Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File: pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier: WG3JSmFbyOGt5VQijZkecPK73loJwc/6PiCmzBxxDhk=
Subject key identifier: F6:AF:E2:C2:74:2F:E5:E2:AD:5D:D4:DE:73:8C:2A:4D:6F:85:86:A3
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 019E1D90E9EA4C42A2B14CDACE734A4A0C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number: 13C2
Signing time: Tue 12 May 2026 19:01:36 +0000
Manifest this update: Tue 12 May 2026 19:01:36 +0000
Manifest next update: Wed 13 May 2026 19:01:36 +0000
Files and hashes: 1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=)
2: ExTCIeQK6Vb8OCwCNuc_-quqRmI.roa (hash: yAl2sJH2YaylYmZhqm6jDAUkF463bPlFn5SJl2V0nqk=)
3: JzElV8rMB35_r5yROjAIe1YSEGk.roa (hash: prxCAC9aS1jR/lGKgImoCaF1puXWY2FG75jnwkB+CC4=)
4: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=)
5: VXazB19Is6W_OKKCp0AvNqbD-rM.roa (hash: IwIknG6od+Fc8/mQwvVulKrK8qXdxe2y0/Y0Cy93yB0=)
6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: J8CGtrrAyCIP/g2htKolXahOTrFf7fHLvk9ADehSWEc=)
7: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=)
8: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:e9:ea:4c:42:a2:b1:4c:da:ce:73:4a:4a:0c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: May 12 19:01:36 2026 GMT
Not After : May 13 19:01:36 2026 GMT
Subject: CN=f6afe2c2742fe5e2ad5dd4de738c2a4d6f8586a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:b3:d7:68:dc:a3:14:1e:d8:1a:47:5b:79:
b7:dc:b1:b9:9a:fd:75:c8:a3:1b:c1:34:c6:fe:ec:
4a:7c:5e:af:55:d2:bc:18:2b:14:df:15:38:2c:87:
a4:91:a0:b2:74:65:b3:99:a3:3d:e8:06:64:b5:93:
e3:29:54:14:56:ae:ec:82:1b:d6:99:f3:b6:7b:5d:
7a:00:d9:2d:d0:8a:1f:d2:84:1a:6d:3f:0e:8c:05:
92:1b:16:51:0c:8a:cf:40:c4:ab:0b:25:ef:21:87:
79:fc:a8:05:58:de:3c:49:19:b3:75:0a:a6:93:25:
35:0d:6c:b3:37:d4:a6:bc:f8:4d:1c:9c:5d:5a:77:
50:0e:96:ad:4a:e3:9d:5d:1e:23:64:e4:76:a9:6a:
c2:a3:ee:2a:e8:7f:97:df:60:17:5e:5a:c8:02:f0:
20:42:d4:d1:72:d0:82:2e:fd:c2:37:54:15:d8:48:
4e:c4:cb:7b:af:f7:01:73:20:9a:42:56:62:41:59:
9b:70:4c:78:06:3f:86:bc:17:d7:b4:49:58:4b:70:
d1:d0:53:75:7e:07:c8:59:4d:a0:9d:4d:ed:99:45:
fe:bb:1e:bc:53:72:7f:1d:c6:88:dc:18:6c:31:49:
fe:c3:d5:e0:17:a7:d3:47:c5:9f:a9:fa:3c:12:82:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AF:E2:C2:74:2F:E5:E2:AD:5D:D4:DE:73:8C:2A:4D:6F:85:86:A3
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ff:d4:42:41:07:ee:28:82:fc:b6:e6:eb:aa:4d:56:a8:0b:
36:ee:74:bc:db:cd:c7:ad:e6:c7:f2:11:2e:cf:b1:35:d2:9e:
03:4c:70:d8:43:06:b3:1d:f3:fc:d3:fd:c7:a3:95:e3:bf:5e:
cc:e1:d3:b2:83:c1:ab:80:4a:f1:a0:fe:09:72:28:7b:25:5a:
bc:db:e0:99:7e:31:69:10:bd:0a:8d:80:1c:18:e6:c3:20:16:
11:a2:f7:1c:5a:ac:bb:2e:27:bc:75:b6:ef:e8:18:c1:33:9a:
f5:78:5f:64:44:66:63:b9:e5:d2:38:c5:a0:86:3a:aa:84:c1:
57:c9:91:2d:d6:c2:a2:9c:f4:31:49:4f:88:32:a2:a4:1e:14:
12:a9:20:61:c2:7d:f1:95:2c:1d:46:85:5b:eb:54:27:b5:51:
26:c6:e5:fa:25:5f:85:b1:19:99:5b:88:60:ad:80:c8:f4:8c:
bf:ad:e0:61:87:55:57:e2:c2:42:11:f3:26:ff:b9:80:c7:cb:
cd:1a:e8:98:14:08:fb:29:77:1f:92:5b:01:37:7d:59:16:4f:
6b:7d:f9:b3:0a:f1:3a:1f:0d:0c:ca:bf:6e:37:60:6c:c8:e3:
22:f4:29:8e:02:cd:7e:ad:eb:50:5b:34:c2:11:b7:17:05:ed:
0f:6b:e8:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkOnqTEKisUzaznNKSgx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi
YWQwMzAwHhcNMjYwNTEyMTkwMTM2WhcNMjYwNTEzMTkwMTM2WjAzMTEwLwYDVQQD
EyhmNmFmZTJjMjc0MmZlNWUyYWQ1ZGQ0ZGU3MzhjMmE0ZDZmODU4NmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEuz12jcoxQe2BpHW3m33LG5mv11
yKMbwTTG/uxKfF6vVdK8GCsU3xU4LIekkaCydGWzmaM96AZktZPjKVQUVq7sghvW
mfO2e116ANkt0Iof0oQabT8OjAWSGxZRDIrPQMSrCyXvIYd5/KgFWN48SRmzdQqm
kyU1DWyzN9SmvPhNHJxdWndQDpatSuOdXR4jZOR2qWrCo+4q6H+X32AXXlrIAvAg
QtTRctCCLv3CN1QV2EhOxMt7r/cBcyCaQlZiQVmbcEx4Bj+GvBfXtElYS3DR0FN1
fgfIWU2gnU3tmUX+ux68U3J/HcaI3BhsMUn+w9XgF6fTR8Wfqfo8EoIYUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPav4sJ0L+XirV3U3nOMKk1vhYajMB8GA1UdIwQY
MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt
YTRlYTBhNjNmNzY2LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2
LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW//UQkEH
7iiC/Lbm66pNVqgLNu50vNvNx63mx/IRLs+xNdKeA0xw2EMGsx3z/NP9x6OV479e
zOHTsoPBq4BK8aD+CXIoeyVavNvgmX4xaRC9Co2AHBjmwyAWEaL3HFqsuy4nvHW2
7+gYwTOa9XhfZERmY7nl0jjFoIY6qoTBV8mRLdbCopz0MUlPiDKipB4UEqkgYcJ9
8ZUsHUaFW+tUJ7VRJsbl+iVfhbEZmVuIYK2AyPSMv63gYYdVV+LCQhHzJv+5gMfL
zRromBQI+yl3H5JbATd9WRZPa335swrxOh8NDMq/bjdgbMjjIvQpjgLNfq3rUFs0
whG3FwXtD2voew==
-----END CERTIFICATE-----
Generated at Tue May 12 23:34:43 2026 by rpki-client