Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
File: Pr6uqg8H3D1UvBFcziAq2pggsdU.mft (raw, json)
Hash identifier: SEetmR0zUvzpyceyioSt2agCqz3DBTYoxTZakFmExwQ=
Subject key identifier: 52:0C:D5:8B:21:0B:FD:87:8A:8B:E0:E8:F1:5F:EF:36:8C:F1:F9:DF
Authority key identifier: 3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5
Certificate issuer: /CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
Certificate serial: 019CAB3414374FE6CD850B973D9F5F4B9C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
Manifest number: 09D9
Signing time: Sun 01 Mar 2026 21:00:42 +0000
Manifest this update: Sun 01 Mar 2026 21:00:42 +0000
Manifest next update: Mon 02 Mar 2026 21:00:42 +0000
Files and hashes: 1: Pr6uqg8H3D1UvBFcziAq2pggsdU.crl (hash: G5c4G1gT4rxxfih2WWPdBqUc6xmUXlmh2kOmWEuRvCY=)
2: ralErmH8EJ-9ydnhnrCvDlZV9ys.roa (hash: sDfjqe7LCY2kx4pVv1vmwGHXaRFhYudsoSBTeUiDShY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:14:37:4f:e6:cd:85:0b:97:3d:9f:5f:4b:9c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
Validity
Not Before: Mar 1 21:00:42 2026 GMT
Not After : Mar 2 21:00:42 2026 GMT
Subject: CN=520cd58b210bfd878a8be0e8f15fef368cf1f9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:ff:80:1e:e7:c2:ab:ca:55:e9:11:6f:95:
91:66:11:68:15:7f:79:42:10:3a:fa:b5:72:cc:82:
18:62:fe:10:32:11:72:5b:7a:10:85:fa:a8:f7:75:
6c:2b:64:b4:c5:d4:9e:d2:48:50:f7:a3:aa:fd:5e:
ba:fa:c7:11:d5:ee:b6:85:b2:b4:0e:c1:ed:e5:a2:
d9:e6:2d:b0:76:26:00:19:69:df:8f:05:94:c0:9d:
88:b3:c9:12:b8:ef:56:57:76:59:1b:a7:f1:69:38:
c7:11:6b:f5:19:a5:75:0b:de:9b:05:04:9b:0b:d6:
73:66:84:f8:14:cf:8d:c5:f8:d6:81:50:aa:b7:0b:
30:b8:b3:a2:ed:5e:34:bd:c9:92:99:f6:d1:00:f9:
63:03:92:b1:60:42:de:8f:4a:94:9c:64:a7:4e:f5:
9d:f8:5a:15:02:a3:08:a2:3d:d1:bc:44:92:cb:3b:
1c:0c:48:93:78:69:e4:48:b5:70:46:d9:3d:66:3c:
01:a7:3d:0d:31:99:7f:d3:d0:61:53:86:e4:bd:be:
69:ad:08:d7:1e:91:2c:3c:2c:7e:ec:5e:75:48:b7:
fe:1d:72:44:19:72:b8:9f:d4:1c:98:fc:ca:b9:46:
6a:69:92:88:23:23:0b:5a:97:65:e3:6f:74:3a:e8:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0C:D5:8B:21:0B:FD:87:8A:8B:E0:E8:F1:5F:EF:36:8C:F1:F9:DF
X509v3 Authority Key Identifier:
keyid:3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3a:20:79:9d:2c:de:c2:4a:c0:a7:75:b4:41:ee:74:ab:5e:
5d:4b:31:77:46:ce:15:a1:b8:4c:3d:fd:ba:11:6e:64:06:d0:
e3:23:23:7d:8a:f5:60:af:cf:20:41:a7:c7:5e:42:2c:6b:2e:
14:2d:07:7a:04:e0:65:ad:f4:3a:dd:24:13:0c:a2:e3:19:79:
02:de:91:0d:51:5c:23:09:d8:7a:86:3e:11:5c:51:5d:05:e5:
bc:1d:a4:ef:11:cc:47:1f:ec:0c:44:6c:3e:c2:3c:2c:97:e2:
4a:4e:43:65:04:47:e0:b1:6f:ad:61:c0:1b:90:e8:37:4f:e7:
00:b9:88:84:51:a3:7e:00:8c:dd:1c:d5:a9:74:a3:fc:af:25:
8c:2a:27:62:67:79:65:1b:97:87:2b:eb:6c:74:0d:c5:7d:5c:
40:15:1c:15:0e:f1:fa:cc:00:3c:b2:a5:06:51:b7:19:e5:fd:
79:45:7f:94:4a:c4:54:6b:c0:c7:b2:fa:93:dc:40:2a:d7:a3:
03:b7:42:80:82:8f:ba:2c:0d:9d:3a:c7:25:38:b6:be:99:95:
91:5f:8a:cb:59:1b:c6:31:03:d1:19:7a:8b:8c:1b:6c:61:7f:
a5:03:00:84:c6:dc:b8:3b:d9:20:23:0f:0e:9b:5b:ca:72:c0:
b8:f8:f4:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNBQ3T+bNhQuXPZ9fS5xoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYmVhZWFhMGYwN2RjM2Q1NGJjMTE1Y2NlMjAyYWRhOTgy
MGIxZDUwHhcNMjYwMzAxMjEwMDQyWhcNMjYwMzAyMjEwMDQyWjAzMTEwLwYDVQQD
Eyg1MjBjZDU4YjIxMGJmZDg3OGE4YmUwZThmMTVmZWYzNjhjZjFmOWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8f/gB7nwqvKVekRb5WRZhFoFX95
QhA6+rVyzIIYYv4QMhFyW3oQhfqo93VsK2S0xdSe0khQ96Oq/V66+scR1e62hbK0
DsHt5aLZ5i2wdiYAGWnfjwWUwJ2Is8kSuO9WV3ZZG6fxaTjHEWv1GaV1C96bBQSb
C9ZzZoT4FM+NxfjWgVCqtwswuLOi7V40vcmSmfbRAPljA5KxYELej0qUnGSnTvWd
+FoVAqMIoj3RvESSyzscDEiTeGnkSLVwRtk9ZjwBpz0NMZl/09BhU4bkvb5prQjX
HpEsPCx+7F51SLf+HXJEGXK4n9QcmPzKuUZqaZKIIyMLWpdl4290OujZ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIM1YshC/2Hiovg6PFf7zaM8fnfMB8GA1UdIwQY
MBaAFD6+rqoPB9w9VLwRXM4gKtqYILHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zYTAzNjgtNTcwYy00ODQ3LThkNGEt
ZmY0YWQxZTNkYWY1LzEvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zYTAzNjgtNTcwYy00ODQ3LThkNGEtZmY0YWQxZTNkYWY1
LzEvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTogeZ0s
3sJKwKd1tEHudKteXUsxd0bOFaG4TD39uhFuZAbQ4yMjfYr1YK/PIEGnx15CLGsu
FC0HegTgZa30Ot0kEwyi4xl5At6RDVFcIwnYeoY+EVxRXQXlvB2k7xHMRx/sDERs
PsI8LJfiSk5DZQRH4LFvrWHAG5DoN0/nALmIhFGjfgCM3RzVqXSj/K8ljConYmd5
ZRuXhyvrbHQNxX1cQBUcFQ7x+swAPLKlBlG3GeX9eUV/lErEVGvAx7L6k9xAKtej
A7dCgIKPuiwNnTrHJTi2vpmVkV+Ky1kbxjED0Rl6i4wbbGF/pQMAhMbcuDvZICMP
DptbynLAuPj0Bw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:52 2026 by rpki-client