Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
File: Pn1HTATkiliTr3HDWnfN1oJv0zk.mft (raw, json)
Hash identifier: NzaTUYdRYCxH0nzgF/OEiu/TboONF44uidPdVC7uNhE=
Subject key identifier: 57:51:07:51:0C:B6:95:B5:D5:D5:2B:8A:71:AE:55:11:A5:2B:96:CB
Authority key identifier: 3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
Certificate issuer: /CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Certificate serial: 019D98BDA4952BD6701D9F2CF84928102943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
Manifest number: 076E
Signing time: Fri 17 Apr 2026 00:00:58 +0000
Manifest this update: Fri 17 Apr 2026 00:00:58 +0000
Manifest next update: Sat 18 Apr 2026 00:00:58 +0000
Files and hashes: 1: Pn1HTATkiliTr3HDWnfN1oJv0zk.crl (hash: CdoOvE+NrRgEj53qsUdXdmDpamlxZncDXhsEIlB4UWg=)
2: kq527hgVr7ukC92yfbPMdR4xku4.asa (hash: LvIhj4F/rl2CGQnbgEZFLJhN4x8R+m0+ZkR3noVX8AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:a4:95:2b:d6:70:1d:9f:2c:f8:49:28:10:29:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Validity
Not Before: Apr 17 00:00:58 2026 GMT
Not After : Apr 18 00:00:58 2026 GMT
Subject: CN=575107510cb695b5d5d52b8a71ae5511a52b96cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:42:df:08:0d:e5:e7:97:d1:c9:b2:a4:de:
f7:c4:4d:8c:ae:67:ac:d1:a0:44:40:f3:ec:cb:8e:
6e:62:cc:d9:84:5e:0f:8e:8c:e6:b0:15:30:68:bf:
92:18:ab:b9:54:7f:84:77:60:76:4d:a9:6c:6e:8d:
ab:60:d1:58:e3:c9:a4:a9:b9:b4:76:ed:c9:39:6f:
0a:26:89:1f:5a:50:1a:cc:14:23:a2:2e:a6:b9:c8:
4a:5f:07:3f:98:7b:f8:b6:48:1d:4a:17:29:26:44:
54:46:a0:b9:aa:56:4c:ec:2a:27:83:fb:20:bf:5c:
08:e4:c2:f3:ad:43:56:31:19:38:1d:e7:93:fd:e1:
c3:18:00:78:3e:62:a8:37:4a:cb:4b:3c:ea:cd:01:
18:2f:d9:f9:1b:0a:d1:23:a4:f7:55:39:57:71:82:
4f:09:ba:c7:9c:71:3a:93:37:19:32:19:03:6d:0e:
2b:bc:7c:3a:a6:61:5d:0d:9d:49:c9:e9:ae:0d:f7:
8e:34:84:ac:92:99:a0:bb:1b:7d:d9:ca:ea:e9:2b:
76:fc:2e:34:5f:25:fa:a0:27:11:00:03:de:0d:87:
12:d4:ca:62:f5:c0:70:95:11:ce:fd:e3:94:5f:54:
97:d7:8c:85:24:15:bd:eb:aa:ab:c9:4e:d8:67:81:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:51:07:51:0C:B6:95:B5:D5:D5:2B:8A:71:AE:55:11:A5:2B:96:CB
X509v3 Authority Key Identifier:
keyid:3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:71:a5:73:77:47:c3:64:7c:71:25:81:3c:d0:ca:83:ac:97:
e2:17:57:7d:4f:87:e6:f2:45:7c:9a:dd:5f:db:6b:89:96:37:
ba:1f:d3:3f:fc:eb:63:ec:61:f6:a2:a4:2a:b9:67:71:aa:ad:
3a:e6:42:43:ff:98:10:24:8e:07:da:64:70:01:48:c2:67:4f:
32:e5:87:4c:b4:42:0c:62:9d:a6:f9:64:46:04:f9:3c:4a:f6:
42:5e:51:01:3f:91:a7:1b:0e:55:09:98:80:13:b6:91:7f:a2:
b5:0e:df:c0:0f:f9:04:49:0b:6e:06:61:e6:24:d8:7e:0c:cd:
1d:fe:54:3b:51:47:cc:b2:a6:9f:a3:82:d1:aa:06:3c:8f:f1:
3d:5b:90:69:ce:43:93:08:15:ca:da:0d:41:e0:04:11:0c:9d:
33:c2:a5:c8:54:af:5c:b8:82:99:43:18:53:57:7f:3d:47:ff:
d6:70:9f:90:b6:d1:02:7c:df:2b:7d:30:26:a6:27:09:4b:ed:
d4:72:88:0b:ab:aa:98:2e:14:ae:92:fb:b1:41:c1:cf:1e:4e:
c8:b7:59:cf:6e:24:7e:94:9e:3d:5a:f9:73:21:90:18:a1:4e:
73:1c:d8:55:ac:7b:4a:60:18:dc:4e:d6:4f:f1:dd:5a:e2:78:
aa:a1:6c:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvaSVK9ZwHZ8s+EkoEClDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlN2Q0NzRjMDRlNDhhNTg5M2FmNzFjMzVhNzdjZGQ2ODI2
ZmQzMzkwHhcNMjYwNDE3MDAwMDU4WhcNMjYwNDE4MDAwMDU4WjAzMTEwLwYDVQQD
Eyg1NzUxMDc1MTBjYjY5NWI1ZDVkNTJiOGE3MWFlNTUxMWE1MmI5NmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8hC3wgN5eeX0cmypN73xE2Mrmes
0aBEQPPsy45uYszZhF4PjozmsBUwaL+SGKu5VH+Ed2B2Talsbo2rYNFY48mkqbm0
du3JOW8KJokfWlAazBQjoi6muchKXwc/mHv4tkgdShcpJkRURqC5qlZM7Cong/sg
v1wI5MLzrUNWMRk4HeeT/eHDGAB4PmKoN0rLSzzqzQEYL9n5GwrRI6T3VTlXcYJP
CbrHnHE6kzcZMhkDbQ4rvHw6pmFdDZ1JyemuDfeONISskpmguxt92crq6St2/C40
XyX6oCcRAAPeDYcS1Mpi9cBwlRHO/eOUX1SX14yFJBW966qryU7YZ4E+HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdRB1EMtpW11dUrinGuVRGlK5bLMB8GA1UdIwQY
MBaAFD59R0wE5IpYk69xw1p3zdaCb9M5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG4xSFRBVGtpbGlUcjNIRFduZk4xb0p2MHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZTMwZTgtYjgzNS00NGFmLWE0NGIt
OTAzZTRmNWUxMjI1LzEvUG4xSFRBVGtpbGlUcjNIRFduZk4xb0p2MHprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83ZTMwZTgtYjgzNS00NGFmLWE0NGItOTAzZTRmNWUxMjI1
LzEvUG4xSFRBVGtpbGlUcjNIRFduZk4xb0p2MHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXGlc3dH
w2R8cSWBPNDKg6yX4hdXfU+H5vJFfJrdX9triZY3uh/TP/zrY+xh9qKkKrlncaqt
OuZCQ/+YECSOB9pkcAFIwmdPMuWHTLRCDGKdpvlkRgT5PEr2Ql5RAT+RpxsOVQmY
gBO2kX+itQ7fwA/5BEkLbgZh5iTYfgzNHf5UO1FHzLKmn6OC0aoGPI/xPVuQac5D
kwgVytoNQeAEEQydM8KlyFSvXLiCmUMYU1d/PUf/1nCfkLbRAnzfK30wJqYnCUvt
1HKIC6uqmC4UrpL7sUHBzx5OyLdZz24kfpSePVr5cyGQGKFOcxzYVax7SmAY3E7W
T/HdWuJ4qqFsNA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:20 2026 by rpki-client