Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: NDasY6ov5a5RSz/1JBD0jCjecImxAOHJbwz9YWNHklk=
Subject key identifier: CE:8B:50:E7:6F:41:09:E0:B9:48:BD:74:A4:8C:0C:B3:96:6A:F6:44
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 019F94DC32539C6896254C65902831A2D0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 16:01:26 +0000
Manifest this update: Fri 24 Jul 2026 16:01:26 +0000
Manifest next update: Sat 25 Jul 2026 16:01:26 +0000
Files and hashes: 1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: Tul6P/4aOUbkmFdu1/nJmIO0OwbTEIwznwjN0sUF3SQ=)
3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:32:53:9c:68:96:25:4c:65:90:28:31:a2:d0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Jul 24 16:01:26 2026 GMT
Not After : Jul 25 16:01:26 2026 GMT
Subject: CN=ce8b50e76f4109e0b948bd74a48c0cb3966af644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:41:21:ab:09:9b:09:94:62:df:86:a9:5d:
ca:21:b9:21:a8:72:0f:04:38:00:04:27:e0:d6:02:
3e:eb:0d:9c:53:27:7a:2c:d1:3c:6f:12:e1:ff:96:
59:3e:35:eb:e1:22:35:9e:8c:4b:6b:9c:7a:bb:28:
d4:5d:a7:ea:27:fe:06:21:1a:74:29:62:3b:b0:fd:
38:be:b6:31:f0:64:e0:65:40:2b:2c:ba:df:d1:6e:
af:de:e3:28:64:fa:66:ef:59:70:1d:95:fe:56:66:
7d:80:da:df:0f:a9:f5:f0:ca:30:24:c5:d0:5f:f2:
e3:c0:7b:7e:af:46:b9:79:ce:e5:cc:ef:09:31:29:
38:bd:37:33:d5:55:26:2d:18:c4:e0:4d:b2:b5:36:
51:0c:32:bf:35:bd:29:98:b6:42:86:b6:50:9b:a6:
33:f6:73:99:11:4d:76:ff:b3:0b:0f:62:a2:a4:43:
52:b8:de:85:43:a1:d1:fc:86:63:88:e6:77:cd:5a:
98:f2:45:09:a6:03:39:07:a0:72:08:81:69:91:c1:
87:da:86:29:d2:2c:0e:00:01:8e:23:7b:8c:89:c4:
fe:29:88:ad:68:7d:ca:44:a1:ea:80:30:f9:05:f7:
7e:4c:66:e3:24:69:10:14:8e:3f:04:c5:ba:03:8f:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8B:50:E7:6F:41:09:E0:B9:48:BD:74:A4:8C:0C:B3:96:6A:F6:44
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0d:9d:9a:2e:3d:8d:01:fc:04:8b:5a:fe:b7:22:09:f2:f6:
ab:ca:68:45:1e:94:72:f8:15:21:05:bc:a4:03:84:2c:a9:e9:
a7:fb:d8:01:d1:9e:9f:4c:e3:d5:aa:91:f9:2f:9a:11:66:a9:
7e:86:65:3d:9c:d6:f5:5c:17:d9:2e:57:da:72:83:4a:89:c0:
bc:b5:5b:16:d0:41:c1:fb:12:3e:27:5c:f9:61:93:17:9f:c1:
96:db:c9:37:cf:a9:12:bd:32:9a:b8:70:7f:3d:1f:b0:a4:0e:
cd:ee:83:87:48:9d:15:af:ad:13:56:24:92:5e:6a:e2:5a:7e:
f9:36:dc:51:01:1c:ce:72:e2:fd:6e:cf:b4:55:5b:54:25:f7:
18:89:cc:6f:55:93:9f:7a:14:f4:16:fc:11:20:cf:5b:b1:a4:
4e:3d:07:a7:d5:b0:8b:61:fc:2c:47:bf:ac:ac:d0:d6:cd:c9:
a5:b6:53:75:f2:47:00:6a:9a:9f:84:f0:20:17:b9:70:f0:a2:
68:0e:96:d0:42:c1:55:f8:36:bf:0f:2a:7f:1b:65:8f:41:64:
f9:2b:06:d4:b4:05:23:1d:72:ee:61:40:5b:01:44:56:d8:8f:
ff:a2:34:8d:d7:9b:07:d6:aa:0c:75:05:8d:af:20:67:fe:50:
27:84:47:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U3DJTnGiWJUxlkCgxotD2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzVkNDlkZWQyMDU2NmNhNzQ1YzI4ZjgwY2ZkOWE5MmY0
YjdkNDcwHhcNMjYwNzI0MTYwMTI2WhcNMjYwNzI1MTYwMTI2WjAzMTEwLwYDVQQD
EyhjZThiNTBlNzZmNDEwOWUwYjk0OGJkNzRhNDhjMGNiMzk2NmFmNjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCFBIasJmwmUYt+GqV3KIbkhqHIP
BDgABCfg1gI+6w2cUyd6LNE8bxLh/5ZZPjXr4SI1noxLa5x6uyjUXafqJ/4GIRp0
KWI7sP04vrYx8GTgZUArLLrf0W6v3uMoZPpm71lwHZX+VmZ9gNrfD6n18MowJMXQ
X/LjwHt+r0a5ec7lzO8JMSk4vTcz1VUmLRjE4E2ytTZRDDK/Nb0pmLZChrZQm6Yz
9nOZEU12/7MLD2KipENSuN6FQ6HR/IZjiOZ3zVqY8kUJpgM5B6ByCIFpkcGH2oYp
0iwOAAGOI3uMicT+KYitaH3KRKHqgDD5Bfd+TGbjJGkQFI4/BMW6A49jUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6LUOdvQQnguUi9dKSMDLOWavZEMB8GA1UdIwQY
MBaAFD511J3tIFZsp0XCj4DP2akvS31HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2Qt
ODM2Mzg0NzVkOGFiLzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2QtODM2Mzg0NzVkOGFi
LzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuw2dmi49
jQH8BIta/rciCfL2q8poRR6UcvgVIQW8pAOELKnpp/vYAdGen0zj1aqR+S+aEWap
foZlPZzW9VwX2S5X2nKDSonAvLVbFtBBwfsSPidc+WGTF5/BltvJN8+pEr0ymrhw
fz0fsKQOze6Dh0idFa+tE1Ykkl5q4lp++TbcUQEcznLi/W7PtFVbVCX3GInMb1WT
n3oU9Bb8ESDPW7GkTj0Hp9Wwi2H8LEe/rKzQ1s3JpbZTdfJHAGqan4TwIBe5cPCi
aA6W0ELBVfg2vw8qfxtlj0Fk+SsG1LQFIx1y7mFAWwFEVtiP/6I0jdebB9aqDHUF
ja8gZ/5QJ4RHZA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:49 2026 by rpki-client