Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
File: PI0Z2SQBkcNql0ti35PCIUNtm90.mft (raw, json)
Hash identifier: Gi23LD0xhfxMghXpkLbHhtWn/ujahB7gyiVprF0TMOE=
Subject key identifier: 5E:A2:48:17:08:80:E3:D6:0F:00:C5:85:9D:2F:CA:F5:46:1B:9E:95
Authority key identifier: 3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
Certificate issuer: /CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Certificate serial: 019CAB6BEA108F8EA01251B6EA65B1270B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
Manifest number: 0C80
Signing time: Sun 01 Mar 2026 22:01:41 +0000
Manifest this update: Sun 01 Mar 2026 22:01:41 +0000
Manifest next update: Mon 02 Mar 2026 22:01:41 +0000
Files and hashes: 1: PI0Z2SQBkcNql0ti35PCIUNtm90.crl (hash: AqPN82DHuXGya1WD7FerrlK82Q1NT5CG50Ej7fxToUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ea:10:8f:8e:a0:12:51:b6:ea:65:b1:27:0b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Validity
Not Before: Mar 1 22:01:41 2026 GMT
Not After : Mar 2 22:01:41 2026 GMT
Subject: CN=5ea248170880e3d60f00c5859d2fcaf5461b9e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9d:ef:6e:3d:78:be:19:4a:60:06:fc:f3:c3:
e9:72:90:66:1b:8f:5c:0a:48:7b:6b:ad:b7:8a:46:
47:aa:0e:ff:ba:e7:52:56:3e:0b:d3:85:87:4e:dc:
79:51:d3:84:67:b8:46:ea:2d:a0:c3:d9:14:67:ff:
64:23:78:1f:27:c3:6e:40:ca:7c:27:35:39:83:ea:
4c:fa:f4:19:ec:19:1d:87:20:70:43:1b:90:a4:01:
d5:bb:bd:13:71:10:73:e8:32:26:2d:a9:26:7f:14:
5b:73:28:6d:f6:1f:3d:6f:99:75:72:f6:3d:81:5c:
dc:04:7f:5a:06:85:48:cd:9c:18:9c:06:40:84:5d:
0a:31:3e:b2:14:f7:2c:13:87:6c:6f:e1:4c:99:c2:
83:8f:3d:f4:78:de:fa:e2:46:f4:79:7d:6d:6f:d1:
32:55:88:4f:e8:89:84:45:78:f7:9d:d9:f3:16:52:
63:04:81:2a:99:81:83:03:2e:0d:8c:6d:24:be:e1:
9d:e4:f9:3e:50:1f:0e:bf:19:cc:fe:59:dd:0e:b3:
16:ca:e6:59:7c:6c:28:0a:4c:10:8e:83:39:b2:64:
69:6b:b6:fc:3f:33:98:61:e0:a5:c4:96:48:9b:7b:
e4:ca:28:52:36:b0:d1:6e:a3:b4:09:ea:b9:7f:03:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A2:48:17:08:80:E3:D6:0F:00:C5:85:9D:2F:CA:F5:46:1B:9E:95
X509v3 Authority Key Identifier:
keyid:3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:bf:c0:07:da:56:b3:54:3d:a6:28:d2:e8:3f:fa:35:9c:93:
8b:d1:84:8f:03:00:03:17:9d:ef:85:b8:90:2a:b8:da:5f:fe:
00:b2:06:61:bb:aa:ae:ab:da:93:9d:9e:de:66:17:aa:14:e4:
36:40:a3:78:66:aa:e6:19:7a:17:67:c1:77:5f:d8:15:ff:f5:
68:e8:8d:38:3f:ca:7e:49:5a:46:bb:ca:d3:c4:91:15:23:fe:
f8:de:1f:11:1d:0f:c7:83:e4:8b:99:55:5e:d1:f4:59:e5:04:
03:b1:50:ff:37:d5:37:78:25:3d:41:c0:63:74:cb:b3:77:22:
0c:7b:60:b9:11:25:21:ed:07:6b:0e:72:86:17:92:e2:75:1f:
a2:16:ad:b6:05:33:9e:49:77:24:a1:87:7f:e2:85:4f:9e:3c:
22:a7:e0:3c:d6:c4:21:5a:cd:73:7d:69:7c:cc:97:cf:08:22:
43:29:48:95:59:67:59:cd:20:dd:a9:cc:21:a8:74:59:7f:cd:
b7:19:fe:b9:41:b7:6e:22:7c:e9:fa:0c:d7:e4:9d:15:4b:95:
df:bc:d1:57:d5:ed:eb:b5:2e:b0:3f:b4:6c:95:92:93:b2:8f:
53:da:28:63:8b:50:24:8e:7d:2f:af:08:44:b7:19:28:b9:65:
1f:5e:57:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra+oQj46gElG26mWxJwsQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOGQxOWQ5MjQwMTkxYzM2YTk3NGI2MmRmOTNjMjIxNDM2
ZDliZGQwHhcNMjYwMzAxMjIwMTQxWhcNMjYwMzAyMjIwMTQxWjAzMTEwLwYDVQQD
Eyg1ZWEyNDgxNzA4ODBlM2Q2MGYwMGM1ODU5ZDJmY2FmNTQ2MWI5ZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8p3vbj14vhlKYAb888PpcpBmG49c
Ckh7a623ikZHqg7/uudSVj4L04WHTtx5UdOEZ7hG6i2gw9kUZ/9kI3gfJ8NuQMp8
JzU5g+pM+vQZ7BkdhyBwQxuQpAHVu70TcRBz6DImLakmfxRbcyht9h89b5l1cvY9
gVzcBH9aBoVIzZwYnAZAhF0KMT6yFPcsE4dsb+FMmcKDjz30eN764kb0eX1tb9Ey
VYhP6ImERXj3ndnzFlJjBIEqmYGDAy4NjG0kvuGd5Pk+UB8OvxnM/lndDrMWyuZZ
fGwoCkwQjoM5smRpa7b8PzOYYeClxJZIm3vkyihSNrDRbqO0Ceq5fwPMfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6iSBcIgOPWDwDFhZ0vyvVGG56VMB8GA1UdIwQY
MBaAFDyNGdkkAZHDapdLYt+TwiFDbZvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEkwWjJTUUJrY05xbDB0aTM1UENJVU50bTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84MDBlMzktZjliMS00ZjhkLTljMTAt
MTAzNTdiODdjYjIzLzEvUEkwWjJTUUJrY05xbDB0aTM1UENJVU50bTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS84MDBlMzktZjliMS00ZjhkLTljMTAtMTAzNTdiODdjYjIz
LzEvUEkwWjJTUUJrY05xbDB0aTM1UENJVU50bTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHL/AB9pW
s1Q9pijS6D/6NZyTi9GEjwMAAxed74W4kCq42l/+ALIGYbuqrqvak52e3mYXqhTk
NkCjeGaq5hl6F2fBd1/YFf/1aOiNOD/KfklaRrvK08SRFSP++N4fER0Px4Pki5lV
XtH0WeUEA7FQ/zfVN3glPUHAY3TLs3ciDHtguRElIe0Haw5yhheS4nUfohattgUz
nkl3JKGHf+KFT548IqfgPNbEIVrNc31pfMyXzwgiQylIlVlnWc0g3anMIah0WX/N
txn+uUG3biJ86foM1+SdFUuV37zRV9Xt67UusD+0bJWSk7KPU9ooY4tQJI59L68I
RLcZKLllH15XKw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:46 2026 by rpki-client