f:bc:b4:d4:c7:6e:dc:52:31:bb:5f:7c:6d:c4:e1:
df:7a:f2:67:39:92:88:ea:de:fd:12:f4:cd:77:ff:94:e9:9e:
61:51:04:05:b9:2c:d7:29:80:d0:88:50:11:3f:c9:ce:53:34:
6c:29:2a:cc:ee:ee:71:c7:25:14:b8:36:f3:ab:02:9a:d4:51:
64:1e:af:a8:92:3f:1c:e3:aa:ff:b3:9b:e5:73:b4:97:ea:22:
a1:3f:94:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebJly9X9vz40rpAwOOWRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZmEyOTM2OGM4YmU2OWM4ZWRkNWFhMTkzNTU3ZmNiYTJh
NTdlYzgwHhcNMjYwNTEyMjMwMTM0WhcNMjYwNTEzMjMwMTM0WjAzMTEwLwYDVQQD
EyhjZmFmNzE5MWI0MGE0MmMzMjk1MjA4NmNjMDVjZGI0Y2MwNzRkZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs51Hs4uhNSSnexlzYhQWqZf5+AK9
6eu/tBa+Xr/V7ULFOLmbNSGSQRKvDDh9YERsgAsRiy9X/QSaPLSS3SFgj85i85y6
gR2XR625YiUucGNgJE4sBS2Zj0klJAiId2qAJrEBo+tYvWYlICwCmJT9tdLULQBY
ytj6Cr5Jil4y2FQdjrzFQ6O67weTB5fs6HGEzcK9yMOGsGLMq7GgNpY3T7CLSfbr
w8yorxIlu+Uwf8lPqCbbAB9H/dfrY8i6SWWYHQNX+uQM44eFrrFvAkXDNxNM+q9A
vJOzSxR3JqcIIJN2pzjdAgYaSxjSe3nLyW7uafTYDOajXUJVstbbZmWsyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+vcZG0CkLDKVIIbMBc20zAdN5vMB8GA1UdIwQY
MBaAFD36KTaMi+acjt1aoZNVf8uipX7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODkt
YmQ1OGQwMDIxYTA5LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODktYmQ1OGQwMDIxYTA5
LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIr8Y1Jp
IyUSQsmoh8XuZErEMiAhcgBjrMB4Vb2iFps1ZDw7ikkL/nOyJBch3/nw15ghoqv8
+lBRwIDmrxxXoR7J7QpLHjP52p24YJ/TmxRIKrw9Y+Zv1T3ixXhWv1a+fdrTPTUR
94ZKJYpDEbLgvx8ewSiZbWfdpZtqqXGw7msn1Mksy2KEI3NZ1Y21Vz41XyNXiOP3
1ee9Gmnd1ivPWtcp8kC2D7y01Mdu3FIxu198bcTh33ryZzmSiOre/RL0zXf/lOme
YVEEBbks1ymA0IhQET/JzlM0bCkqzO7uccclFLg286sCmtRRZB6vqJI/HOOq/7Ob
5XO0l+oioT+UMw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:35:48 2026 by rpki-client