Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
File: PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json)
Hash identifier: VeGH/SgsainrCiAUMCC2RkYgmhz8Re2SZeM/INgnkS4=
Subject key identifier: D1:BF:93:57:91:C9:57:A9:EB:3C:76:9D:20:6E:8E:AC:BA:41:55:70
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial: 019CAD22B1A8FA3490C230447A94E6C5E889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
Manifest number: 0FE1
Signing time: Mon 02 Mar 2026 06:00:57 +0000
Manifest this update: Mon 02 Mar 2026 06:00:57 +0000
Manifest next update: Tue 03 Mar 2026 06:00:57 +0000
Files and hashes: 1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: TjlNVt9rde5uOVLA7sVsdsQNra6PNC2gP/lcGG2n8/U=)
2: RkAA10vCg6MkKKDZVdqR-tBX7bM.roa (hash: 3GXYAmGoE5ebf+ZEUr6uNtnsEAbhBs1D4PtYm72f7Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:b1:a8:fa:34:90:c2:30:44:7a:94:e6:c5:e8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Validity
Not Before: Mar 2 06:00:57 2026 GMT
Not After : Mar 3 06:00:57 2026 GMT
Subject: CN=d1bf935791c957a9eb3c769d206e8eacba415570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:bc:a8:01:22:c2:72:ee:d9:cb:47:61:1a:
5e:a5:bb:ce:a3:ed:4c:68:c6:80:91:88:96:59:94:
8e:95:eb:88:8c:b3:69:9e:c3:42:53:2f:ec:d9:66:
52:46:ce:2f:bf:19:1d:5e:e2:5f:be:64:ad:07:78:
b7:99:3f:13:00:e6:65:dd:95:b5:ce:42:d7:12:68:
e7:65:3b:19:e7:df:f6:5b:60:fa:75:88:69:d3:e4:
aa:08:63:b6:18:64:83:e3:9c:dc:47:f4:d2:78:c3:
d2:ce:0c:a3:01:c6:85:8f:c7:bd:45:12:60:91:39:
d5:63:3e:a8:65:11:d3:25:bb:91:0a:9e:4d:c4:4a:
5b:7f:a5:92:c6:e6:7a:f2:2a:73:51:e7:fd:cc:a4:
44:ef:13:08:5f:1d:05:0c:d8:a9:d7:ce:85:98:1a:
e5:a2:94:47:33:9e:5f:2b:22:fc:cb:68:55:67:0e:
7f:c7:f2:72:87:46:aa:98:14:37:2d:b3:20:3c:3c:
a5:c0:b2:18:70:54:9b:d8:e3:20:3e:5d:62:c5:4b:
e2:98:12:54:70:44:88:ad:ad:b9:d3:e0:70:9c:85:
0b:eb:ce:1e:b3:55:3c:5c:77:16:5e:52:56:72:14:
46:c8:85:6f:31:c2:5f:d4:8d:b5:5d:bf:95:ab:3f:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BF:93:57:91:C9:57:A9:EB:3C:76:9D:20:6E:8E:AC:BA:41:55:70
X509v3 Authority Key Identifier:
keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:25:aa:93:de:af:98:af:86:c7:b4:e2:8e:0e:e5:f4:48:99:
03:b8:1e:8a:ab:8c:30:9a:ef:20:6b:c9:b0:f6:f9:f3:f0:8f:
56:4b:ba:59:31:6e:72:79:39:de:dd:aa:0d:69:8c:eb:8c:80:
50:2d:9d:e4:5c:4b:8f:82:6d:2a:ec:23:f1:43:13:c2:a1:42:
11:9e:29:a3:67:e1:d9:57:ae:f2:7a:b6:97:6a:e4:28:fe:73:
7b:3e:a1:d1:91:62:83:36:18:db:bf:6b:42:2f:33:a0:36:59:
c8:f4:39:40:be:fd:e8:94:93:84:cc:37:50:f0:04:08:1c:da:
c4:ea:b0:64:38:c8:26:07:de:62:a6:47:91:bd:71:08:32:4c:
74:c8:15:40:93:52:00:3d:d6:24:79:b3:50:82:67:5d:ca:f8:
40:00:02:a3:9d:00:82:b3:99:55:ba:ea:0b:3e:c9:0c:cd:88:
3f:d5:10:76:4b:3e:d5:57:0a:e0:3b:c8:fc:40:da:8b:35:f0:
ee:77:f2:6b:7f:a1:ae:74:86:13:80:a5:62:9d:29:ed:fd:44:
d5:99:27:a3:2f:6b:03:3e:1a:53:a9:b3:e4:b0:58:d6:f9:d9:
67:d7:5c:a1:9c:4d:07:98:a4:08:90:a6:70:b0:9b:23:6d:e8:
e1:5a:db:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIrGo+jSQwjBEepTmxeiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkODUwMGJjZGU0OTY4OTljNWQxZmE5MjRkZTRlNzgyN2Q5
OTE2Y2UwHhcNMjYwMzAyMDYwMDU3WhcNMjYwMzAzMDYwMDU3WjAzMTEwLwYDVQQD
EyhkMWJmOTM1NzkxYzk1N2E5ZWIzYzc2OWQyMDZlOGVhY2JhNDE1NTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTW8qAEiwnLu2ctHYRpepbvOo+1M
aMaAkYiWWZSOleuIjLNpnsNCUy/s2WZSRs4vvxkdXuJfvmStB3i3mT8TAOZl3ZW1
zkLXEmjnZTsZ59/2W2D6dYhp0+SqCGO2GGSD45zcR/TSeMPSzgyjAcaFj8e9RRJg
kTnVYz6oZRHTJbuRCp5NxEpbf6WSxuZ68ipzUef9zKRE7xMIXx0FDNip186FmBrl
opRHM55fKyL8y2hVZw5/x/Jyh0aqmBQ3LbMgPDylwLIYcFSb2OMgPl1ixUvimBJU
cESIra250+BwnIUL684es1U8XHcWXlJWchRGyIVvMcJf1I21Xb+Vqz/oFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNG/k1eRyVep6zx2nSBujqy6QVVwMB8GA1UdIwQY
MBaAFD2FALzeSWiZxdH6kk3k54J9mRbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjct
NzUyNmM5ZjA1Y2Q4LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjctNzUyNmM5ZjA1Y2Q4
LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSWqk96v
mK+Gx7Tijg7l9EiZA7geiquMMJrvIGvJsPb58/CPVku6WTFucnk53t2qDWmM64yA
UC2d5FxLj4JtKuwj8UMTwqFCEZ4po2fh2Veu8nq2l2rkKP5zez6h0ZFigzYY279r
Qi8zoDZZyPQ5QL796JSThMw3UPAECBzaxOqwZDjIJgfeYqZHkb1xCDJMdMgVQJNS
AD3WJHmzUIJnXcr4QAACo50AgrOZVbrqCz7JDM2IP9UQdks+1VcK4DvI/EDaizXw
7nfya3+hrnSGE4ClYp0p7f1E1Zknoy9rAz4aU6mz5LBY1vnZZ9dcoZxNB5ikCJCm
cLCbI23o4Vrb5A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:37:28 2026 by rpki-client