Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier: hAKjXUNilw+4Hgy84MUIsYzyn5NTwC8rblWqHwJpwgc=
Subject key identifier: 79:C6:AA:36:47:5C:2F:0E:7E:7B:32:8B:00:3D:C6:29:46:F2:CE:A7
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 019F9135AFEE8786D12D804AAE2F8ADEE192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number: 0361
Signing time: Thu 23 Jul 2026 23:00:42 +0000
Manifest this update: Thu 23 Jul 2026 23:00:42 +0000
Manifest next update: Fri 24 Jul 2026 23:00:42 +0000
Files and hashes: 1: jYQejTs_VCB1cpCr7qrPeVI5_VI.roa (hash: RuEfXGQ8FdYs+It13SdSHwiFRFM5ZGec+HI06Kuq/Ik=)
2: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: E0V3gjwG2QI8HG30tfvy3Yjw7FCtzKlAdYXBomLxRJY=)
3: sIQZHyrMKrx0aGLhGaxyLwG43WI.roa (hash: 1DHs9q3U0NDHbbr1v8UvKlsFj4sQc1jDRLQRmJtbDIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:af:ee:87:86:d1:2d:80:4a:ae:2f:8a:de:e1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: Jul 23 23:00:42 2026 GMT
Not After : Jul 24 23:00:42 2026 GMT
Subject: CN=79c6aa36475c2f0e7e7b328b003dc62946f2cea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:29:62:46:78:ea:ab:af:4d:59:26:60:89:c6:
ae:42:ce:35:8f:b4:51:0c:48:93:ef:e4:88:d1:e5:
48:bd:38:ed:dc:db:96:49:70:7b:12:07:71:33:ae:
73:f1:6c:4b:2f:ee:5f:e1:c5:4c:80:4a:0b:39:eb:
aa:7a:9a:0d:a1:30:6b:29:3a:43:75:ce:19:c1:6d:
e7:41:dc:56:3b:54:21:b4:19:6b:96:56:94:9a:11:
92:17:0a:d9:e4:fa:c9:7c:1a:84:c0:9d:18:06:fc:
b8:2f:1b:40:1c:35:a1:23:db:4a:20:64:90:b5:96:
af:98:2d:ab:dd:c0:71:f7:41:08:4a:2a:8a:fe:1c:
38:db:7d:40:ec:36:10:c7:e7:32:75:2c:97:2e:3e:
27:94:8e:f7:91:4d:3f:1d:8d:42:cf:26:24:73:7a:
70:31:8f:36:56:b4:f7:98:c9:7c:bd:05:fe:07:88:
68:11:89:cc:e2:2e:00:b2:ad:f7:71:99:b3:9e:97:
d1:f5:66:52:53:b8:79:14:2a:d4:1c:fd:3c:4d:ff:
a7:8b:6d:db:f7:2a:30:68:c6:e3:c7:44:24:5f:41:
df:6a:ff:73:5b:62:02:9e:5b:0e:3b:e1:84:d0:ba:
1a:4a:ea:5a:9a:ca:e9:71:35:37:68:38:da:ec:d2:
b8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C6:AA:36:47:5C:2F:0E:7E:7B:32:8B:00:3D:C6:29:46:F2:CE:A7
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8b:fa:56:ad:8c:b0:c4:5f:bd:a6:ec:25:47:b1:d1:3b:d9:
38:79:59:5d:da:d4:64:37:96:8f:d1:5b:d6:67:7c:25:76:84:
5e:69:9a:ab:7e:3c:aa:f7:7e:81:e7:6a:e1:10:1e:2e:03:04:
b3:d3:41:e6:a4:4f:7d:eb:ed:dd:2f:75:ba:69:6d:a7:45:3e:
41:18:92:32:be:c3:cc:0d:72:7b:82:ec:2a:0a:cb:ea:84:33:
4a:d0:35:75:d7:5f:f6:39:8f:dd:7b:31:93:8b:86:28:13:c8:
b5:77:ba:96:c5:4e:09:86:39:4e:63:23:bd:9b:94:8f:b6:55:
42:33:3e:26:f7:f1:79:7a:56:13:f9:eb:9c:54:8b:8a:06:8b:
af:6c:24:c9:fa:89:eb:f6:10:3a:f7:45:5b:2e:0b:f1:41:27:
b2:02:17:4d:2d:57:43:ef:b4:5b:27:80:f9:d1:34:f6:12:06:
58:af:23:f5:4d:96:6e:7e:44:30:e1:bb:d9:83:8d:f0:14:9a:
c1:0e:99:51:0d:64:3d:1e:36:27:1a:45:16:45:b2:72:21:cb:
70:6d:ea:3d:ec:29:2d:4e:a2:ba:c2:db:95:03:51:d0:f4:ff:
a8:b0:78:67:4b:88:55:67:09:0f:c8:3b:59:ae:28:fd:5a:09:
2d:10:e3:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNa/uh4bRLYBKri+K3uGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjZkNjU3YzBmYTIxODI4ZDMxMzUwNzM1NGRlYzE0ODE1
ODBlZDYwHhcNMjYwNzIzMjMwMDQyWhcNMjYwNzI0MjMwMDQyWjAzMTEwLwYDVQQD
Eyg3OWM2YWEzNjQ3NWMyZjBlN2U3YjMyOGIwMDNkYzYyOTQ2ZjJjZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiliRnjqq69NWSZgicauQs41j7RR
DEiT7+SI0eVIvTjt3NuWSXB7EgdxM65z8WxLL+5f4cVMgEoLOeuqepoNoTBrKTpD
dc4ZwW3nQdxWO1QhtBlrllaUmhGSFwrZ5PrJfBqEwJ0YBvy4LxtAHDWhI9tKIGSQ
tZavmC2r3cBx90EISiqK/hw4231A7DYQx+cydSyXLj4nlI73kU0/HY1CzyYkc3pw
MY82VrT3mMl8vQX+B4hoEYnM4i4Asq33cZmznpfR9WZSU7h5FCrUHP08Tf+ni23b
9yowaMbjx0QkX0Hfav9zW2ICnlsOO+GE0LoaSupamsrpcTU3aDja7NK4CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnGqjZHXC8OfnsyiwA9xilG8s6nMB8GA1UdIwQY
MBaAFKT21lfA+iGCjTE1BzVN7BSBWA7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYt
NWMyNzYzNjQ4ZjFjLzEvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYtNWMyNzYzNjQ4ZjFj
LzEvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4v6Vq2M
sMRfvabsJUex0TvZOHlZXdrUZDeWj9Fb1md8JXaEXmmaq348qvd+gedq4RAeLgME
s9NB5qRPfevt3S91umltp0U+QRiSMr7DzA1ye4LsKgrL6oQzStA1dddf9jmP3Xsx
k4uGKBPItXe6lsVOCYY5TmMjvZuUj7ZVQjM+JvfxeXpWE/nrnFSLigaLr2wkyfqJ
6/YQOvdFWy4L8UEnsgIXTS1XQ++0WyeA+dE09hIGWK8j9U2Wbn5EMOG72YON8BSa
wQ6ZUQ1kPR42JxpFFkWyciHLcG3qPewpLU6iusLblQNR0PT/qLB4Z0uIVWcJD8g7
Wa4o/VoJLRDjCg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:07:48 2026 by rpki-client