Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: 0Ubl590+NLJDUG9h2d+V7OCmyrVYUHXpPt6Ff0jjVJU=
Subject key identifier: 2E:E0:44:40:61:05:D6:CC:7A:78:8C:4A:C9:D8:DE:F0:91:74:64:B8
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 019CAC7E410A66EABF3539E72C558E309F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 11E3
Signing time: Mon 02 Mar 2026 03:01:20 +0000
Manifest this update: Mon 02 Mar 2026 03:01:20 +0000
Manifest next update: Tue 03 Mar 2026 03:01:20 +0000
Files and hashes: 1: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: W8wnAFjUVWNbQ8YfKIvLqrshbmaa0vFF36qtQ9sfP0g=)
2: Rc1JKlzBWJzMspxz5Sz8_wKGjSQ.roa (hash: YXV2SDD7Lq/HvpspFTkxAD7KLYHXbsXZfXUiY1m7rzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:41:0a:66:ea:bf:35:39:e7:2c:55:8e:30:9f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Mar 2 03:01:20 2026 GMT
Not After : Mar 3 03:01:20 2026 GMT
Subject: CN=2ee044406105d6cc7a788c4ac9d8def0917464b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:48:9f:97:97:67:ca:ff:b3:6c:45:9f:df:
66:26:d3:17:1f:ee:df:cf:2c:22:5e:67:59:4b:7d:
41:47:ba:2b:78:16:4f:fc:cf:72:98:10:c1:ff:bd:
94:34:da:c7:1a:ad:01:57:f8:14:28:83:a1:24:e2:
3d:cb:03:c7:d9:6c:2f:e4:74:45:f6:fb:b9:ca:41:
da:03:7a:96:3e:07:c3:2e:f5:82:b5:2b:93:26:f6:
d3:20:29:21:c4:06:0f:41:fd:40:87:7d:b4:46:5c:
d2:88:59:bf:fe:4b:ec:ac:dd:2d:c4:e2:ac:59:ea:
04:0f:b8:51:15:2b:3f:05:4a:86:0b:9e:68:79:09:
60:c6:a9:57:02:29:db:70:22:a5:2a:a4:11:d1:c2:
1f:ea:ad:8f:91:e4:a7:e2:3a:df:1e:1d:7a:99:3f:
23:e2:24:9c:91:99:f2:b0:32:9b:a8:81:0b:1b:74:
aa:e8:c6:f0:aa:1c:9c:20:eb:58:1c:d3:ca:1a:3b:
d3:54:5f:f8:66:20:79:d3:00:e7:a0:ad:6b:0b:e0:
12:06:56:73:aa:6f:74:34:9c:ac:d1:78:ba:ab:bc:
f2:30:70:3d:ca:33:d8:1b:49:d7:2d:4e:21:3e:3b:
f5:40:e8:2b:b6:d3:b9:1b:27:c6:0a:c0:b1:f2:4d:
ad:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E0:44:40:61:05:D6:CC:7A:78:8C:4A:C9:D8:DE:F0:91:74:64:B8
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:76:e9:c6:42:d7:b0:4b:e1:79:f9:a1:f8:0d:f0:9a:78:f8:
c6:2a:be:f8:b4:c5:7e:1a:4b:e6:4a:cd:14:89:d7:9d:9d:84:
dc:d6:12:e2:b7:12:63:fc:83:26:f6:4e:be:9f:51:d1:96:ea:
97:d0:3b:d3:e9:3f:44:9a:c0:e5:00:c9:3b:c7:65:2d:c0:b2:
3a:33:64:63:d5:9f:42:64:91:99:59:26:3d:14:65:a2:99:a3:
70:37:84:9e:18:0d:c4:13:20:dc:4b:6c:fd:9b:ea:bd:5d:32:
26:f1:d4:f3:c5:94:c3:7c:74:4e:9a:e4:4c:bc:27:1e:31:3a:
c4:94:06:9c:6d:99:72:00:69:b1:8d:e7:9a:de:d0:4f:59:d7:
9c:3e:a6:66:84:a2:3a:d8:ea:11:d6:f2:b5:50:1c:8d:66:98:
44:e8:03:de:a3:a9:71:81:2f:84:30:79:f1:a0:cd:6e:93:0f:
9c:08:6f:d3:5e:63:d2:48:3c:cc:fc:c3:38:16:21:0b:6b:78:
a0:71:8a:39:38:74:35:0f:16:ca:54:69:4f:51:38:f2:6c:42:
dc:e3:39:43:96:c5:06:b1:f4:92:4b:dc:f3:79:b5:27:d6:95:
76:ec:9d:c0:dc:11:53:b3:73:e6:e2:04:32:1f:d4:47:c7:f3:
02:6d:24:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfkEKZuq/NTnnLFWOMJ8rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTU1NDA5OGM3YTg4YWEzNDI2NGI5MmQ4YmYyMjU3ZWMw
YmNkYTQwHhcNMjYwMzAyMDMwMTIwWhcNMjYwMzAzMDMwMTIwWjAzMTEwLwYDVQQD
EygyZWUwNDQ0MDYxMDVkNmNjN2E3ODhjNGFjOWQ4ZGVmMDkxNzQ2NGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukNIn5eXZ8r/s2xFn99mJtMXH+7f
zywiXmdZS31BR7oreBZP/M9ymBDB/72UNNrHGq0BV/gUKIOhJOI9ywPH2Wwv5HRF
9vu5ykHaA3qWPgfDLvWCtSuTJvbTICkhxAYPQf1Ah320RlzSiFm//kvsrN0txOKs
WeoED7hRFSs/BUqGC55oeQlgxqlXAinbcCKlKqQR0cIf6q2PkeSn4jrfHh16mT8j
4iSckZnysDKbqIELG3Sq6MbwqhycIOtYHNPKGjvTVF/4ZiB50wDnoK1rC+ASBlZz
qm90NJys0Xi6q7zyMHA9yjPYG0nXLU4hPjv1QOgrttO5GyfGCsCx8k2tQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7gREBhBdbMeniMSsnY3vCRdGS4MB8GA1UdIwQY
MBaAFD6lVAmMeoiqNCZLkti/IlfsC82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAt
NjZkZTk4NjVkYmFjLzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAtNjZkZTk4NjVkYmFj
LzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHbpxkLX
sEvhefmh+A3wmnj4xiq++LTFfhpL5krNFInXnZ2E3NYS4rcSY/yDJvZOvp9R0Zbq
l9A70+k/RJrA5QDJO8dlLcCyOjNkY9WfQmSRmVkmPRRlopmjcDeEnhgNxBMg3Ets
/ZvqvV0yJvHU88WUw3x0TprkTLwnHjE6xJQGnG2ZcgBpsY3nmt7QT1nXnD6mZoSi
OtjqEdbytVAcjWaYROgD3qOpcYEvhDB58aDNbpMPnAhv015j0kg8zPzDOBYhC2t4
oHGKOTh0NQ8WylRpT1E48mxC3OM5Q5bFBrH0kkvc83m1J9aVduydwNwRU7Nz5uIE
Mh/UR8fzAm0kIQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:26 2026 by rpki-client