Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
File: PvRdcGusxYrv9q5H8jLZKzwvsBg.mft (raw, json)
Hash identifier: LnADjLYr8vnc77vM/evNsODRDyw7iAFs9z+6ZRmz2cg=
Subject key identifier: 43:DC:07:50:2A:B7:73:48:E6:3B:DE:6B:56:71:91:BD:79:5F:36:1E
Authority key identifier: 3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18
Certificate issuer: /CN=3ef45d706bacc58aeff6ae47f232d92b3c2fb018
Certificate serial: 019F8F7E8A4B820D0F2E81F77F70E71379BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
Manifest number: 58
Signing time: Thu 23 Jul 2026 15:01:02 +0000
Manifest this update: Thu 23 Jul 2026 15:01:02 +0000
Manifest next update: Fri 24 Jul 2026 15:01:02 +0000
Files and hashes: 1: NL1w9Xj9eNNvZHja4bYi8u1uP0g.roa (hash: bGa7KQ5aQ4eZWg9YSqL9Pvq1iyjpLbcYhC9x7Z0XWS8=)
2: PvRdcGusxYrv9q5H8jLZKzwvsBg.crl (hash: CEuiUwpZyqEbtWqhTrwawgp8RL4TqI5ihWNcu4vkt9A=)
3: UGXYFC9jlohYNhw6f4qzRWdUTE8.asa (hash: EAHRau/OfR99p6HOKLABIO+IowH54Ml4zKfLXfBoos4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:8a:4b:82:0d:0f:2e:81:f7:7f:70:e7:13:79:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef45d706bacc58aeff6ae47f232d92b3c2fb018
Validity
Not Before: Jul 23 15:01:02 2026 GMT
Not After : Jul 24 15:01:02 2026 GMT
Subject: CN=43dc07502ab77348e63bde6b567191bd795f361e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:66:e3:3a:cb:df:22:b3:c7:d7:c6:b2:66:
f5:b6:ab:37:98:6d:8d:9b:cb:18:37:65:0d:15:56:
20:af:aa:30:c6:dd:66:d0:a4:26:a1:36:86:92:67:
03:50:8f:08:b7:ec:51:d9:da:7b:08:89:d0:2e:22:
82:f8:57:81:5c:2b:3f:5e:f6:d8:45:bd:ea:8f:f0:
aa:e0:29:79:16:72:60:c6:3e:db:a6:60:9a:b3:04:
2c:e3:4e:4a:64:a0:e9:32:69:6a:2e:8e:8d:66:d0:
93:53:f4:0e:00:58:d2:6b:c5:8c:19:bc:83:92:1b:
1c:86:7d:b0:af:fb:64:4c:fb:56:b9:63:a4:ef:fe:
ea:cf:66:23:57:a9:87:5b:20:b4:2e:cf:ba:f5:76:
f5:0e:57:ea:f3:dd:b7:62:d8:bb:72:af:1f:9b:80:
57:3c:89:6f:1a:61:f3:8a:8e:cd:dd:42:09:ae:07:
21:2c:d7:2a:c7:fb:f1:91:46:79:6d:ab:4d:09:32:
cc:48:b4:13:50:f8:46:87:03:17:82:33:ff:65:17:
d4:7c:45:0f:04:aa:8e:a0:16:a3:45:8c:7c:7e:ba:
e9:b7:4d:b3:54:24:60:dc:ff:5a:bd:5c:ca:b8:a5:
33:82:f3:4d:65:d0:8c:27:58:22:7d:51:12:5b:44:
6c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DC:07:50:2A:B7:73:48:E6:3B:DE:6B:56:71:91:BD:79:5F:36:1E
X509v3 Authority Key Identifier:
keyid:3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:65:c7:00:ca:b6:c7:39:ff:8c:55:0d:b0:53:e2:49:e7:c0:
76:08:0b:69:5f:72:c8:ec:84:f7:9c:0e:ea:f4:98:ca:4f:ff:
0e:d9:c8:40:7f:8d:1f:cc:70:1e:2e:07:88:64:0a:49:86:0c:
38:26:cc:03:44:11:e5:91:63:99:79:7b:94:a2:3d:f0:9d:f3:
72:9c:65:e0:a5:fe:89:77:a7:b9:b0:e6:40:16:2a:0b:48:16:
74:66:f5:f3:a7:be:77:9f:e5:b8:71:fa:c3:90:41:25:d3:50:
a9:44:b7:c0:78:01:35:78:cd:9a:1a:91:92:67:d5:9d:19:a0:
86:47:e1:6f:04:ba:4e:02:66:54:6d:9f:f6:4b:86:c6:48:38:
69:7b:8e:7e:dc:78:dd:ce:6a:64:5b:85:0b:f5:35:ed:66:20:
83:f3:cb:59:70:26:d0:ba:0a:f9:b0:04:5a:14:19:68:c7:78:
48:4b:a3:0c:05:33:b4:27:6c:4d:d7:41:b2:11:13:90:bc:ac:
c5:fc:6e:20:4c:82:bd:f7:46:a4:dc:16:d8:8f:de:26:be:5e:
ec:03:b7:6e:29:b4:6d:b5:2a:b2:31:23:5f:0f:db:4b:26:25:
8f:9f:17:10:91:4f:cb:ab:8d:cd:88:3c:19:20:8d:a1:fe:2b:
7f:8a:a8:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfopLgg0PLoH3f3DnE3m6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZjQ1ZDcwNmJhY2M1OGFlZmY2YWU0N2YyMzJkOTJiM2My
ZmIwMTgwHhcNMjYwNzIzMTUwMTAyWhcNMjYwNzI0MTUwMTAyWjAzMTEwLwYDVQQD
Eyg0M2RjMDc1MDJhYjc3MzQ4ZTYzYmRlNmI1NjcxOTFiZDc5NWYzNjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3xm4zrL3yKzx9fGsmb1tqs3mG2N
m8sYN2UNFVYgr6owxt1m0KQmoTaGkmcDUI8It+xR2dp7CInQLiKC+FeBXCs/XvbY
Rb3qj/Cq4Cl5FnJgxj7bpmCaswQs405KZKDpMmlqLo6NZtCTU/QOAFjSa8WMGbyD
khschn2wr/tkTPtWuWOk7/7qz2YjV6mHWyC0Ls+69Xb1Dlfq8923Yti7cq8fm4BX
PIlvGmHzio7N3UIJrgchLNcqx/vxkUZ5batNCTLMSLQTUPhGhwMXgjP/ZRfUfEUP
BKqOoBajRYx8frrpt02zVCRg3P9avVzKuKUzgvNNZdCMJ1gifVESW0RsUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPcB1Aqt3NI5jvea1Zxkb15XzYeMB8GA1UdIwQY
MBaAFD70XXBrrMWK7/auR/Iy2Ss8L7AYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHZSZGNHdXN4WXJ2OXE1SDhqTFpLend2c0JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85OTkyOTUtMzFkYy00ZjhjLTg0Yjct
MzdlYWQ2YWI0ZWVjLzEvUHZSZGNHdXN4WXJ2OXE1SDhqTFpLend2c0JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85OTkyOTUtMzFkYy00ZjhjLTg0YjctMzdlYWQ2YWI0ZWVj
LzEvUHZSZGNHdXN4WXJ2OXE1SDhqTFpLend2c0JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0mXHAMq2
xzn/jFUNsFPiSefAdggLaV9yyOyE95wO6vSYyk//DtnIQH+NH8xwHi4HiGQKSYYM
OCbMA0QR5ZFjmXl7lKI98J3zcpxl4KX+iXenubDmQBYqC0gWdGb186e+d5/luHH6
w5BBJdNQqUS3wHgBNXjNmhqRkmfVnRmghkfhbwS6TgJmVG2f9kuGxkg4aXuOftx4
3c5qZFuFC/U17WYgg/PLWXAm0LoK+bAEWhQZaMd4SEujDAUztCdsTddBshETkLys
xfxuIEyCvfdGpNwW2I/eJr5e7AO3bim0bbUqsjEjXw/bSyYlj58XEJFPy6uNzYg8
GSCNof4rf4qofw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:04:50 2026 by rpki-client