Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: 8pyM23N/Zmq86D6pQDB9otbF4yOo5mQ82O3Uw9zygRk=
Subject key identifier: D5:37:68:77:5D:E8:04:1D:8F:EF:03:F5:17:F8:38:F3:93:12:3C:0F
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 01A132C7130A76C2DEF354C4B4C482445724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 0B9D
Signing time: Tue 13 Oct 2026 01:01:09 +0000
Manifest this update: Tue 13 Oct 2026 01:01:09 +0000
Manifest next update: Wed 14 Oct 2026 01:01:09 +0000
Files and hashes: 1: Mr6edMVNczrnTD4fPbHhkJ_t0BI.roa (hash: B3H6ipVEXV+RUc2+4VXrDuLYCDQcw876zTiowv2ss50=)
2: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: sTYoLAIRF/gVQqKDtw7Y3TjQHdzF/hR+Ogs7a79ACG4=)
3: UZU-y9KjwHBRwAFBMLEzFqF8gQE.roa (hash: 8IesYOSWF04JS1YDSdciYf6tHgm62U6HhGDalYAE7s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:c7:13:0a:76:c2:de:f3:54:c4:b4:c4:82:44:57:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Oct 13 01:01:09 2026 GMT
Not After : Oct 14 01:01:09 2026 GMT
Subject: CN=d53768775de8041d8fef03f517f838f393123c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:02:12:15:25:20:8d:85:f9:df:38:78:96:
14:95:9b:c8:82:02:f4:2c:94:92:93:08:2b:90:f9:
00:62:b5:20:db:83:5a:8f:69:52:2e:c3:19:b5:d2:
ea:54:c4:0e:24:80:7d:9e:d7:fe:8a:01:59:41:3e:
37:72:6e:4a:c0:01:20:ba:05:22:cc:ee:a7:69:f8:
56:92:9e:db:85:c4:a0:7f:99:cb:e7:81:6f:2c:02:
64:e7:92:f1:1d:26:f4:32:8b:e6:a5:f9:ee:59:0e:
62:a9:bb:1a:09:c5:cb:43:58:f7:ac:03:53:13:2a:
a1:d1:b1:a1:75:5c:71:65:be:80:b0:0f:37:85:0c:
dd:97:1c:53:dd:17:44:8a:cd:2a:a8:a2:21:ee:3f:
18:5d:d4:77:87:db:24:0d:12:b1:c8:c0:61:78:ba:
d0:00:6b:29:2f:4b:0d:86:83:bf:83:c6:f0:37:f2:
b0:db:2f:88:ff:1a:17:06:27:e5:ae:08:6c:15:4b:
da:cb:a0:ce:7c:a8:4c:13:79:5f:13:22:b9:fb:47:
c7:b4:ed:a3:82:f2:e3:57:b4:a9:e7:f6:2b:07:76:
08:03:9f:2f:b6:a0:c9:15:eb:00:04:90:df:46:21:
d8:a7:64:0f:ee:0b:5c:8b:43:e6:91:de:4f:ee:46:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:37:68:77:5D:E8:04:1D:8F:EF:03:F5:17:F8:38:F3:93:12:3C:0F
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c4:bf:19:e5:6f:6c:5c:50:b3:2d:c9:f6:a6:31:6e:66:2a:
2f:80:e6:a8:b6:56:23:ae:b8:e1:89:f3:f8:95:fa:cb:f6:2f:
34:fb:b3:21:e6:9f:2d:62:35:ba:f7:05:e7:7a:0c:c3:54:f4:
60:64:00:94:cf:ec:40:e0:bf:ef:b9:8d:66:3e:bb:36:4e:7d:
8b:c0:c9:12:50:dc:61:43:5a:c7:67:bb:07:1f:63:87:63:2c:
79:3c:f7:f1:ff:eb:53:f7:c1:6c:bc:bd:85:5e:91:49:4d:f1:
47:5b:1f:4e:ef:f6:8a:c7:1a:5a:85:43:c2:1f:ad:8c:a3:34:
aa:0e:1b:95:c1:4c:a4:76:b3:82:22:3f:a6:06:0d:3e:a9:85:
c0:11:d5:23:ce:1a:02:23:86:89:b6:3d:9d:10:1e:7d:b7:1b:
38:3f:a1:af:18:00:f8:24:3d:11:5c:a7:e3:71:98:da:e8:1a:
29:fa:87:ef:8a:a5:63:a7:66:a0:7b:d6:ca:9c:e5:00:e2:be:
64:05:9c:6b:08:5f:af:78:3b:d9:36:c9:df:ff:cf:75:fc:f8:
c8:20:34:5c:a8:56:93:ab:ee:c7:b5:99:2c:5c:33:28:d1:6f:
e9:c6:51:62:ca:c7:11:88:00:2f:b3:95:25:0e:57:60:4d:d6:
89:b6:38:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEyxxMKdsLe81TEtMSCRFckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNWJjNDQwMTQyODViNmYzZTI4NzJhZWNmNWQ0ZjMzZTI2
OGNlOGIwHhcNMjYxMDEzMDEwMTA5WhcNMjYxMDE0MDEwMTA5WjAzMTEwLwYDVQQD
EyhkNTM3Njg3NzVkZTgwNDFkOGZlZjAzZjUxN2Y4MzhmMzkzMTIzYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAICEhUlII2F+d84eJYUlZvIggL0
LJSSkwgrkPkAYrUg24Naj2lSLsMZtdLqVMQOJIB9ntf+igFZQT43cm5KwAEgugUi
zO6nafhWkp7bhcSgf5nL54FvLAJk55LxHSb0MovmpfnuWQ5iqbsaCcXLQ1j3rANT
Eyqh0bGhdVxxZb6AsA83hQzdlxxT3RdEis0qqKIh7j8YXdR3h9skDRKxyMBheLrQ
AGspL0sNhoO/g8bwN/Kw2y+I/xoXBiflrghsFUvay6DOfKhME3lfEyK5+0fHtO2j
gvLjV7Sp5/YrB3YIA58vtqDJFesABJDfRiHYp2QP7gtci0Pmkd5P7kYkpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNU3aHdd6AQdj+8D9Rf4OPOTEjwPMB8GA1UdIwQY
MBaAFD9bxEAUKFtvPihyrs9dTzPiaM6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDkt
MDI5NTNjZTYzODQzLzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDktMDI5NTNjZTYzODQz
LzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcS/GeVv
bFxQsy3J9qYxbmYqL4DmqLZWI6644Ynz+JX6y/YvNPuzIeafLWI1uvcF53oMw1T0
YGQAlM/sQOC/77mNZj67Nk59i8DJElDcYUNax2e7Bx9jh2MseTz38f/rU/fBbLy9
hV6RSU3xR1sfTu/2iscaWoVDwh+tjKM0qg4blcFMpHazgiI/pgYNPqmFwBHVI84a
AiOGibY9nRAefbcbOD+hrxgA+CQ9EVyn43GY2ugaKfqH74qlY6dmoHvWypzlAOK+
ZAWcawhfr3g72TbJ3//Pdfz4yCA0XKhWk6vux7WZLFwzKNFv6cZRYsrHEYgAL7OV
JQ5XYE3WibY4xg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 06:29:55 2026 by rpki-client