Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: 3rmJvjmqYUGe9ZcwqAjGgFCvO4CaqyOVBgIrC0N3XdA=
Subject key identifier: A5:C4:86:75:DA:8A:90:D5:56:BA:4B:58:D3:8D:F3:0F:21:7D:08:D0
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 019D99623542B0C3E7E96550E779EE9CF82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 0B44
Signing time: Fri 17 Apr 2026 03:00:43 +0000
Manifest this update: Fri 17 Apr 2026 03:00:43 +0000
Manifest next update: Sat 18 Apr 2026 03:00:43 +0000
Files and hashes: 1: 6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa (hash: wpsN0tsYTVD9eZ1wIkFPmbb5yPxiazJ0MhFoB9FJQW4=)
2: DR9MoQCYtXaLoml4Dm1_5qJwPs4.roa (hash: nXlN3VKxLNyqdBBXWDPV2SzM6R5K4D1KJpMD50qdg/A=)
3: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: PFE0hpQO0EpgUGUwghLbQzMix8O0N/qCHL61bj4HFPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:35:42:b0:c3:e7:e9:65:50:e7:79:ee:9c:f8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Apr 17 03:00:43 2026 GMT
Not After : Apr 18 03:00:43 2026 GMT
Subject: CN=a5c48675da8a90d556ba4b58d38df30f217d08d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:6d:56:f9:1a:a9:25:6e:46:af:bf:b1:8f:
26:92:d2:1f:7e:79:d1:77:4b:10:d1:72:7d:6b:81:
57:75:c1:53:a2:b8:68:12:31:43:0c:af:68:c6:f5:
1c:9f:5d:6b:d3:54:27:21:22:12:41:06:5f:f9:df:
a0:b6:5b:44:ee:8b:44:dc:02:41:b2:80:a1:96:fd:
89:64:61:96:10:c9:22:44:a4:a6:a2:74:11:3d:bc:
24:0b:55:95:4e:a5:ca:f5:30:64:a8:fa:9f:41:0d:
9f:d0:88:e1:c1:a2:09:e4:a3:37:54:a5:ea:00:bd:
1a:72:ee:bf:b2:ec:b2:d7:15:bd:82:65:95:ee:81:
33:20:66:cc:a7:87:3d:56:a7:ca:15:76:41:00:8b:
6b:ef:6c:6c:91:d0:1d:1d:d9:2e:27:50:d9:b2:e5:
98:35:41:5c:a9:98:a5:2e:1b:5c:8d:8e:e7:aa:c9:
9c:8c:6d:f6:8a:c0:d8:d1:55:8f:0b:de:24:c9:e5:
cd:e8:ed:3c:ac:b2:7c:b6:63:d7:93:a7:f6:d5:d7:
5d:e9:12:9d:71:68:f5:c1:00:e3:c6:15:e8:84:8e:
b1:b9:a6:b8:cd:fa:09:10:de:5b:7e:4b:41:28:5a:
b2:c4:b7:bc:10:ed:94:24:ad:b6:70:26:d3:60:91:
77:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C4:86:75:DA:8A:90:D5:56:BA:4B:58:D3:8D:F3:0F:21:7D:08:D0
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:43:23:a1:b0:73:4a:f5:32:43:d8:8f:10:3a:4c:d6:93:00:
f5:e3:ea:d2:bb:5d:bc:b6:53:63:ce:55:60:b1:e9:20:79:43:
59:d4:c0:e7:b1:3e:fd:28:a2:0a:69:97:8b:17:b5:e8:2a:7a:
7a:49:c0:91:fb:c0:36:36:83:e2:37:91:cc:cf:f3:82:17:b8:
87:d7:2c:da:e6:63:ae:ae:21:0b:1a:16:18:d6:8a:23:a4:bc:
3f:35:b3:a8:31:1f:5f:f7:e6:fb:90:c0:74:35:89:f3:68:3b:
e0:aa:9e:39:ec:33:5f:ed:fb:38:28:d0:1d:ae:f8:4b:bb:75:
4d:25:13:6a:b8:b9:e4:45:f4:ca:fc:67:01:50:fd:9d:2e:3f:
13:7c:be:da:fa:8b:0d:67:2a:83:9c:a3:4e:5b:61:66:68:d4:
0b:d2:5f:b4:73:3d:f0:f6:a0:5e:fd:e5:75:56:6d:6f:45:df:
a9:64:22:5d:45:f5:6d:8f:4f:83:21:95:23:58:9b:2b:b8:84:
a6:de:a3:f3:1d:6e:e9:67:db:f6:8d:09:db:3d:f6:80:f7:82:
07:d8:e5:10:cd:21:41:28:00:63:4f:0c:cb:2d:37:af:52:b1:
34:70:bf:e3:8e:49:71:3f:d7:68:37:f8:8e:9a:61:fb:2e:ae:
83:b4:e9:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYjVCsMPn6WVQ53nunPguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZGUyNDcwYzg1NjM5NDk0ODdhM2U3ODc0M2M1NDRjOTll
YzhhNjQwHhcNMjYwNDE3MDMwMDQzWhcNMjYwNDE4MDMwMDQzWjAzMTEwLwYDVQQD
EyhhNWM0ODY3NWRhOGE5MGQ1NTZiYTRiNThkMzhkZjMwZjIxN2QwOGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FRtVvkaqSVuRq+/sY8mktIffnnR
d0sQ0XJ9a4FXdcFTorhoEjFDDK9oxvUcn11r01QnISISQQZf+d+gtltE7otE3AJB
soChlv2JZGGWEMkiRKSmonQRPbwkC1WVTqXK9TBkqPqfQQ2f0IjhwaIJ5KM3VKXq
AL0acu6/suyy1xW9gmWV7oEzIGbMp4c9VqfKFXZBAItr72xskdAdHdkuJ1DZsuWY
NUFcqZilLhtcjY7nqsmcjG32isDY0VWPC94kyeXN6O08rLJ8tmPXk6f21ddd6RKd
cWj1wQDjxhXohI6xuaa4zfoJEN5bfktBKFqyxLe8EO2UJK22cCbTYJF3MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXEhnXaipDVVrpLWNON8w8hfQjQMB8GA1UdIwQY
MBaAFDzeJHDIVjlJSHo+eHQ8VEyZ7IpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUt
NDQxNzFiMmY1OTllLzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUtNDQxNzFiMmY1OTll
LzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0MjobBz
SvUyQ9iPEDpM1pMA9ePq0rtdvLZTY85VYLHpIHlDWdTA57E+/SiiCmmXixe16Cp6
eknAkfvANjaD4jeRzM/zghe4h9cs2uZjrq4hCxoWGNaKI6S8PzWzqDEfX/fm+5DA
dDWJ82g74KqeOewzX+37OCjQHa74S7t1TSUTari55EX0yvxnAVD9nS4/E3y+2vqL
DWcqg5yjTlthZmjUC9JftHM98PagXv3ldVZtb0XfqWQiXUX1bY9PgyGVI1ibK7iE
pt6j8x1u6Wfb9o0J2z32gPeCB9jlEM0hQSgAY08Myy03r1KxNHC/445JcT/XaDf4
jpph+y6ug7TppA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:55 2026 by rpki-client