Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
File: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft (raw, json)
Hash identifier: 2eIppeXMECQ58/dV8VsdroUHwCr9doJLd+t+j8s+NpQ=
Subject key identifier: 82:5F:FF:10:F3:0D:6A:0C:CB:70:03:48:BE:10:C7:60:CE:F3:4B:46
Authority key identifier: A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF
Certificate issuer: /CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
Certificate serial: 019CAB6B3603479B50C51FEF40D7965C5D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
Manifest number: 1163
Signing time: Sun 01 Mar 2026 22:00:55 +0000
Manifest this update: Sun 01 Mar 2026 22:00:55 +0000
Manifest next update: Mon 02 Mar 2026 22:00:55 +0000
Files and hashes: 1: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl (hash: yJh4hsdZct677MtrPFPGEBNus8uZpVXK3f2fAdXhsBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:36:03:47:9b:50:c5:1f:ef:40:d7:96:5c:5d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
Validity
Not Before: Mar 1 22:00:55 2026 GMT
Not After : Mar 2 22:00:55 2026 GMT
Subject: CN=825fff10f30d6a0ccb700348be10c760cef34b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:df:74:f5:26:d9:bb:64:41:ee:ae:1e:68:
89:ca:05:f1:00:1f:26:99:d8:1a:95:ba:a2:44:b1:
4a:ff:64:74:37:2f:b9:ec:f9:22:5a:10:bf:cb:c5:
dc:a8:92:5c:06:cc:f8:2b:70:5c:f4:2c:30:d9:b2:
62:ed:ef:f6:0e:66:9a:2b:e8:a8:7d:fa:9a:b1:fa:
36:6a:32:e1:c7:75:1f:9e:1b:77:bc:da:3f:5f:05:
33:24:e6:e2:ce:7e:be:86:a6:16:29:02:bb:97:80:
83:33:65:a9:32:45:4a:be:80:51:c5:88:88:48:05:
a4:5c:bf:f8:4a:b4:bd:5e:e7:4d:72:d7:09:2d:fb:
1c:b5:e2:e7:37:2a:52:f5:74:a5:69:93:ff:b3:4e:
2e:d9:7a:00:0d:34:e3:6a:4f:84:b5:1f:b4:1f:26:
d5:60:29:9f:f9:19:1d:fb:5f:76:4b:da:09:e7:e5:
6d:d2:8f:55:01:52:f7:07:c0:9b:10:d9:72:11:b8:
b9:21:94:20:0e:d0:b0:2a:75:7e:af:14:9d:9b:85:
d5:f1:a9:af:9b:1e:25:39:4e:a1:fe:a4:f0:ed:eb:
fe:ff:f6:6a:30:37:85:64:fd:ef:55:ba:b5:f2:fe:
1d:3f:f4:d8:53:15:9a:33:4d:d1:48:56:b3:dd:40:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5F:FF:10:F3:0D:6A:0C:CB:70:03:48:BE:10:C7:60:CE:F3:4B:46
X509v3 Authority Key Identifier:
keyid:A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4b:5e:43:11:cd:20:6d:38:be:7f:82:c0:aa:f3:0d:54:07:
55:0f:db:a9:ca:3d:5a:8c:68:ac:99:94:ab:7f:44:a5:be:19:
7c:30:de:6f:cc:2a:86:9a:f2:a2:fe:9a:91:d1:4a:37:57:54:
9c:92:b7:b7:c9:02:b2:f3:23:a4:f5:26:9b:d4:49:8e:a5:bb:
49:e1:24:72:c9:ca:7c:ee:a0:e2:41:78:39:1d:c9:59:82:df:
7e:6a:9a:3e:b1:92:e9:2e:7b:7b:93:41:50:23:85:ce:1e:46:
31:ae:a5:38:19:9e:dc:d8:67:f5:70:30:fa:e2:ae:69:99:b3:
c8:d6:d0:70:c4:69:a0:ee:14:fa:78:2c:37:f0:b5:c9:4a:ef:
3d:0f:6e:aa:4e:0e:cc:fa:92:fa:07:2d:8b:d5:19:5b:c9:23:
78:7e:d7:c5:d0:90:82:37:05:a4:05:56:df:13:f4:ad:59:92:
60:44:06:86:b0:0a:99:e2:96:89:10:97:eb:89:61:7c:61:e7:
da:76:3a:20:5d:54:b6:c4:15:a2:4c:3f:da:a3:1e:e6:de:8a:
ac:11:5c:94:c6:3c:df:29:c6:61:df:6f:f2:52:ad:d3:88:56:
f2:dc:b9:4d:ee:16:5b:98:91:50:a0:1c:31:f3:86:74:91:48:
0f:63:bc:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrazYDR5tQxR/vQNeWXF0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NGE5ZTI3NWM1YzE3ODA5YjhmY2Y4YzBmZTBiNWY2MzI5
Y2VlZWYwHhcNMjYwMzAxMjIwMDU1WhcNMjYwMzAyMjIwMDU1WjAzMTEwLwYDVQQD
Eyg4MjVmZmYxMGYzMGQ2YTBjY2I3MDAzNDhiZTEwYzc2MGNlZjM0YjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH3fdPUm2btkQe6uHmiJygXxAB8m
mdgalbqiRLFK/2R0Ny+57PkiWhC/y8XcqJJcBsz4K3Bc9Cww2bJi7e/2DmaaK+io
ffqasfo2ajLhx3Ufnht3vNo/XwUzJObizn6+hqYWKQK7l4CDM2WpMkVKvoBRxYiI
SAWkXL/4SrS9XudNctcJLfscteLnNypS9XSlaZP/s04u2XoADTTjak+EtR+0HybV
YCmf+Rkd+192S9oJ5+Vt0o9VAVL3B8CbENlyEbi5IZQgDtCwKnV+rxSdm4XV8amv
mx4lOU6h/qTw7ev+//ZqMDeFZP3vVbq18v4dP/TYUxWaM03RSFaz3UDsBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJf/xDzDWoMy3ADSL4Qx2DO80tGMB8GA1UdIwQY
MBaAFKVKnidcXBeAm4/PjA/gtfYynO7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC80NzA3ZWMtZDNkZi00NDcwLTkyYTkt
Njk5ODBlZWJjMjBjLzEvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC80NzA3ZWMtZDNkZi00NDcwLTkyYTktNjk5ODBlZWJjMjBj
LzEvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUteQxHN
IG04vn+CwKrzDVQHVQ/bqco9WoxorJmUq39Epb4ZfDDeb8wqhpryov6akdFKN1dU
nJK3t8kCsvMjpPUmm9RJjqW7SeEkcsnKfO6g4kF4OR3JWYLffmqaPrGS6S57e5NB
UCOFzh5GMa6lOBme3Nhn9XAw+uKuaZmzyNbQcMRpoO4U+ngsN/C1yUrvPQ9uqk4O
zPqS+gcti9UZW8kjeH7XxdCQgjcFpAVW3xP0rVmSYEQGhrAKmeKWiRCX64lhfGHn
2nY6IF1UtsQVokw/2qMe5t6KrBFclMY83ynGYd9v8lKt04hW8ty5Te4WW5iRUKAc
MfOGdJFID2O8ow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:59 2026 by rpki-client