Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: xOxDv2kslHQPfnyLtWi0QsyHRw8VZLjezhYeKPVRquM=
Subject key identifier: 02:5C:75:F3:9C:A0:13:8C:93:C3:C3:F7:75:89:75:3B:8E:C8:50:C3
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 019F92B6A6229BAE0AC608B47064E821FC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 06:01:11 +0000
Manifest this update: Fri 24 Jul 2026 06:01:11 +0000
Manifest next update: Sat 25 Jul 2026 06:01:11 +0000
Files and hashes: 1: 0ZH3kxew36RRFzQg_mo4-7q2H4U.roa (hash: k3MKGbvdmLnbLs9zehodMhvSl8HPr3KY+BJ978CUfo8=)
2: AydP7XNvWxhhDMLSuOqc0Oa5dE0.roa (hash: jUVgcjRvFoEADtpRITq72Z8KeRsnl4848PEL4Me2SIw=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: BRljnT1XfiCVSfUEOBonROEfhMkL/I57qcO03RvBjvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:a6:22:9b:ae:0a:c6:08:b4:70:64:e8:21:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Jul 24 06:01:11 2026 GMT
Not After : Jul 25 06:01:11 2026 GMT
Subject: CN=025c75f39ca0138c93c3c3f77589753b8ec850c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:ae:d8:da:69:6c:cc:41:67:90:f6:d4:2d:
8f:6a:e0:0d:34:62:0f:cb:81:2f:26:9c:2a:8b:9b:
9e:a9:9d:c2:1a:06:d5:65:41:bb:ec:07:c7:b5:a7:
84:10:39:49:69:8e:44:7f:27:c2:fe:b2:12:4f:8f:
a6:87:3d:c1:c1:8f:ef:64:7c:93:ac:f3:f9:8e:94:
34:e6:44:20:77:32:f0:b2:13:19:65:cc:c8:92:f5:
02:48:ef:5c:17:0d:90:4a:64:41:4b:9b:d3:da:23:
f1:30:91:9b:74:66:91:3e:eb:f3:84:93:1a:c0:29:
39:b4:27:7c:ca:3b:1c:24:ed:0b:4f:bd:3a:70:06:
df:c8:04:fd:9e:41:5d:75:e6:bc:9d:42:26:06:6e:
33:19:9c:74:56:d3:22:59:9f:e6:88:d2:5c:0e:75:
f3:4d:13:e7:5a:48:1d:eb:69:13:0c:f0:a9:bf:e8:
1d:3e:ab:39:89:53:ee:d4:9f:a8:fd:b0:76:aa:4d:
95:12:0b:b1:b2:88:e9:a4:67:e6:c4:39:e6:c1:a4:
8a:8e:42:30:0a:a8:6f:17:55:dd:f7:83:45:34:0a:
a1:59:93:9c:f2:24:0a:ad:fb:74:c7:53:59:b2:b0:
37:ab:82:d7:f8:a6:f4:79:34:9f:86:2c:da:f8:bd:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5C:75:F3:9C:A0:13:8C:93:C3:C3:F7:75:89:75:3B:8E:C8:50:C3
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d4:54:3a:64:f0:85:2f:96:ac:93:f0:0a:03:ea:8d:d9:90:
e2:cf:32:26:0f:64:28:6c:cf:e9:e0:24:b4:b2:b2:46:5e:86:
99:32:7e:04:4c:0a:0b:dc:f5:dd:c1:66:a2:f3:c4:98:75:f0:
1c:c4:5c:fc:d7:b4:5e:80:bb:48:ee:5e:c3:d1:73:09:fb:98:
3a:e0:6c:86:00:49:bd:44:38:c2:2a:3f:aa:92:f4:e6:60:9a:
81:ab:d5:7f:d4:ce:8c:2f:2a:fb:d7:b0:39:f6:fa:a6:39:5f:
11:f6:a5:b7:c5:d5:4c:73:1d:bc:18:76:56:05:6a:e1:4e:b2:
d0:f0:69:96:29:bb:3f:cf:8e:75:dd:66:08:2d:06:42:80:c9:
e2:56:83:48:b6:82:e7:d4:d4:98:3b:bf:80:73:cc:ee:86:51:
fa:a4:fe:e7:44:b1:f7:93:b6:4d:e0:42:dc:bc:cd:d6:3f:ca:
a0:a7:78:73:5b:7c:e0:13:53:06:0e:4b:0e:c2:c2:fe:1c:c4:
b1:af:19:75:4d:b1:8c:5b:a8:da:d2:02:12:dd:4a:cb:54:d8:
52:f3:ff:a0:5a:05:8f:9e:27:98:64:82:c5:8a:1d:61:fd:9f:
1a:33:c9:fa:94:f0:5f:d5:76:a6:e9:c8:f4:4e:8b:d3:03:d4:
5e:c5:3a:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StqYim64Kxgi0cGToIfyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNTY4YzU5ZDdhODMxOTljM2E3OWVhMGU4Mzc1Yjk0NmVk
ODg0ZTIwHhcNMjYwNzI0MDYwMTExWhcNMjYwNzI1MDYwMTExWjAzMTEwLwYDVQQD
EygwMjVjNzVmMzljYTAxMzhjOTNjM2MzZjc3NTg5NzUzYjhlYzg1MGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfau2NppbMxBZ5D21C2PauANNGIP
y4EvJpwqi5ueqZ3CGgbVZUG77AfHtaeEEDlJaY5EfyfC/rIST4+mhz3BwY/vZHyT
rPP5jpQ05kQgdzLwshMZZczIkvUCSO9cFw2QSmRBS5vT2iPxMJGbdGaRPuvzhJMa
wCk5tCd8yjscJO0LT706cAbfyAT9nkFddea8nUImBm4zGZx0VtMiWZ/miNJcDnXz
TRPnWkgd62kTDPCpv+gdPqs5iVPu1J+o/bB2qk2VEguxsojppGfmxDnmwaSKjkIw
CqhvF1Xd94NFNAqhWZOc8iQKrft0x1NZsrA3q4LX+Kb0eTSfhiza+L2vywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJcdfOcoBOMk8PD93WJdTuOyFDDMB8GA1UdIwQY
MBaAFDxWjFnXqDGZw6eeoOg3W5Ru2ITiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82ZjM2YzItZDA1Yy00NDI1LWE5ZTQt
NWUzN2U3ZjNmMTVkLzEvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82ZjM2YzItZDA1Yy00NDI1LWE5ZTQtNWUzN2U3ZjNmMTVk
LzEvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9RUOmTw
hS+WrJPwCgPqjdmQ4s8yJg9kKGzP6eAktLKyRl6GmTJ+BEwKC9z13cFmovPEmHXw
HMRc/Ne0XoC7SO5ew9FzCfuYOuBshgBJvUQ4wio/qpL05mCagavVf9TOjC8q+9ew
Ofb6pjlfEfalt8XVTHMdvBh2VgVq4U6y0PBplim7P8+Odd1mCC0GQoDJ4laDSLaC
59TUmDu/gHPM7oZR+qT+50Sx95O2TeBC3LzN1j/KoKd4c1t84BNTBg5LDsLC/hzE
sa8ZdU2xjFuo2tICEt1Ky1TYUvP/oFoFj54nmGSCxYodYf2fGjPJ+pTwX9V2punI
9E6L0wPUXsU6jg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:38 2026 by rpki-client