Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
File: pLm08Dm8goYBw44OrUwZWrvf_mM.mft (raw, json)
Hash identifier: xky5BeODqlNdjfDthKOGr+4QRxnGlUgoDlKmTv1R0SA=
Subject key identifier: 40:DC:6C:18:42:E5:AF:47:D4:BE:C9:66:EB:2B:8D:DE:DB:EC:F5:26
Authority key identifier: A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
Certificate issuer: /CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Certificate serial: 019F92ECD5CE8A3B2B89097EEDDAFD432B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
Manifest number: 0432
Signing time: Fri 24 Jul 2026 07:00:22 +0000
Manifest this update: Fri 24 Jul 2026 07:00:22 +0000
Manifest next update: Sat 25 Jul 2026 07:00:22 +0000
Files and hashes: 1: JdkIQygmhQqcLnZC2_hEonjSX5Q.roa (hash: S2ckYV6ssSGLHtxoF3cPRRAOhiSavGP1nolNPr7KzVg=)
2: pLm08Dm8goYBw44OrUwZWrvf_mM.crl (hash: vS4DhfMVdYmykw8tMDvZlJd8J9LQJ8D5+gPg6IPjnf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:d5:ce:8a:3b:2b:89:09:7e:ed:da:fd:43:2b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Validity
Not Before: Jul 24 07:00:22 2026 GMT
Not After : Jul 25 07:00:22 2026 GMT
Subject: CN=40dc6c1842e5af47d4bec966eb2b8ddedbecf526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:b7:11:4a:53:a3:c3:ce:fd:e8:a8:1b:c2:
4e:0f:5c:a9:38:75:9b:aa:06:43:ba:ed:a5:81:09:
f5:a3:72:23:e3:b6:5d:81:1b:cb:98:bb:0d:8e:e0:
ba:c9:a6:97:66:05:ed:6a:70:45:de:da:d6:6b:0b:
8c:25:12:b6:f4:bb:7e:4f:9b:82:ec:06:42:db:e8:
cc:71:cf:55:1e:10:ac:e9:2c:5f:63:20:e3:ce:1a:
f3:45:7c:6c:eb:68:09:c7:f9:a6:07:c2:6b:76:91:
c5:1a:97:00:3f:ef:20:22:47:0c:23:30:ea:b8:be:
3d:8b:f1:ee:94:e8:a3:5c:3b:fa:ce:65:70:7e:17:
d9:cc:ca:8d:20:97:19:47:a8:e8:07:f3:06:6f:87:
60:66:d1:12:71:ed:16:18:5f:fc:fd:76:88:e9:fb:
98:28:87:46:87:68:ac:0b:8c:65:32:88:77:e3:81:
b6:be:e3:fd:b8:b5:d1:f6:7b:7c:d4:e4:9b:95:6c:
e5:4f:8a:bb:53:2b:ab:c6:25:da:c5:66:db:ff:5f:
e9:68:3b:c7:b2:61:a2:4d:99:7b:cf:03:fb:f0:82:
3e:c5:45:0d:c6:6b:9c:21:c7:cd:17:ab:9e:91:c5:
2e:b9:d1:de:b7:e9:96:5e:52:68:9b:f9:04:3a:67:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DC:6C:18:42:E5:AF:47:D4:BE:C9:66:EB:2B:8D:DE:DB:EC:F5:26
X509v3 Authority Key Identifier:
keyid:A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:cf:3b:1d:42:de:01:a7:fd:b4:bb:f0:10:37:ca:27:5c:fc:
eb:80:16:ac:6e:c0:a7:e8:a9:f6:3e:8e:43:60:fb:85:28:ae:
d3:48:db:0a:70:8c:fc:29:40:4c:f1:3f:48:03:06:a4:34:31:
f6:24:6c:7b:b8:17:f7:1d:38:a4:f8:65:59:45:5a:f2:10:cc:
96:d5:5c:c2:4a:f8:76:a9:b2:8d:fa:c5:1e:92:ce:28:23:90:
31:4d:a3:8c:ee:f5:77:b0:7d:a8:e0:fc:41:6a:9a:b2:e0:9f:
6e:76:fd:da:20:5d:49:4f:f1:3d:c7:02:11:7d:d7:11:8a:54:
57:6f:1b:38:79:fe:ec:f1:02:69:e8:a6:eb:5d:58:d9:e3:ea:
80:5a:71:2c:cc:da:2a:34:39:3e:02:e5:c7:a9:6a:be:ac:ff:
a8:a8:02:ec:f7:46:0a:54:af:36:ac:e6:b8:80:b6:ad:b9:b5:
a5:ed:e0:89:bf:58:f2:30:11:2b:40:87:51:f6:f2:77:cc:10:
a9:54:03:fe:0f:30:df:3d:65:3f:c6:4d:fd:a9:fd:79:ab:50:
14:ed:ea:cd:4e:9d:c8:21:1c:60:05:98:43:06:92:d6:fd:d4:
fb:db:d2:fd:48:28:bf:4e:ce:f6:e1:50:71:e2:66:73:de:1c:
fb:37:6c:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7NXOijsriQl+7dr9QysoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjliNGYwMzliYzgyODYwMWMzOGUwZWFkNGMxOTVhYmJk
ZmZlNjMwHhcNMjYwNzI0MDcwMDIyWhcNMjYwNzI1MDcwMDIyWjAzMTEwLwYDVQQD
Eyg0MGRjNmMxODQyZTVhZjQ3ZDRiZWM5NjZlYjJiOGRkZWRiZWNmNTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuji3EUpTo8PO/eioG8JOD1ypOHWb
qgZDuu2lgQn1o3Ij47ZdgRvLmLsNjuC6yaaXZgXtanBF3trWawuMJRK29Lt+T5uC
7AZC2+jMcc9VHhCs6SxfYyDjzhrzRXxs62gJx/mmB8JrdpHFGpcAP+8gIkcMIzDq
uL49i/HulOijXDv6zmVwfhfZzMqNIJcZR6joB/MGb4dgZtESce0WGF/8/XaI6fuY
KIdGh2isC4xlMoh344G2vuP9uLXR9nt81OSblWzlT4q7UyurxiXaxWbb/1/paDvH
smGiTZl7zwP78II+xUUNxmucIcfNF6uekcUuudHet+mWXlJom/kEOmc2NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDcbBhC5a9H1L7JZusrjd7b7PUmMB8GA1UdIwQY
MBaAFKS5tPA5vIKGAcOODq1MGVq73/5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExtMDhEbThnb1lCdzQ0T3JVd1pXcnZmX21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81NmExNjMtOWNjYi00MTMxLTk3MmQt
OGNjNmQxOTIzMzViLzEvcExtMDhEbThnb1lCdzQ0T3JVd1pXcnZmX21NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81NmExNjMtOWNjYi00MTMxLTk3MmQtOGNjNmQxOTIzMzVi
LzEvcExtMDhEbThnb1lCdzQ0T3JVd1pXcnZmX21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs887HULe
Aaf9tLvwEDfKJ1z864AWrG7Ap+ip9j6OQ2D7hSiu00jbCnCM/ClATPE/SAMGpDQx
9iRse7gX9x04pPhlWUVa8hDMltVcwkr4dqmyjfrFHpLOKCOQMU2jjO71d7B9qOD8
QWqasuCfbnb92iBdSU/xPccCEX3XEYpUV28bOHn+7PECaeim611Y2ePqgFpxLMza
KjQ5PgLlx6lqvqz/qKgC7PdGClSvNqzmuIC2rbm1pe3gib9Y8jARK0CHUfbyd8wQ
qVQD/g8w3z1lP8ZN/an9eatQFO3qzU6dyCEcYAWYQwaS1v3U+9vS/Ugov07O9uFQ
ceJmc94c+zdsmA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:24:47 2026 by rpki-client