Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
File: PBtlq7jKPpDpdlehqTHkZGneuaA.mft (raw, json)
Hash identifier: gHD8WMe47BjRUB58rC1styRfjF++jHSN5i4DfdrLN9o=
Subject key identifier: 83:78:0A:41:9B:38:6B:F9:DC:DD:8F:85:BF:DF:59:CC:B0:AE:2A:2F
Authority key identifier: 3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
Certificate issuer: /CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Certificate serial: 01A0D502765A15174DB07B1078C48B8EA75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
Manifest number: 0202
Signing time: Thu 24 Sep 2026 20:01:43 +0000
Manifest this update: Thu 24 Sep 2026 20:01:43 +0000
Manifest next update: Fri 25 Sep 2026 20:01:43 +0000
Files and hashes: 1: PBtlq7jKPpDpdlehqTHkZGneuaA.crl (hash: idvXPFSYyieFgf7CrmRPS20J78k/wD0QgUWC9+FTQ0M=)
2: gMCIz449uqD5WX8VFOvlE05m9FM.asa (hash: piapX0oug4b2n4Ly7SK9SEYjbmdeHD72ighx3Ds0YaQ=)
3: ufhzE0W5SH0Js0oKYXP2RX7vpvA.roa (hash: L+5eFfEh2iKkPrG9ir0RuhaK5ClvADkNCI+XRwX6vSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:76:5a:15:17:4d:b0:7b:10:78:c4:8b:8e:a7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Validity
Not Before: Sep 24 20:01:43 2026 GMT
Not After : Sep 25 20:01:43 2026 GMT
Subject: CN=83780a419b386bf9dcdd8f85bfdf59ccb0ae2a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:21:cd:64:ec:79:58:a9:a6:fd:82:53:e8:
0a:69:5d:4a:55:fc:06:42:a2:d0:61:f3:b9:6d:9c:
35:32:13:6b:fe:47:5a:5b:d8:26:53:ce:83:b8:1d:
f9:09:0f:81:c8:ec:1b:41:d7:f2:df:24:e3:49:37:
0b:e0:46:4f:8f:54:7f:3e:53:af:a4:c5:c0:57:d7:
1e:01:6c:1d:74:e2:bf:02:02:84:05:c6:7d:90:41:
16:d2:66:aa:44:6a:54:9d:93:74:b3:58:31:e2:1e:
08:ec:dc:86:cf:33:5a:a0:03:28:8b:01:0f:1b:be:
1e:47:43:51:66:50:ef:9c:c7:ea:af:22:cb:6f:95:
20:8b:bc:39:43:13:18:1d:b1:cc:bd:34:cf:f5:90:
28:c3:ef:e7:d6:a7:12:e5:0e:23:53:64:7c:47:62:
14:2e:5b:a7:ed:47:cd:36:94:fe:25:53:2a:bb:18:
73:60:11:81:6f:41:22:41:a2:a0:26:2a:40:a7:31:
4e:9c:2e:70:be:a1:38:66:79:64:8e:49:e2:89:19:
71:4a:e8:19:ee:67:73:4f:97:28:0b:b1:53:e7:1b:
e2:f6:8c:4b:86:d6:ad:cb:5f:84:ac:f0:1a:04:5e:
20:61:ac:85:15:cb:80:36:e8:d2:29:d0:16:92:9c:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:78:0A:41:9B:38:6B:F9:DC:DD:8F:85:BF:DF:59:CC:B0:AE:2A:2F
X509v3 Authority Key Identifier:
keyid:3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8d:c1:75:71:6a:5e:e1:fa:f8:5c:cf:46:97:ed:3a:10:5e:
a9:53:ce:ee:29:a6:5f:57:0e:99:61:da:e0:19:f6:ef:46:ee:
e4:30:d5:cf:52:f4:1f:14:63:48:3c:de:77:11:ec:6b:ee:58:
c5:ee:45:9c:83:2a:40:6d:4d:2f:a4:df:18:8c:0d:d2:0d:9e:
96:30:6d:ab:c2:48:ab:7e:2f:a5:7b:6a:3b:e1:8d:d3:fe:00:
11:86:52:98:cb:0d:d3:38:88:a6:99:2c:a5:b5:43:a2:c8:2c:
cb:88:a5:3a:30:ba:b4:12:49:78:f7:40:d2:85:97:c1:ef:9a:
6c:12:41:e4:a2:6e:d9:90:c1:fd:44:87:1a:f3:93:f5:88:59:
d6:5a:6a:52:29:b8:45:32:29:a3:50:29:7b:1a:48:92:4e:31:
c1:da:2c:f8:23:ca:11:f1:37:09:24:57:d8:fd:0e:ed:78:38:
a6:d2:34:2a:e9:35:d9:4a:de:2f:f3:15:51:39:97:af:2a:4b:
a0:38:78:d4:e8:3a:63:0f:81:bf:56:38:04:1a:72:a1:e3:84:
3f:fd:b1:c2:92:d5:c3:1b:3d:5a:b0:52:83:46:35:eb:76:e4:
1b:f8:8f:a4:03:36:56:1a:69:d4:a9:e5:3c:ad:4a:af:6a:d6:
d6:99:1e:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAnZaFRdNsHsQeMSLjqdaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMWI2NWFiYjhjYTNlOTBlOTc2NTdhMWE5MzFlNDY0Njlk
ZWI5YTAwHhcNMjYwOTI0MjAwMTQzWhcNMjYwOTI1MjAwMTQzWjAzMTEwLwYDVQQD
Eyg4Mzc4MGE0MTliMzg2YmY5ZGNkZDhmODViZmRmNTljY2IwYWUyYTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZEhzWTseVippv2CU+gKaV1KVfwG
QqLQYfO5bZw1MhNr/kdaW9gmU86DuB35CQ+ByOwbQdfy3yTjSTcL4EZPj1R/PlOv
pMXAV9ceAWwddOK/AgKEBcZ9kEEW0maqRGpUnZN0s1gx4h4I7NyGzzNaoAMoiwEP
G74eR0NRZlDvnMfqryLLb5Ugi7w5QxMYHbHMvTTP9ZAow+/n1qcS5Q4jU2R8R2IU
Llun7UfNNpT+JVMquxhzYBGBb0EiQaKgJipApzFOnC5wvqE4ZnlkjkniiRlxSugZ
7mdzT5coC7FT5xvi9oxLhtaty1+ErPAaBF4gYayFFcuANujSKdAWkpyLUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIN4CkGbOGv53N2Phb/fWcywriovMB8GA1UdIwQY
MBaAFDwbZau4yj6Q6XZXoakx5GRp3rmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJ0bHE3aktQcERwZGxlaHFUSGtaR25ldWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xOTczMWYtYTY0Ni00NWI3LTliOGEt
OGRjNmVkYzcxYTAwLzEvUEJ0bHE3aktQcERwZGxlaHFUSGtaR25ldWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xOTczMWYtYTY0Ni00NWI3LTliOGEtOGRjNmVkYzcxYTAw
LzEvUEJ0bHE3aktQcERwZGxlaHFUSGtaR25ldWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABI3BdXFq
XuH6+FzPRpftOhBeqVPO7immX1cOmWHa4Bn270bu5DDVz1L0HxRjSDzedxHsa+5Y
xe5FnIMqQG1NL6TfGIwN0g2eljBtq8JIq34vpXtqO+GN0/4AEYZSmMsN0ziIppks
pbVDosgsy4ilOjC6tBJJePdA0oWXwe+abBJB5KJu2ZDB/USHGvOT9YhZ1lpqUim4
RTIpo1ApexpIkk4xwdos+CPKEfE3CSRX2P0O7Xg4ptI0Kuk12UreL/MVUTmXrypL
oDh41Og6Yw+Bv1Y4BBpyoeOEP/2xwpLVwxs9WrBSg0Y163bkG/iPpAM2Vhpp1Knl
PK1Kr2rW1pkeJA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:37:10 2026 by rpki-client