Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: S5kv3fodkzij9Kn1yv/T+iuzg9QqNHrM5CD9dcinnWw=
Subject key identifier: 5F:45:29:A7:C8:1A:DF:E4:E3:6F:07:63:BC:A7:08:63:60:E5:01:AD
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 019F935AA3D796EF6069F479CB10E6270612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 09:00:18 +0000
Manifest this update: Fri 24 Jul 2026 09:00:18 +0000
Manifest next update: Sat 25 Jul 2026 09:00:18 +0000
Files and hashes: 1: 6v2it1qTQM_G9sWb1tDinWYpODY.roa (hash: kiBDfwv0URUTmxQqj/IJZu5OTfVLSt/qbBsgaeH3VdA=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: WBhhNZsa/CUUPiDZCjsTcxylq0HsHkOqU9dvnbBUMrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:a3:d7:96:ef:60:69:f4:79:cb:10:e6:27:06:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Jul 24 09:00:18 2026 GMT
Not After : Jul 25 09:00:18 2026 GMT
Subject: CN=5f4529a7c81adfe4e36f0763bca7086360e501ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:2f:79:bd:a3:da:8e:41:be:af:4f:84:db:
92:ff:82:6d:59:70:8f:09:17:6f:42:a6:9e:a8:d9:
56:7c:f0:95:3c:ce:3f:1f:8b:4a:86:93:0e:44:4e:
c1:fc:40:fd:49:ea:d4:e8:8e:73:39:f1:97:d3:7f:
2a:4f:4e:bb:5f:9d:a8:49:54:29:a0:bd:d9:61:78:
40:59:18:07:fe:de:24:85:0f:aa:3c:d4:4f:cc:48:
5d:2d:96:41:fa:74:65:55:66:0f:f9:a6:97:d7:ee:
6a:fc:f6:8c:14:ef:68:bc:32:50:05:29:dd:58:fe:
42:31:2f:53:f2:12:31:84:74:0c:4d:6e:af:5a:7f:
28:f4:e6:83:a1:22:4c:77:d1:c7:aa:ce:f9:7b:81:
c9:74:2f:66:08:53:3f:ed:96:9c:9c:b9:de:be:d3:
e4:34:5a:81:ef:ef:4f:8f:31:c7:e1:a2:04:5f:f5:
a8:ec:83:c9:15:00:93:94:99:94:e1:e6:af:9f:6a:
0c:0c:ea:cd:fb:e5:00:c9:fd:02:2b:37:48:d2:fd:
51:88:d2:8c:13:36:f7:d2:a1:db:a7:79:de:ca:dd:
80:d3:ee:a2:a0:b2:5d:28:ab:57:73:14:ab:5f:38:
c7:4c:15:f7:8d:78:91:5f:7f:18:fb:7e:e4:4d:5a:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:45:29:A7:C8:1A:DF:E4:E3:6F:07:63:BC:A7:08:63:60:E5:01:AD
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:37:08:2e:7c:e2:ce:5e:05:fd:00:d0:9b:1a:de:f1:d1:6e:
50:bf:51:2b:d6:c8:f1:90:9d:67:bd:77:62:ee:38:52:c5:2b:
a1:7c:79:7b:98:1c:6f:1c:8c:c9:c3:ff:3c:56:f1:2e:83:ae:
f5:26:eb:d4:d6:bf:76:8c:92:d0:05:5c:b4:1f:10:83:7b:1d:
cd:b4:9a:d3:a1:c2:d5:fc:95:45:11:cc:38:87:54:34:0a:67:
4f:58:f3:c9:cd:16:fd:ca:6b:ef:22:3e:79:b6:b2:c0:a9:90:
30:9d:06:bd:31:02:4e:be:92:ca:21:a3:db:7e:0f:0d:b9:41:
c8:e8:b5:06:f4:74:75:94:43:45:3d:f5:6a:17:3a:9a:10:4e:
b5:b4:95:51:6c:9c:48:3f:19:c5:f6:f7:de:5c:d7:fd:ea:4b:
2c:9f:7f:6c:b8:f4:3b:88:28:e9:72:4c:2a:74:75:56:0a:2a:
c9:18:6d:97:0a:3f:bb:9c:8c:cc:4f:3e:1b:30:c4:31:28:cd:
1b:03:6f:e1:bb:33:a3:6b:77:58:59:a4:fa:42:03:80:28:16:
1e:0d:a8:dd:86:cc:a8:96:c8:06:ae:44:02:5c:e0:2b:1a:46:
82:53:ef:5c:ef:06:7a:b2:53:66:5d:24:0d:c9:c5:33:e6:9e:
c8:41:fd:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWqPXlu9gafR5yxDmJwYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZDA4YjMxNTBhZDM0ZGUyYjg4NTkyMTc0MTkyNDA4Mzk2
ZjExZmIwHhcNMjYwNzI0MDkwMDE4WhcNMjYwNzI1MDkwMDE4WjAzMTEwLwYDVQQD
Eyg1ZjQ1MjlhN2M4MWFkZmU0ZTM2ZjA3NjNiY2E3MDg2MzYwZTUwMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKoveb2j2o5Bvq9PhNuS/4JtWXCP
CRdvQqaeqNlWfPCVPM4/H4tKhpMORE7B/ED9SerU6I5zOfGX038qT067X52oSVQp
oL3ZYXhAWRgH/t4khQ+qPNRPzEhdLZZB+nRlVWYP+aaX1+5q/PaMFO9ovDJQBSnd
WP5CMS9T8hIxhHQMTW6vWn8o9OaDoSJMd9HHqs75e4HJdC9mCFM/7ZacnLnevtPk
NFqB7+9PjzHH4aIEX/Wo7IPJFQCTlJmU4eavn2oMDOrN++UAyf0CKzdI0v1RiNKM
Ezb30qHbp3neyt2A0+6ioLJdKKtXcxSrXzjHTBX3jXiRX38Y+37kTVpDpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9FKafIGt/k428HY7ynCGNg5QGtMB8GA1UdIwQY
MBaAFKXQizFQrTTeK4hZIXQZJAg5bxH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMt
NDNjYzViNDZkNWIyLzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMtNDNjYzViNDZkNWIy
LzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijcILnzi
zl4F/QDQmxre8dFuUL9RK9bI8ZCdZ713Yu44UsUroXx5e5gcbxyMycP/PFbxLoOu
9Sbr1Na/doyS0AVctB8Qg3sdzbSa06HC1fyVRRHMOIdUNApnT1jzyc0W/cpr7yI+
ebaywKmQMJ0GvTECTr6SyiGj234PDblByOi1BvR0dZRDRT31ahc6mhBOtbSVUWyc
SD8Zxfb33lzX/epLLJ9/bLj0O4go6XJMKnR1VgoqyRhtlwo/u5yMzE8+GzDEMSjN
GwNv4bszo2t3WFmk+kIDgCgWHg2o3YbMqJbIBq5EAlzgKxpGglPvXO8GerJTZl0k
DcnFM+aeyEH9Iw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:04:43 2026 by rpki-client