Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
File: PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft (raw, json)
Hash identifier: h0oLbvTq3MCGT6KoAeseo6lMTKs6UTGCLD1qJ0rAKOA=
Subject key identifier: B4:83:82:CD:E0:26:54:36:96:4B:08:10:FF:B3:5E:84:E8:BE:73:19
Authority key identifier: 3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
Certificate issuer: /CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Certificate serial: 019CAB6B693D7C78CCAA3145EA67CB191269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
Manifest number: 1534
Signing time: Sun 01 Mar 2026 22:01:09 +0000
Manifest this update: Sun 01 Mar 2026 22:01:09 +0000
Manifest next update: Mon 02 Mar 2026 22:01:09 +0000
Files and hashes: 1: PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl (hash: imewe2X6pyDFN4oTvHLUX1xIl2+CdJ8QkfvD/mi/ms8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:69:3d:7c:78:cc:aa:31:45:ea:67:cb:19:12:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Validity
Not Before: Mar 1 22:01:09 2026 GMT
Not After : Mar 2 22:01:09 2026 GMT
Subject: CN=b48382cde0265436964b0810ffb35e84e8be7319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:27:5a:30:ae:63:6c:aa:1f:58:00:76:26:
be:ae:07:e3:ea:e9:29:bd:e7:2d:93:ee:3a:1d:1e:
94:de:e5:51:21:b8:c5:cc:72:f7:79:75:a4:54:37:
72:69:5d:eb:59:ab:34:b5:09:01:fe:aa:6f:04:8a:
dd:80:d4:ee:24:17:02:2d:ba:5b:90:33:ac:fb:7f:
02:4a:2a:ed:bd:04:4b:47:b7:db:d1:bc:22:6b:f4:
d7:fa:70:d7:a8:65:31:1c:c6:72:4a:f5:50:1c:c1:
28:8c:df:b4:40:ae:17:41:d6:79:60:a6:f1:90:05:
6e:40:81:1e:b5:ab:42:1e:85:a1:89:99:90:61:60:
b2:20:80:2b:3b:3f:0f:3e:0a:90:9c:7e:c0:5e:57:
4e:b3:a1:b0:49:bc:48:1a:66:d9:35:74:45:40:ce:
63:ab:89:22:49:6b:67:ba:48:48:5b:c3:c8:b1:25:
51:b4:0c:88:72:ba:4e:f9:c3:f8:80:c1:fd:7d:b4:
84:ac:e8:4c:bf:8d:39:bc:a4:f7:45:4d:21:ca:d4:
2d:30:d2:e6:36:a0:b4:66:6d:14:51:54:8e:80:c1:
c7:94:f6:a1:7f:84:1f:ed:7a:3c:c3:f6:75:ed:02:
ad:d1:38:53:cf:1d:d4:42:78:46:a5:b3:96:19:a1:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:83:82:CD:E0:26:54:36:96:4B:08:10:FF:B3:5E:84:E8:BE:73:19
X509v3 Authority Key Identifier:
keyid:3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f3:fe:17:17:b9:7a:8b:fd:f3:29:40:56:1b:26:a9:6e:f6:
e7:aa:6d:4e:58:fb:18:89:21:eb:33:37:0a:7f:8a:33:20:ed:
79:23:cc:50:5d:b8:eb:aa:7d:05:1b:53:b1:ff:03:bb:50:05:
ce:85:af:18:7d:a4:68:fe:41:74:29:1e:4d:96:35:c1:2c:17:
d4:94:d6:34:95:a2:99:0f:8e:21:b9:75:22:8f:51:22:2c:07:
2f:db:68:81:4a:6b:c6:18:c2:ab:3f:40:01:48:94:2d:50:8b:
83:87:5b:b9:8c:fa:71:96:4d:d5:a3:67:46:41:fe:2f:b4:1d:
6b:68:55:c9:64:47:84:66:15:18:54:fe:ab:79:68:03:0f:eb:
70:0c:d5:ce:68:82:c4:f7:79:de:f9:8c:67:38:08:48:82:a5:
69:e5:98:97:46:1d:b3:71:ea:a5:c2:c7:b8:9c:c2:95:f9:43:
20:fe:da:7b:10:3c:4c:0f:98:d7:8f:58:6d:4f:7a:5a:f5:8b:
9c:c2:f7:81:e5:b6:92:8e:46:a4:8b:ce:f6:fc:9c:a9:06:a4:
d6:5e:cb:6e:c7:86:23:60:e4:aa:4e:99:fc:0c:1c:a8:ab:7a:
d0:50:ce:8c:e4:f3:c0:c6:5f:06:a3:81:58:86:47:87:37:d3:
9a:f5:77:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra2k9fHjMqjFF6mfLGRJpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjE3N2EzZTg2YzgzOWNmZDE5M2RiYjQ2ZWRhODA4N2Q4
MjE0MWEwHhcNMjYwMzAxMjIwMTA5WhcNMjYwMzAyMjIwMTA5WjAzMTEwLwYDVQQD
EyhiNDgzODJjZGUwMjY1NDM2OTY0YjA4MTBmZmIzNWU4NGU4YmU3MzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH0nWjCuY2yqH1gAdia+rgfj6ukp
vectk+46HR6U3uVRIbjFzHL3eXWkVDdyaV3rWas0tQkB/qpvBIrdgNTuJBcCLbpb
kDOs+38CSirtvQRLR7fb0bwia/TX+nDXqGUxHMZySvVQHMEojN+0QK4XQdZ5YKbx
kAVuQIEetatCHoWhiZmQYWCyIIArOz8PPgqQnH7AXldOs6GwSbxIGmbZNXRFQM5j
q4kiSWtnukhIW8PIsSVRtAyIcrpO+cP4gMH9fbSErOhMv405vKT3RU0hytQtMNLm
NqC0Zm0UUVSOgMHHlPahf4Qf7Xo8w/Z17QKt0ThTzx3UQnhGpbOWGaEsXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSDgs3gJlQ2lksIEP+zXoTovnMZMB8GA1UdIwQY
MBaAFD8hd6PobIOc/Rk9u0btqAh9ghQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yY2Y5MjYtODEwZS00MTFlLWJkNWIt
MTYxZTUxM2ViZGMyLzEvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yY2Y5MjYtODEwZS00MTFlLWJkNWItMTYxZTUxM2ViZGMy
LzEvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavP+Fxe5
eov98ylAVhsmqW7256ptTlj7GIkh6zM3Cn+KMyDteSPMUF2466p9BRtTsf8Du1AF
zoWvGH2kaP5BdCkeTZY1wSwX1JTWNJWimQ+OIbl1Io9RIiwHL9togUprxhjCqz9A
AUiULVCLg4dbuYz6cZZN1aNnRkH+L7Qda2hVyWRHhGYVGFT+q3loAw/rcAzVzmiC
xPd53vmMZzgISIKlaeWYl0Yds3HqpcLHuJzClflDIP7aexA8TA+Y149YbU96WvWL
nML3geW2ko5GpIvO9vycqQak1l7LbseGI2Dkqk6Z/AwcqKt60FDOjOTzwMZfBqOB
WIZHhzfTmvV3fg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:23:08 2026 by rpki-client