Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
File: Pn1HTATkiliTr3HDWnfN1oJv0zk.mft (raw, json)
Hash identifier: 3uw/bGOIPd4EA/6JVEuBu/mlkgYqMK9FOsqmw1Epw28=
Subject key identifier: 15:6D:3F:5C:BB:C2:B3:31:0D:42:62:6A:15:32:E7:88:4D:99:CD:A1
Authority key identifier: 3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
Certificate issuer: /CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Certificate serial: 019CA945CAAA37B07D00B9F091181FDA9B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
Manifest number: 06F2
Signing time: Sun 01 Mar 2026 12:00:49 +0000
Manifest this update: Sun 01 Mar 2026 12:00:49 +0000
Manifest next update: Mon 02 Mar 2026 12:00:49 +0000
Files and hashes: 1: Pn1HTATkiliTr3HDWnfN1oJv0zk.crl (hash: 4KxEEh5RZtISXiFRoUQ42qawzTdK1nanlCBDlWPgm2c=)
2: kq527hgVr7ukC92yfbPMdR4xku4.asa (hash: LvIhj4F/rl2CGQnbgEZFLJhN4x8R+m0+ZkR3noVX8AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:ca:aa:37:b0:7d:00:b9:f0:91:18:1f:da:9b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Validity
Not Before: Mar 1 12:00:49 2026 GMT
Not After : Mar 2 12:00:49 2026 GMT
Subject: CN=156d3f5cbbc2b3310d42626a1532e7884d99cda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:c7:2f:95:2b:e7:1c:97:3d:e4:d1:72:2c:
5f:ca:89:c9:0c:b4:07:06:11:d8:23:1d:c5:79:35:
2a:89:91:ff:11:85:d0:42:42:71:78:97:47:41:be:
19:e2:c9:ce:04:4c:79:6a:fd:e5:da:59:8a:ac:1f:
84:e8:a2:0f:6e:e4:33:9b:a3:69:c2:e6:1a:bc:53:
26:28:8c:ec:d1:87:8f:55:d2:95:ce:3d:5b:68:b8:
6d:5c:50:31:ee:ee:42:29:02:b8:29:4c:17:a6:cc:
92:da:8a:c7:c7:e8:2a:63:59:89:66:e6:86:75:33:
e5:d0:41:50:90:79:94:1d:54:91:8f:5c:23:c3:9f:
b9:e0:d9:74:ec:10:5e:64:57:9f:8d:25:99:45:47:
ca:db:0d:7c:ff:12:98:ab:44:b1:b7:a2:2d:b2:6a:
b0:4e:b7:a3:c5:36:55:8f:53:16:11:74:fe:32:01:
65:90:61:b0:fc:72:f5:f8:bf:11:08:1b:7d:cc:62:
15:0a:f2:9d:2a:07:60:92:f9:0f:14:ee:02:e0:ad:
53:2f:88:f7:6c:f0:78:d2:c8:5d:72:a4:eb:c7:eb:
ed:f1:cd:cf:ac:1d:5e:a1:15:7b:44:15:cd:e9:28:
d1:77:27:0a:2b:4d:df:44:50:d5:13:2b:cd:15:53:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:3F:5C:BB:C2:B3:31:0D:42:62:6A:15:32:E7:88:4D:99:CD:A1
X509v3 Authority Key Identifier:
keyid:3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:86:12:5e:c7:4b:83:00:01:fe:6b:2e:67:73:a2:3e:7f:be:
61:92:f3:5f:81:9b:b1:c0:83:8e:7e:86:12:7f:f9:fa:d7:a7:
3e:9f:70:41:b8:59:30:c3:52:11:f8:da:e8:63:c1:dc:50:50:
84:6f:b6:b2:10:75:30:dc:3f:56:75:cc:eb:ee:c4:b9:44:5f:
87:82:09:be:24:60:05:4d:24:8e:dd:b5:d0:84:ce:37:cb:6e:
89:96:09:d9:61:c3:7d:42:e9:3a:56:4e:18:97:88:69:60:f7:
16:5e:f0:df:ee:dc:4d:ce:d3:3d:a9:82:3d:97:55:c4:ec:e7:
9f:a2:49:17:87:35:c2:34:72:98:e6:ea:96:16:97:0c:4d:33:
8d:41:89:e3:28:3e:ab:1b:5f:9a:68:45:dd:75:d8:7e:9a:a6:
8d:c8:e2:01:52:d8:4d:2f:e2:57:3b:96:40:26:17:62:5c:ae:
e5:a0:d7:41:58:f7:af:ac:02:0a:d7:11:ec:48:ef:79:09:d8:
a4:4e:35:e4:e8:86:00:90:ba:cd:ba:59:9a:d7:a0:b9:8b:6c:
3d:49:7e:c1:11:9e:e2:b1:8f:59:36:23:fd:68:9b:74:66:ea:
a0:a2:aa:fc:70:70:56:47:38:94:5f:93:28:e0:5e:c4:54:d5:
b7:a7:9b:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRcqqN7B9ALnwkRgf2puSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlN2Q0NzRjMDRlNDhhNTg5M2FmNzFjMzVhNzdjZGQ2ODI2
ZmQzMzkwHhcNMjYwMzAxMTIwMDQ5WhcNMjYwMzAyMTIwMDQ5WjAzMTEwLwYDVQQD
EygxNTZkM2Y1Y2JiYzJiMzMxMGQ0MjYyNmExNTMyZTc4ODRkOTljZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCzHL5Ur5xyXPeTRcixfyonJDLQH
BhHYIx3FeTUqiZH/EYXQQkJxeJdHQb4Z4snOBEx5av3l2lmKrB+E6KIPbuQzm6Np
wuYavFMmKIzs0YePVdKVzj1baLhtXFAx7u5CKQK4KUwXpsyS2orHx+gqY1mJZuaG
dTPl0EFQkHmUHVSRj1wjw5+54Nl07BBeZFefjSWZRUfK2w18/xKYq0Sxt6Itsmqw
TrejxTZVj1MWEXT+MgFlkGGw/HL1+L8RCBt9zGIVCvKdKgdgkvkPFO4C4K1TL4j3
bPB40shdcqTrx+vt8c3PrB1eoRV7RBXN6SjRdycKK03fRFDVEyvNFVOgsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVtP1y7wrMxDUJiahUy54hNmc2hMB8GA1UdIwQY
MBaAFD59R0wE5IpYk69xw1p3zdaCb9M5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG4xSFRBVGtpbGlUcjNIRFduZk4xb0p2MHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZTMwZTgtYjgzNS00NGFmLWE0NGIt
OTAzZTRmNWUxMjI1LzEvUG4xSFRBVGtpbGlUcjNIRFduZk4xb0p2MHprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83ZTMwZTgtYjgzNS00NGFmLWE0NGItOTAzZTRmNWUxMjI1
LzEvUG4xSFRBVGtpbGlUcjNIRFduZk4xb0p2MHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv4YSXsdL
gwAB/msuZ3OiPn++YZLzX4GbscCDjn6GEn/5+tenPp9wQbhZMMNSEfja6GPB3FBQ
hG+2shB1MNw/VnXM6+7EuURfh4IJviRgBU0kjt210ITON8tuiZYJ2WHDfULpOlZO
GJeIaWD3Fl7w3+7cTc7TPamCPZdVxOznn6JJF4c1wjRymObqlhaXDE0zjUGJ4yg+
qxtfmmhF3XXYfpqmjcjiAVLYTS/iVzuWQCYXYlyu5aDXQVj3r6wCCtcR7EjveQnY
pE415OiGAJC6zbpZmteguYtsPUl+wRGe4rGPWTYj/WibdGbqoKKq/HBwVkc4lF+T
KOBexFTVt6eboQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:19 2026 by rpki-client