Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json)
Hash identifier: wb3uouzPLD7WeU0ZXxMusDqZtMS9dUVYmhHJO1Exa2w=
Subject key identifier: F1:3D:89:76:36:5D:78:89:BE:D3:E2:E7:88:F3:18:E2:63:DF:BB:FE
Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Certificate serial: 019CAA21A97AD1D019AD3A064B8C86BEBFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
Manifest number: 090B
Signing time: Sun 01 Mar 2026 16:00:58 +0000
Manifest this update: Sun 01 Mar 2026 16:00:58 +0000
Manifest next update: Mon 02 Mar 2026 16:00:58 +0000
Files and hashes: 1: HFBIVRwGpzJll63ZQliW3YvEwfQ.roa (hash: PpccMH3E3902HeGqkwDft0ieaZ/z+dKhMdg631pjCEg=)
2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: gLodMEVMYVBNZzZqpsOQV3XOPBw7+W7JqAyKxbSWgxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a9:7a:d1:d0:19:ad:3a:06:4b:8c:86:be:bf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Validity
Not Before: Mar 1 16:00:58 2026 GMT
Not After : Mar 2 16:00:58 2026 GMT
Subject: CN=f13d8976365d7889bed3e2e788f318e263dfbbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:df:ee:04:5b:e6:ba:97:22:9f:d4:a3:c1:
7d:fa:62:0b:48:27:0f:92:e2:88:d9:c9:34:04:4a:
9d:b4:95:c2:c9:ee:e2:f0:c3:24:b3:4c:16:0d:88:
8e:11:c6:e7:9f:ae:dc:4d:b2:9a:50:a1:50:8b:fb:
67:ac:5b:a7:f6:ed:e0:ea:7d:e3:59:e2:ff:ea:bc:
70:e2:d2:f7:65:d5:fd:fa:cc:01:7e:04:0f:84:65:
45:5a:ba:8a:47:c1:fe:0a:0f:b1:4c:41:21:d3:81:
ca:81:76:74:07:36:f4:26:a7:b9:20:19:fe:19:2d:
c8:af:e7:1c:d3:93:20:66:53:50:e0:4a:c8:f6:d8:
7a:f5:37:2d:88:26:d2:eb:99:fd:f4:92:8e:c7:b5:
08:b5:0f:c5:7f:ed:9d:20:75:4c:2c:d1:d4:80:2c:
fb:58:b9:5c:8f:2e:ae:46:65:58:f1:91:9a:a1:02:
40:ed:8d:96:95:3e:c1:96:cb:77:fc:3f:5e:7e:c7:
12:b1:55:27:5c:26:45:a9:10:0d:b2:41:9f:e6:39:
ea:93:3d:cd:32:97:6a:e7:89:e1:9f:0f:a7:d9:c4:
2f:33:8a:41:e4:d2:0f:78:bf:f8:84:f7:bb:f9:dd:
48:ae:3c:2d:89:30:22:38:ba:fb:c5:74:92:61:28:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3D:89:76:36:5D:78:89:BE:D3:E2:E7:88:F3:18:E2:63:DF:BB:FE
X509v3 Authority Key Identifier:
keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:06:ff:ee:c8:83:a6:04:55:fd:73:44:b5:4b:87:50:28:16:
1f:ea:31:08:17:3c:eb:99:b5:b7:31:d5:cb:32:b3:3f:23:41:
66:31:29:48:1f:b9:e4:5f:d4:9b:c6:63:b4:c4:76:5e:5a:6f:
83:4f:bf:a5:0f:59:f8:ca:e1:4d:de:20:a6:ab:67:0e:33:08:
ae:52:a7:20:46:1d:fe:0d:4b:7c:db:e9:bd:e6:5f:b0:27:8c:
2a:67:73:d6:9c:dc:af:a8:0c:71:ee:e3:8c:bd:da:37:48:d2:
e5:b3:95:3a:2a:78:05:9d:9c:96:fc:3c:e6:0d:0b:64:d8:e8:
b7:46:15:94:ae:d2:62:5d:d9:cc:9e:77:97:7d:0d:e7:5a:3a:
15:35:7a:2a:2d:06:a4:9d:7a:41:52:db:fa:4d:7b:89:0a:c7:
37:d5:f1:42:79:32:1e:13:37:c7:1b:46:28:57:66:f1:3d:46:
10:dd:10:91:df:2f:ad:74:bb:c8:33:f4:2e:dd:49:8b:56:ba:
9d:22:0f:7a:ef:47:f4:2b:5a:b5:e5:46:63:1a:93:cd:3b:0d:
70:cc:e6:d2:96:49:60:28:e1:af:85:d7:75:b2:6d:e3:fe:1f:
63:28:dc:5c:69:60:a2:78:b9:18:24:2e:3b:5a:07:b3:fc:f9:
a1:b9:2d:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIal60dAZrToGS4yGvr/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjhiMWJlYTBiNTg5NzcyM2VhN2M1ZmJiZGQ3Y2NkMjk1
MmIwNWMwHhcNMjYwMzAxMTYwMDU4WhcNMjYwMzAyMTYwMDU4WjAzMTEwLwYDVQQD
EyhmMTNkODk3NjM2NWQ3ODg5YmVkM2UyZTc4OGYzMThlMjYzZGZiYmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLrf7gRb5rqXIp/Uo8F9+mILSCcP
kuKI2ck0BEqdtJXCye7i8MMks0wWDYiOEcbnn67cTbKaUKFQi/tnrFun9u3g6n3j
WeL/6rxw4tL3ZdX9+swBfgQPhGVFWrqKR8H+Cg+xTEEh04HKgXZ0Bzb0Jqe5IBn+
GS3Ir+cc05MgZlNQ4ErI9th69TctiCbS65n99JKOx7UItQ/Ff+2dIHVMLNHUgCz7
WLlcjy6uRmVY8ZGaoQJA7Y2WlT7Blst3/D9efscSsVUnXCZFqRANskGf5jnqkz3N
Mpdq54nhnw+n2cQvM4pB5NIPeL/4hPe7+d1IrjwtiTAiOLr7xXSSYSjcLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPE9iXY2XXiJvtPi54jzGOJj37v+MB8GA1UdIwQY
MBaAFD8osb6gtYl3I+p8X7vdfM0pUrBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlpeHZxQzFpWGNqNm54ZnU5MTh6U2xTc0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODhiNDYtNmVmOS00NjI0LTg5ODQt
YmZhNmQzNDA3ODdhLzEvUHlpeHZxQzFpWGNqNm54ZnU5MTh6U2xTc0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kODhiNDYtNmVmOS00NjI0LTg5ODQtYmZhNmQzNDA3ODdh
LzEvUHlpeHZxQzFpWGNqNm54ZnU5MTh6U2xTc0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwb/7siD
pgRV/XNEtUuHUCgWH+oxCBc865m1tzHVyzKzPyNBZjEpSB+55F/Um8ZjtMR2Xlpv
g0+/pQ9Z+MrhTd4gpqtnDjMIrlKnIEYd/g1LfNvpveZfsCeMKmdz1pzcr6gMce7j
jL3aN0jS5bOVOip4BZ2clvw85g0LZNjot0YVlK7SYl3ZzJ53l30N51o6FTV6Ki0G
pJ16QVLb+k17iQrHN9XxQnkyHhM3xxtGKFdm8T1GEN0Qkd8vrXS7yDP0Lt1Ji1a6
nSIPeu9H9CtateVGYxqTzTsNcMzm0pZJYCjhr4XXdbJt4/4fYyjcXGlgoni5GCQu
O1oHs/z5obktdw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:11 2026 by rpki-client