Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
File: pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json)
Hash identifier: dSoIoS/cituYaIeOzJ54gucs3nCe7fQNQnOVuwtI7wA=
Subject key identifier: C7:D2:8E:45:97:1F:82:70:EC:2B:0B:DB:40:D6:D3:EE:81:BF:FE:07
Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Certificate issuer: /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Certificate serial: 019CAAC62541D5AE27AEAF65B2CEAD67C6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
Manifest number: 17DA
Signing time: Sun 01 Mar 2026 19:00:38 +0000
Manifest this update: Sun 01 Mar 2026 19:00:38 +0000
Manifest next update: Mon 02 Mar 2026 19:00:38 +0000
Files and hashes: 1: EOVG1E-Fss-TCAZp6FvBla5puoE.roa (hash: QLZCSRXuXCEog/Ml5Xp9IxcczY5XpGCzAWi6jfDK03o=)
2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: uk0cplyH0wiOyz+nweNyGdbzrlKVPhgXNUJywyYGXMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:25:41:d5:ae:27:ae:af:65:b2:ce:ad:67:c6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Validity
Not Before: Mar 1 19:00:38 2026 GMT
Not After : Mar 2 19:00:38 2026 GMT
Subject: CN=c7d28e45971f8270ec2b0bdb40d6d3ee81bffe07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:2b:08:e6:a2:e1:cc:8b:07:4b:bf:5d:32:
7f:5e:a1:25:28:a5:e5:fc:47:40:e1:c5:9d:f1:d7:
f5:db:e5:38:5a:4f:ef:8a:89:c8:3a:48:a9:bf:8e:
05:5c:54:df:c1:93:8c:4d:e0:5c:de:3f:e4:a0:5f:
cf:75:c4:ed:bd:e5:01:f6:a5:be:20:6c:98:32:84:
65:01:92:d8:76:68:5f:b7:9c:cf:6d:e3:0e:5a:21:
f5:f4:01:af:b8:ed:d5:42:75:76:51:f9:e9:df:0f:
6e:2f:c1:6d:80:28:f0:62:a2:97:7d:02:f7:c2:a7:
2e:61:fa:7c:a2:8a:f0:f6:27:06:46:ce:9e:c7:ea:
c9:bd:b7:f8:71:7b:6c:32:38:8c:ba:30:e2:c8:47:
0e:bf:f2:d7:b5:9e:1e:f3:e7:0a:01:99:e5:02:d1:
a9:47:f2:b2:c5:59:9b:3d:6c:66:31:9e:a0:f8:ae:
9f:16:45:01:68:ba:f6:ed:92:55:75:e3:e4:5e:6d:
45:71:bc:5f:12:c1:4e:84:f0:85:c9:73:1c:d7:0c:
06:dd:7e:d2:bc:1c:ff:1e:12:ae:df:17:2a:2d:40:
ae:53:6c:25:6d:dc:84:6b:9a:67:52:dd:b3:14:19:
81:de:9a:13:87:5a:47:27:eb:a8:d0:56:a0:90:4f:
5d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D2:8E:45:97:1F:82:70:EC:2B:0B:DB:40:D6:D3:EE:81:BF:FE:07
X509v3 Authority Key Identifier:
keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cf:ea:81:8a:ab:18:f9:07:0b:e5:c5:7e:59:12:34:4b:93:
11:4b:a9:dd:7b:50:03:85:3f:35:e0:29:7a:73:ac:bc:78:a2:
54:18:24:73:06:c7:24:b4:51:90:17:31:fd:38:b4:b4:4a:56:
25:a2:34:ea:02:44:0c:d9:c3:84:92:38:44:d5:88:a6:c3:20:
a4:9d:62:e6:44:ea:ca:43:72:c6:b2:f0:06:0c:45:78:47:1c:
6f:82:66:44:07:da:35:f6:ed:37:52:d9:d7:9a:a7:d9:61:79:
12:3f:d8:3b:1f:4f:f5:6f:c6:67:18:af:18:8d:1c:87:27:48:
8d:d5:43:33:e8:71:f0:df:1c:39:76:91:03:0c:a7:07:c3:01:
42:8e:c8:3e:5a:cd:07:7d:75:9c:89:c8:e2:3c:58:50:e0:e6:
43:bf:30:5a:07:f4:33:62:67:e1:b5:85:c2:86:06:5f:b4:2a:
49:50:0e:3c:a1:d9:db:c9:eb:f9:5e:48:30:c2:ac:0e:de:e4:
15:21:13:2e:09:25:13:69:2e:9f:d5:90:eb:c4:57:cf:63:c4:
e1:3e:22:8d:f8:c8:9e:1c:f0:e4:f2:0e:ca:fd:f0:94:2d:34:
a6:84:a5:c4:76:25:91:4f:0d:3a:8a:b7:e8:0f:0c:7f:28:c4:
c7:0f:c6:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxiVB1a4nrq9lss6tZ8b/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDBiODVmMGY3YmE2Mzg1Y2Q0ZmVlOGEwZWMwNGU4MTg0
MTU0MmMwHhcNMjYwMzAxMTkwMDM4WhcNMjYwMzAyMTkwMDM4WjAzMTEwLwYDVQQD
EyhjN2QyOGU0NTk3MWY4MjcwZWMyYjBiZGI0MGQ2ZDNlZTgxYmZmZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NgrCOai4cyLB0u/XTJ/XqElKKXl
/EdA4cWd8df12+U4Wk/vionIOkipv44FXFTfwZOMTeBc3j/koF/PdcTtveUB9qW+
IGyYMoRlAZLYdmhft5zPbeMOWiH19AGvuO3VQnV2Ufnp3w9uL8FtgCjwYqKXfQL3
wqcuYfp8oorw9icGRs6ex+rJvbf4cXtsMjiMujDiyEcOv/LXtZ4e8+cKAZnlAtGp
R/KyxVmbPWxmMZ6g+K6fFkUBaLr27ZJVdePkXm1FcbxfEsFOhPCFyXMc1wwG3X7S
vBz/HhKu3xcqLUCuU2wlbdyEa5pnUt2zFBmB3poTh1pHJ+uo0FagkE9dgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfSjkWXH4Jw7CsL20DW0+6Bv/4HMB8GA1UdIwQY
MBaAFKRAuF8Pe6Y4XNT+6KDsBOgYQVQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDkt
ZGRjZmUzNmY0MzNiLzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDktZGRjZmUzNmY0MzNi
LzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8/qgYqr
GPkHC+XFflkSNEuTEUup3XtQA4U/NeApenOsvHiiVBgkcwbHJLRRkBcx/Ti0tEpW
JaI06gJEDNnDhJI4RNWIpsMgpJ1i5kTqykNyxrLwBgxFeEccb4JmRAfaNfbtN1LZ
15qn2WF5Ej/YOx9P9W/GZxivGI0chydIjdVDM+hx8N8cOXaRAwynB8MBQo7IPlrN
B311nInI4jxYUODmQ78wWgf0M2Jn4bWFwoYGX7QqSVAOPKHZ28nr+V5IMMKsDt7k
FSETLgklE2kun9WQ68RXz2PE4T4ijfjInhzw5PIOyv3wlC00poSlxHYlkU8NOoq3
6A8MfyjExw/G4A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:14 2026 by rpki-client