Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
File: pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json)
Hash identifier: 18jW3TNv83DSG747thf4tRe61HOI/1ZLHH6nIawT58Q=
Subject key identifier: 4A:D2:7B:D9:A9:16:DD:B7:C7:53:7F:AF:F7:6F:D9:FA:42:D3:E1:F9
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Certificate issuer: /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial: 019E2136265B4A781E8B45A068BA76C0572E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
Manifest number: 121D
Signing time: Wed 13 May 2026 12:00:57 +0000
Manifest this update: Wed 13 May 2026 12:00:57 +0000
Manifest next update: Thu 14 May 2026 12:00:57 +0000
Files and hashes: 1: nS0y39FHd_KBicbFUGi66q7vdag.roa (hash: Z3Fr6bAjwL99ER5kh2Zqj12sGL3oFe9ZTzwUUnAJ/DY=)
2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: 2oNlZWkAS+ziEnTrobRxdB7bu4Jh2+RyNNxmk91F2R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:26:5b:4a:78:1e:8b:45:a0:68:ba:76:c0:57:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Validity
Not Before: May 13 12:00:57 2026 GMT
Not After : May 14 12:00:57 2026 GMT
Subject: CN=4ad27bd9a916ddb7c7537faff76fd9fa42d3e1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:8c:f9:95:75:74:2a:4f:30:bc:00:7e:e0:
dd:77:ad:87:d4:86:f6:21:85:90:0d:8e:60:8f:9f:
a1:ef:17:88:c4:08:7f:1a:94:79:ac:e8:fa:1d:a2:
fb:63:43:c8:e7:34:3b:ce:56:c8:a9:1f:1d:e1:4d:
3b:41:ce:ff:23:e0:73:d3:2b:3b:bb:1d:e3:c4:d2:
12:e3:d1:1c:20:06:7e:ff:22:69:72:35:6d:3c:59:
47:f2:9a:a7:d9:76:4e:6b:04:4f:90:f7:59:73:63:
ac:15:12:e9:35:69:de:e0:52:f3:f9:97:7b:21:48:
a5:e5:80:e4:50:65:7f:07:c7:3d:5e:b2:8d:62:94:
a1:6e:34:47:9c:22:25:c0:99:9a:91:9c:28:cc:d2:
fa:bb:91:34:48:4c:f8:2d:45:a4:cc:e3:63:b0:03:
59:86:ba:3e:8d:49:b9:48:20:c6:75:a0:ea:26:31:
ba:ca:c3:89:44:dd:4e:11:5b:4b:52:4c:28:ea:69:
14:43:47:3f:29:e7:77:b1:43:06:6d:af:df:b0:d9:
04:da:0f:e5:91:d6:f0:32:13:5f:23:bf:e6:53:43:
44:5a:6b:d1:c9:c2:47:46:67:54:14:a2:f5:d4:4f:
1e:c5:96:2f:f7:70:b7:8f:9f:aa:98:f3:7f:c7:0b:
33:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D2:7B:D9:A9:16:DD:B7:C7:53:7F:AF:F7:6F:D9:FA:42:D3:E1:F9
X509v3 Authority Key Identifier:
keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:93:e8:93:7e:05:80:b0:1f:80:92:9f:eb:17:16:b4:b2:93:
9d:e5:e4:c2:2c:97:df:a1:9c:4d:dc:bb:a9:5e:36:14:31:98:
ed:8b:1f:29:c3:b8:eb:2b:52:be:c2:d3:8f:46:bd:73:2c:a9:
14:92:99:a2:81:a5:38:d1:9b:fc:e8:b0:0d:9c:73:ae:70:ae:
be:94:c6:95:08:a5:6c:a2:b1:99:0d:2a:72:ae:b7:13:bb:d9:
bf:1d:0c:29:a6:7e:9a:c2:4d:90:43:1c:f8:e8:11:7d:1a:a6:
3d:5c:2e:a1:f6:28:04:ed:b7:4c:f5:de:0b:f6:84:25:e9:94:
5e:74:36:28:98:24:36:ce:8a:2a:b8:aa:3f:ff:ca:5f:c3:a5:
36:e3:c7:3d:90:8c:e0:7c:eb:c8:c9:98:9b:83:81:ca:b0:0c:
32:48:71:f9:ae:7d:05:ad:9a:5b:65:54:3c:45:bb:d8:c4:01:
ba:d1:1e:83:6b:3b:8e:0c:0a:45:b4:fd:44:8f:62:05:66:4f:
d4:9a:77:d8:7b:96:70:ce:90:be:4c:97:c9:62:a0:36:b6:7f:
4e:46:12:98:09:a6:7b:70:ba:88:c4:db:6a:8d:15:a4:d8:67:
dc:9b:81:99:e8:2c:c4:b2:9f:6f:84:67:f6:19:7b:a9:7a:c6:
bc:0b:b3:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hNiZbSngei0WgaLp2wFcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTI5ZmNkNjFkYzY5ZGNjZmJlMDFkNWZmMDAzNWI0MWFj
OTUyNjAwHhcNMjYwNTEzMTIwMDU3WhcNMjYwNTE0MTIwMDU3WjAzMTEwLwYDVQQD
Eyg0YWQyN2JkOWE5MTZkZGI3Yzc1MzdmYWZmNzZmZDlmYTQyZDNlMWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumKM+ZV1dCpPMLwAfuDdd62H1Ib2
IYWQDY5gj5+h7xeIxAh/GpR5rOj6HaL7Y0PI5zQ7zlbIqR8d4U07Qc7/I+Bz0ys7
ux3jxNIS49EcIAZ+/yJpcjVtPFlH8pqn2XZOawRPkPdZc2OsFRLpNWne4FLz+Zd7
IUil5YDkUGV/B8c9XrKNYpShbjRHnCIlwJmakZwozNL6u5E0SEz4LUWkzONjsANZ
hro+jUm5SCDGdaDqJjG6ysOJRN1OEVtLUkwo6mkUQ0c/Ked3sUMGba/fsNkE2g/l
kdbwMhNfI7/mU0NEWmvRycJHRmdUFKL11E8exZYv93C3j5+qmPN/xwszeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErSe9mpFt23x1N/r/dv2fpC0+H5MB8GA1UdIwQY
MBaAFKSSn81h3Gncz74B1f8ANbQayVJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUt
ZWJhOWM1Y2IzMmQwLzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUtZWJhOWM1Y2IzMmQw
LzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpPok34F
gLAfgJKf6xcWtLKTneXkwiyX36GcTdy7qV42FDGY7YsfKcO46ytSvsLTj0a9cyyp
FJKZooGlONGb/OiwDZxzrnCuvpTGlQilbKKxmQ0qcq63E7vZvx0MKaZ+msJNkEMc
+OgRfRqmPVwuofYoBO23TPXeC/aEJemUXnQ2KJgkNs6KKriqP//KX8OlNuPHPZCM
4HzryMmYm4OByrAMMkhx+a59Ba2aW2VUPEW72MQButEeg2s7jgwKRbT9RI9iBWZP
1Jp32HuWcM6QvkyXyWKgNrZ/TkYSmAmme3C6iMTbao0VpNhn3JuBmegsxLKfb4Rn
9hl7qXrGvAuzJQ==
-----END CERTIFICATE-----
Generated at Wed May 13 16:02:41 2026 by rpki-client