Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
File: pszH03YZ_dof84uT_s5gq9SYq4Q.mft (raw, json)
Hash identifier: T9EXlYzxKbiW4B5xjscrT1rIhPAu2WVhFW0qaIsU96Q=
Subject key identifier: 0D:07:F3:D6:CD:50:41:2D:F4:AA:AB:84:D2:A1:4F:AF:77:64:8A:98
Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
Certificate issuer: /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Certificate serial: 019F93C8C744FCF357DABCB4FF8248C384E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
Manifest number: 02C1
Signing time: Fri 24 Jul 2026 11:00:36 +0000
Manifest this update: Fri 24 Jul 2026 11:00:36 +0000
Manifest next update: Sat 25 Jul 2026 11:00:36 +0000
Files and hashes: 1: cNWWHlQTLoBnWDX0Cr-HJhDwkyQ.roa (hash: RBDJxnmtcnqGTkRo8S/I5iM/CbwoBW03aRJgb8eIgr4=)
2: pszH03YZ_dof84uT_s5gq9SYq4Q.crl (hash: OCwLd+b7ltJ6kvLHxBNsZ78N3oTosyQi1+yzlNMpink=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:c7:44:fc:f3:57:da:bc:b4:ff:82:48:c3:84:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Validity
Not Before: Jul 24 11:00:36 2026 GMT
Not After : Jul 25 11:00:36 2026 GMT
Subject: CN=0d07f3d6cd50412df4aaab84d2a14faf77648a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:12:1e:f9:6c:9d:1e:4b:76:29:d3:53:cf:98:
20:b7:63:18:54:68:c1:eb:cd:fe:05:1f:1e:76:35:
0d:4b:54:c2:62:94:b6:e3:80:2c:23:63:1a:1a:af:
91:2f:f5:55:f7:77:36:fa:c4:ce:20:66:ad:e2:06:
d0:3a:ff:95:43:9b:0e:ae:0c:6c:ac:34:2c:34:73:
69:86:61:1c:59:b9:44:69:b2:63:e9:5a:db:21:b4:
09:c4:15:cc:29:85:20:de:d5:ba:6c:9a:8e:3c:25:
7c:6e:9d:f9:30:bd:97:1c:13:e5:d4:5a:41:09:9b:
98:b3:82:1d:9a:6e:aa:fe:5d:73:b6:d5:93:80:a8:
4c:07:f7:84:c1:94:7a:7a:35:07:f8:e2:c3:7d:12:
10:a4:b5:6a:b2:2c:59:85:7a:c4:d7:5c:10:bc:84:
21:56:7a:46:b0:76:74:92:4a:c8:00:5c:6c:9c:c7:
48:d7:fe:77:2a:7b:c0:ce:ca:b6:a8:0c:2d:21:21:
3f:b6:7b:74:8c:fc:a2:8b:40:f1:a7:76:5e:8e:43:
83:31:a6:e1:2a:87:7d:a8:48:de:02:e0:8d:e7:21:
13:16:d0:92:52:29:54:71:1a:c7:0e:21:99:94:ab:
40:a7:c6:f2:ec:ba:fe:b1:92:9e:58:2b:fe:d1:21:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:07:F3:D6:CD:50:41:2D:F4:AA:AB:84:D2:A1:4F:AF:77:64:8A:98
X509v3 Authority Key Identifier:
keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e4:7a:bf:c6:d6:fc:11:26:0c:99:cb:6a:e2:18:f1:36:ed:
77:6b:43:fa:00:cc:b9:5f:8d:72:f6:34:2f:42:ab:b3:28:6e:
88:5f:5a:7b:6a:b5:7f:98:c9:72:b6:a0:b2:0a:27:ac:69:2c:
bf:8f:ac:b8:c2:d6:2e:0e:55:45:e9:02:2e:52:58:a9:59:69:
6b:e9:59:fe:f5:a2:40:fc:da:1e:d1:00:e3:70:54:6d:54:2d:
f1:62:37:e4:94:21:d0:40:ed:cf:77:dc:96:ec:98:7b:87:bf:
b7:79:f9:11:1c:62:90:b7:ca:e0:7c:30:2a:5d:35:8c:de:94:
4b:32:4d:0e:c0:c7:a5:a8:13:c2:92:de:ef:08:1a:e6:44:65:
c3:c0:cd:55:4a:cd:b5:99:9f:a0:fe:9e:44:d8:2f:5f:ff:8a:
52:c5:3b:5d:1f:22:7e:e5:7f:84:b6:c0:69:29:81:92:ee:8c:
cc:66:e8:dc:23:39:23:48:cd:ec:5a:2b:8a:7a:60:0f:20:16:
fa:77:b3:75:c8:83:84:15:02:83:ff:e1:4e:f3:76:e7:9b:04:
84:4b:e1:94:d9:bb:16:9e:f4:05:63:41:b1:eb:c4:c9:6f:46:
d5:1a:7e:5e:dc:f6:ba:34:e7:6e:31:33:76:61:17:a6:15:a6:
b0:83:de:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyMdE/PNX2ry0/4JIw4ToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Y2NjN2QzNzYxOWZkZGExZmYzOGI5M2ZlY2U2MGFiZDQ5
OGFiODQwHhcNMjYwNzI0MTEwMDM2WhcNMjYwNzI1MTEwMDM2WjAzMTEwLwYDVQQD
EygwZDA3ZjNkNmNkNTA0MTJkZjRhYWFiODRkMmExNGZhZjc3NjQ4YTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBIe+WydHkt2KdNTz5ggt2MYVGjB
683+BR8edjUNS1TCYpS244AsI2MaGq+RL/VV93c2+sTOIGat4gbQOv+VQ5sOrgxs
rDQsNHNphmEcWblEabJj6VrbIbQJxBXMKYUg3tW6bJqOPCV8bp35ML2XHBPl1FpB
CZuYs4Idmm6q/l1zttWTgKhMB/eEwZR6ejUH+OLDfRIQpLVqsixZhXrE11wQvIQh
VnpGsHZ0kkrIAFxsnMdI1/53KnvAzsq2qAwtISE/tnt0jPyii0Dxp3ZejkODMabh
Kod9qEjeAuCN5yETFtCSUilUcRrHDiGZlKtAp8by7Lr+sZKeWCv+0SGOOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0H89bNUEEt9KqrhNKhT693ZIqYMB8GA1UdIwQY
MBaAFKbMx9N2Gf3aH/OLk/7OYKvUmKuEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAt
ZjFiYzk1Njg1OGFhLzEvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAtZjFiYzk1Njg1OGFh
LzEvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeR6v8bW
/BEmDJnLauIY8Tbtd2tD+gDMuV+NcvY0L0KrsyhuiF9ae2q1f5jJcragsgonrGks
v4+suMLWLg5VRekCLlJYqVlpa+lZ/vWiQPzaHtEA43BUbVQt8WI35JQh0EDtz3fc
luyYe4e/t3n5ERxikLfK4HwwKl01jN6USzJNDsDHpagTwpLe7wga5kRlw8DNVUrN
tZmfoP6eRNgvX/+KUsU7XR8ifuV/hLbAaSmBku6MzGbo3CM5I0jN7ForinpgDyAW
+nezdciDhBUCg//hTvN255sEhEvhlNm7Fp70BWNBsevEyW9G1Rp+Xtz2ujTnbjEz
dmEXphWmsIPeYQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:06:17 2026 by rpki-client