Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
File: PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft (raw, json)
Hash identifier: ZR6HwrjzCdNMR0ZM3F+98LDk/jri2XlYcZEeddl+y2k=
Subject key identifier: B8:18:98:F7:74:D9:C4:B7:03:E2:38:CC:F6:00:83:6C:B8:22:4B:43
Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
Certificate issuer: /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Certificate serial: 019CAB6BA031CC63089D655E035A190A3C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
Manifest number: 11C4
Signing time: Sun 01 Mar 2026 22:01:23 +0000
Manifest this update: Sun 01 Mar 2026 22:01:23 +0000
Manifest next update: Mon 02 Mar 2026 22:01:23 +0000
Files and hashes: 1: OW3GzUlbWQENnbfu4RMR0Aal4tU.roa (hash: T8dOCgn615KaYC2W+2ZIkt7KqeRP31QpTplo42gs07s=)
2: PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl (hash: cYl+F9HA2PZJjptLOv7TC/zaxy81x+N8sF0v7IHJwB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a0:31:cc:63:08:9d:65:5e:03:5a:19:0a:3c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Validity
Not Before: Mar 1 22:01:23 2026 GMT
Not After : Mar 2 22:01:23 2026 GMT
Subject: CN=b81898f774d9c4b703e238ccf600836cb8224b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:a4:cf:d5:9e:70:62:66:cd:cf:45:ec:1a:
a0:01:dd:44:55:54:9d:16:e5:6a:c9:79:d8:92:66:
32:79:13:f1:29:10:6b:64:5d:8f:61:55:72:bf:8a:
2a:78:85:e1:fc:8d:55:a1:aa:19:fa:77:6f:6f:64:
45:8b:1d:09:08:f4:bf:ca:48:88:2c:aa:e1:b6:c9:
04:40:7f:be:6d:92:ea:0f:12:40:54:7e:6d:a8:7a:
b8:10:aa:0c:e7:1a:ae:86:3f:bf:84:ff:05:d6:ae:
4e:b9:a5:1c:08:40:bf:c5:51:1f:dd:41:b4:ec:91:
65:18:a3:82:1f:c3:b6:9d:24:78:3e:40:61:2e:e8:
d2:aa:d8:e5:bc:b3:2f:98:01:94:c1:5f:31:a4:ca:
82:12:86:14:52:eb:e6:e1:e1:32:84:b0:08:b5:2b:
18:63:ef:a9:f3:80:87:7a:9c:c5:d6:79:f6:ec:c6:
63:a3:7d:67:a2:32:f2:93:25:9f:10:26:0d:7e:a3:
c1:c3:7a:9b:04:55:c7:9e:29:9b:c2:72:88:9a:ca:
f4:2c:df:5e:2b:9b:c8:fe:dd:41:46:ba:13:f9:fe:
f3:3e:dc:7f:25:71:91:cf:98:b9:5c:6b:0f:8b:e8:
65:18:fe:d0:12:e4:54:e5:fb:81:17:0a:91:cd:c6:
71:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:18:98:F7:74:D9:C4:B7:03:E2:38:CC:F6:00:83:6C:B8:22:4B:43
X509v3 Authority Key Identifier:
keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a7:b3:d5:15:30:17:9d:18:d2:c8:50:2f:d2:3e:b3:9f:51:
46:aa:00:e4:03:c5:75:f7:69:59:0e:d8:42:0b:51:e8:cd:46:
d3:38:72:c5:f0:55:a1:82:e1:41:89:17:c2:72:d1:1c:f4:65:
df:a5:9c:05:c5:a3:48:7b:de:b3:1b:61:44:79:9a:8d:7d:26:
0a:09:7e:71:f5:62:0a:0f:ec:53:85:3d:49:30:e7:7e:4f:ee:
87:c0:f8:9c:e8:98:51:5a:d8:e7:46:88:10:fa:a6:86:db:79:
88:d1:cc:46:1d:ff:16:e6:7a:7b:cb:59:8e:7b:18:5e:70:7b:
e8:71:fc:5e:01:15:cf:ca:38:72:90:19:42:de:cc:b2:48:1e:
f6:fb:f5:d4:71:8c:53:de:d6:a2:e5:42:2d:8a:44:c8:4d:6a:
be:44:72:4d:37:22:ba:eb:e5:9c:53:d0:f6:76:4e:b7:ef:4a:
bd:04:58:4c:7a:e7:bb:71:b8:1a:27:ec:25:62:1a:a2:eb:35:
4d:6b:e4:6a:6d:64:ec:bb:c1:67:15:1f:dc:a9:27:76:9f:48:
75:82:e5:87:2e:96:33:6b:aa:ad:4b:00:3c:05:56:a4:77:35:
4e:b7:ed:59:69:54:d1:9e:c3:23:a2:3e:73:13:61:82:bd:74:
81:f9:47:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra6AxzGMInWVeA1oZCjxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOGRmZTEwOWRlODMxZDMyZmQ3OGE1OGNjNWMxZDE0OWE0
NTUzZDIwHhcNMjYwMzAxMjIwMTIzWhcNMjYwMzAyMjIwMTIzWjAzMTEwLwYDVQQD
EyhiODE4OThmNzc0ZDljNGI3MDNlMjM4Y2NmNjAwODM2Y2I4MjI0YjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0Ckz9WecGJmzc9F7BqgAd1EVVSd
FuVqyXnYkmYyeRPxKRBrZF2PYVVyv4oqeIXh/I1VoaoZ+ndvb2RFix0JCPS/ykiI
LKrhtskEQH++bZLqDxJAVH5tqHq4EKoM5xquhj+/hP8F1q5OuaUcCEC/xVEf3UG0
7JFlGKOCH8O2nSR4PkBhLujSqtjlvLMvmAGUwV8xpMqCEoYUUuvm4eEyhLAItSsY
Y++p84CHepzF1nn27MZjo31nojLykyWfECYNfqPBw3qbBFXHnimbwnKImsr0LN9e
K5vI/t1BRroT+f7zPtx/JXGRz5i5XGsPi+hlGP7QEuRU5fuBFwqRzcZxSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgYmPd02cS3A+I4zPYAg2y4IktDMB8GA1UdIwQY
MBaAFDyN/hCd6DHTL9eKWMxcHRSaRVPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNTc5NjktZWE1Zi00NTE4LTkyZTEt
NTNhMDY4MGY5NzEwLzEvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kNTc5NjktZWE1Zi00NTE4LTkyZTEtNTNhMDY4MGY5NzEw
LzEvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaez1RUw
F50Y0shQL9I+s59RRqoA5APFdfdpWQ7YQgtR6M1G0zhyxfBVoYLhQYkXwnLRHPRl
36WcBcWjSHvesxthRHmajX0mCgl+cfViCg/sU4U9STDnfk/uh8D4nOiYUVrY50aI
EPqmhtt5iNHMRh3/FuZ6e8tZjnsYXnB76HH8XgEVz8o4cpAZQt7Mskge9vv11HGM
U97WouVCLYpEyE1qvkRyTTciuuvlnFPQ9nZOt+9KvQRYTHrnu3G4GifsJWIaous1
TWvkam1k7LvBZxUf3Kkndp9IdYLlhy6WM2uqrUsAPAVWpHc1TrftWWlU0Z7DI6I+
cxNhgr10gflHqw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:42 2026 by rpki-client