Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json)
Hash identifier: s3x6a5NpqrMdQczZqzu9uYJN37maGudX/inhsyOVFag=
Subject key identifier: 05:93:FB:3E:64:38:0B:1D:89:E4:8C:CF:47:67:E3:67:93:E4:09:78
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 019CAA2173A3369E44BBF4CA0C996F9A1CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 16:00:44 +0000
Manifest this update: Sun 01 Mar 2026 16:00:44 +0000
Manifest next update: Mon 02 Mar 2026 16:00:44 +0000
Files and hashes: 1: TEyzbeE0RPVawr5UzZUBwB5xhtc.roa (hash: bkckZhvDpq39zxJxt09vjj1edwBpMlUWDqgAAFwbo24=)
2: Xdnvns2DRqazD189iM-2jNt4vZo.roa (hash: UAbhMlaae4Ik19w+3ZsFKwWR5TNpwZbcrBfdZMwkITk=)
3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: I+lUi7YPpeQ0AiBAH56dOswQlBp2csSIeeM0ECeP3Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:73:a3:36:9e:44:bb:f4:ca:0c:99:6f:9a:1c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Mar 1 16:00:44 2026 GMT
Not After : Mar 2 16:00:44 2026 GMT
Subject: CN=0593fb3e64380b1d89e48ccf4767e36793e40978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d4:f6:0d:41:22:8a:09:62:d6:2f:de:b5:e1:
c4:76:03:91:16:3d:d9:48:5a:a5:dd:65:13:10:42:
b9:46:98:cd:40:3b:20:8f:c9:99:db:d2:f1:dd:ca:
92:55:68:44:79:da:74:92:b1:dd:00:31:0f:9c:5d:
8e:39:00:f1:d6:af:16:ad:26:e6:cb:a1:d3:18:ad:
d9:19:0d:92:fd:53:bb:38:69:b3:b0:a1:00:ef:18:
96:c3:ac:2f:5e:5e:4b:74:c2:8b:34:3b:46:de:11:
d0:de:07:16:f8:dc:01:a7:92:87:6a:e4:04:92:e5:
c7:71:db:84:b8:07:61:82:bb:38:d7:3c:55:7d:82:
0d:f2:ed:77:49:95:a1:c2:34:92:0e:d6:c1:d2:d4:
21:3f:42:fb:ef:4b:89:bb:dd:41:94:74:22:4a:ac:
df:91:06:b8:69:cc:9d:4c:47:07:00:c4:20:fb:d0:
03:4c:d2:5d:9b:a4:5d:f8:b4:7f:12:73:ff:a3:2e:
2d:21:16:19:56:e0:52:b5:e2:28:85:1c:6b:a6:7c:
b0:d0:3a:e0:f2:8c:11:cd:c7:a1:15:16:ec:73:a9:
f8:9b:47:42:97:bd:6f:94:5f:8b:87:bd:62:a0:5c:
fd:80:2c:35:f1:8f:20:21:fa:63:ac:31:8d:99:76:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:93:FB:3E:64:38:0B:1D:89:E4:8C:CF:47:67:E3:67:93:E4:09:78
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:42:7b:35:17:8c:45:8b:6f:ff:0c:c9:80:ec:40:c8:5b:a6:
af:2a:0f:11:ae:58:03:e6:b7:d8:9e:f3:73:2e:4f:1a:74:7c:
a0:47:44:81:4b:3a:d9:85:0b:75:db:31:21:1b:6e:94:7d:c5:
6f:c1:c9:2e:3a:7b:14:dc:95:54:5a:8e:f8:41:c0:89:32:ba:
a7:23:42:15:2d:99:ff:c9:1e:a9:99:ae:eb:84:b7:7d:55:6c:
1f:89:8f:72:dc:df:a4:e8:6e:11:ff:f2:83:08:a8:0a:a9:de:
c1:1f:71:41:61:51:db:d2:b1:6c:cc:08:cf:e9:2e:38:d0:e6:
51:e3:c6:18:a0:0d:6a:fe:51:51:2d:23:72:cc:cf:bd:7a:70:
bb:9b:1f:2b:6e:a6:4a:df:f2:35:9b:af:1a:34:6d:8b:68:8b:
2f:c7:6c:c6:d6:42:a9:51:21:82:1a:e7:f5:18:5d:a1:8e:19:
8d:ea:67:48:bf:a3:6d:ba:84:72:94:50:9c:86:b9:57:57:83:
cc:2e:4d:57:be:91:df:5b:bb:d6:c3:70:c3:53:99:8e:28:fb:
8a:e0:99:97:35:64:d3:75:b6:f1:22:d4:a7:29:98:13:fc:d9:
42:37:e6:ae:7e:6e:bd:cf:3c:7e:9a:0b:11:8d:c3:37:28:31:
b5:64:7a:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIXOjNp5Eu/TKDJlvmhz6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDBjNzUxZWJmYjQ4MDdkODQ2MjJlODA2Y2IzZDBiOWRk
ODEwNjkwHhcNMjYwMzAxMTYwMDQ0WhcNMjYwMzAyMTYwMDQ0WjAzMTEwLwYDVQQD
EygwNTkzZmIzZTY0MzgwYjFkODllNDhjY2Y0NzY3ZTM2NzkzZTQwOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NT2DUEiigli1i/eteHEdgORFj3Z
SFql3WUTEEK5RpjNQDsgj8mZ29Lx3cqSVWhEedp0krHdADEPnF2OOQDx1q8WrSbm
y6HTGK3ZGQ2S/VO7OGmzsKEA7xiWw6wvXl5LdMKLNDtG3hHQ3gcW+NwBp5KHauQE
kuXHcduEuAdhgrs41zxVfYIN8u13SZWhwjSSDtbB0tQhP0L770uJu91BlHQiSqzf
kQa4acydTEcHAMQg+9ADTNJdm6Rd+LR/EnP/oy4tIRYZVuBSteIohRxrpnyw0Drg
8owRzcehFRbsc6n4m0dCl71vlF+Lh71ioFz9gCw18Y8gIfpjrDGNmXbXDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWT+z5kOAsdieSMz0dn42eT5Al4MB8GA1UdIwQY
MBaAFKZAx1Hr+0gH2EYi6AbLPQud2BBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMt
MDI2YjhjZjY5MWJhLzEvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMtMDI2YjhjZjY5MWJh
LzEvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEJ7NReM
RYtv/wzJgOxAyFumryoPEa5YA+a32J7zcy5PGnR8oEdEgUs62YULddsxIRtulH3F
b8HJLjp7FNyVVFqO+EHAiTK6pyNCFS2Z/8keqZmu64S3fVVsH4mPctzfpOhuEf/y
gwioCqnewR9xQWFR29KxbMwIz+kuONDmUePGGKANav5RUS0jcszPvXpwu5sfK26m
St/yNZuvGjRti2iLL8dsxtZCqVEhghrn9RhdoY4ZjepnSL+jbbqEcpRQnIa5V1eD
zC5NV76R31u71sNww1OZjij7iuCZlzVk03W28SLUpymYE/zZQjfmrn5uvc88fpoL
EY3DNygxtWR6Zw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:42 2026 by rpki-client