Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: UHv8nsUNzBqH1g/kf0P4mEfHPzIrBvHVvwQ9A4qZILk=
Subject key identifier: B0:78:B4:EC:39:C8:46:CA:FC:6A:34:5E:1D:2D:13:78:D6:87:1D:4E
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 019CADFE910D600EA977D4B1F04408958D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 0946
Signing time: Mon 02 Mar 2026 10:01:07 +0000
Manifest this update: Mon 02 Mar 2026 10:01:07 +0000
Manifest next update: Tue 03 Mar 2026 10:01:07 +0000
Files and hashes: 1: Mr6edMVNczrnTD4fPbHhkJ_t0BI.roa (hash: B3H6ipVEXV+RUc2+4VXrDuLYCDQcw876zTiowv2ss50=)
2: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: lh+7mVDYFS5SBlLGk5RnmKRtlyaLdYs6MXORD+rOKo0=)
3: UZU-y9KjwHBRwAFBMLEzFqF8gQE.roa (hash: 8IesYOSWF04JS1YDSdciYf6tHgm62U6HhGDalYAE7s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:91:0d:60:0e:a9:77:d4:b1:f0:44:08:95:8d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Mar 2 10:01:07 2026 GMT
Not After : Mar 3 10:01:07 2026 GMT
Subject: CN=b078b4ec39c846cafc6a345e1d2d1378d6871d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:64:47:74:22:c8:46:89:40:24:e0:e2:5e:
cf:ae:63:81:91:aa:45:06:44:cf:68:7e:a7:14:99:
0b:fd:80:83:10:2c:26:4d:f2:0e:5b:b2:bc:50:50:
c4:6a:eb:2d:7e:e7:46:32:b3:19:79:e5:b6:f9:ba:
cb:c5:56:de:25:63:bf:77:9d:ee:79:ad:27:ad:77:
a8:66:16:13:17:82:bb:ad:72:93:3b:43:30:30:3f:
48:0a:99:a7:46:73:e2:c3:b9:98:31:b6:c3:1a:4d:
96:93:b8:e1:ed:df:03:f1:6e:b3:e7:c6:35:67:2c:
56:ef:3f:ab:7d:d8:a5:0f:6d:ad:41:6a:f6:c6:4d:
fe:fb:6a:a8:a3:1f:c1:ff:69:b1:74:4a:25:42:e4:
67:ac:8d:10:2b:c8:83:02:a3:10:08:4f:46:b1:0e:
7e:86:34:60:ae:fa:75:d4:4c:59:82:ec:59:b3:48:
98:9c:21:fe:b4:f7:88:3c:4c:2c:62:db:c6:f2:a0:
b1:aa:5d:b4:d3:c1:e4:d8:15:c0:48:c3:21:cb:03:
8e:28:06:bc:6a:ee:bc:7b:84:44:6b:b4:ab:76:b1:
62:3d:c7:f2:ef:63:67:ac:25:d1:bf:2c:94:f4:15:
eb:27:95:b0:9f:a9:24:08:ad:93:a8:a9:34:40:ac:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:78:B4:EC:39:C8:46:CA:FC:6A:34:5E:1D:2D:13:78:D6:87:1D:4E
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a5:44:7a:b7:64:9d:ee:60:87:6d:28:27:02:6e:f3:15:c2:
49:93:d5:6c:29:c1:e0:35:1f:43:08:06:dc:8e:20:c5:99:e8:
9c:16:34:3d:1d:b2:a9:6a:dc:c3:57:38:21:9b:3b:25:41:52:
6a:41:66:8a:c4:cf:d3:a2:25:cd:5d:d0:7d:6b:36:05:a3:dd:
d7:ce:fb:33:6f:89:e0:f3:b1:2d:00:2a:02:d9:e3:c2:b7:2a:
09:51:32:e1:75:33:ee:99:ce:84:88:cf:ba:f9:cd:a3:bd:d2:
81:28:8b:3f:6f:11:99:74:be:69:43:d5:38:59:21:73:23:a2:
b2:61:b3:68:ac:7a:7e:4c:ae:5c:14:fd:e7:6c:d9:0d:5b:89:
97:f8:ef:b2:02:a7:59:59:ac:87:ac:ac:3c:35:a7:5f:3d:28:
b6:43:91:6c:1f:05:70:54:5a:c0:af:b9:62:a3:61:14:a9:be:
d4:a4:f5:a5:bc:c3:88:0d:2c:5c:d4:d8:0f:ad:dc:03:28:e9:
4b:53:aa:72:cb:8b:df:f8:e0:4d:3c:47:76:e1:f8:79:f2:c0:
81:ac:e2:db:3a:15:34:40:ce:07:59:c2:c3:63:36:1d:30:8d:
ea:eb:3d:df:70:ee:10:9b:63:b2:dd:3e:f6:06:25:b6:9a:76:
e7:a8:1b:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/pENYA6pd9Sx8EQIlY0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNWJjNDQwMTQyODViNmYzZTI4NzJhZWNmNWQ0ZjMzZTI2
OGNlOGIwHhcNMjYwMzAyMTAwMTA3WhcNMjYwMzAzMTAwMTA3WjAzMTEwLwYDVQQD
EyhiMDc4YjRlYzM5Yzg0NmNhZmM2YTM0NWUxZDJkMTM3OGQ2ODcxZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZJkR3QiyEaJQCTg4l7PrmOBkapF
BkTPaH6nFJkL/YCDECwmTfIOW7K8UFDEaustfudGMrMZeeW2+brLxVbeJWO/d53u
ea0nrXeoZhYTF4K7rXKTO0MwMD9ICpmnRnPiw7mYMbbDGk2Wk7jh7d8D8W6z58Y1
ZyxW7z+rfdilD22tQWr2xk3++2qoox/B/2mxdEolQuRnrI0QK8iDAqMQCE9GsQ5+
hjRgrvp11ExZguxZs0iYnCH+tPeIPEwsYtvG8qCxql2008Hk2BXASMMhywOOKAa8
au68e4REa7SrdrFiPcfy72NnrCXRvyyU9BXrJ5Wwn6kkCK2TqKk0QKyLawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLB4tOw5yEbK/Go0Xh0tE3jWhx1OMB8GA1UdIwQY
MBaAFD9bxEAUKFtvPihyrs9dTzPiaM6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDkt
MDI5NTNjZTYzODQzLzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDktMDI5NTNjZTYzODQz
LzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKVEerdk
ne5gh20oJwJu8xXCSZPVbCnB4DUfQwgG3I4gxZnonBY0PR2yqWrcw1c4IZs7JUFS
akFmisTP06IlzV3QfWs2BaPd1877M2+J4POxLQAqAtnjwrcqCVEy4XUz7pnOhIjP
uvnNo73SgSiLP28RmXS+aUPVOFkhcyOismGzaKx6fkyuXBT952zZDVuJl/jvsgKn
WVmsh6ysPDWnXz0otkORbB8FcFRawK+5YqNhFKm+1KT1pbzDiA0sXNTYD63cAyjp
S1OqcsuL3/jgTTxHduH4efLAgazi2zoVNEDOB1nCw2M2HTCN6us933DuEJtjst0+
9gYltpp256gbwg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:17:50 2026 by rpki-client