Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
File: P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft (raw, json)
Hash identifier: zOpt9FempWIxBUEKklespqs7nJD+/8Q43EhJsAsC88I=
Subject key identifier: 7E:81:A3:EC:C2:86:35:4A:25:A5:C7:31:87:36:DE:FA:8F:D3:58:E1
Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Certificate serial: 019CAA592BE67E47B8C15D1252FB9B256CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
Manifest number: 17CA
Signing time: Sun 01 Mar 2026 17:01:36 +0000
Manifest this update: Sun 01 Mar 2026 17:01:36 +0000
Manifest next update: Mon 02 Mar 2026 17:01:36 +0000
Files and hashes: 1: P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl (hash: csEgm/RJEaJEOdAlJIGcGeJhsRAOCOiZ723ZddBLzg0=)
2: gU_DFsw1i7Mrmms493aHhV3X97I.roa (hash: Xuww54GOBuOopCkJwxsjxENEGeQxpUGHwuosFzJt3EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:2b:e6:7e:47:b8:c1:5d:12:52:fb:9b:25:6c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Validity
Not Before: Mar 1 17:01:36 2026 GMT
Not After : Mar 2 17:01:36 2026 GMT
Subject: CN=7e81a3ecc286354a25a5c7318736defa8fd358e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:c5:7f:62:ea:cb:3b:2c:01:3b:33:5a:e3:
47:be:54:75:5e:ee:8f:15:73:57:40:96:37:0d:76:
80:cf:53:cd:c8:08:df:d3:2d:46:06:04:84:a3:37:
37:bb:f7:af:79:99:ca:3f:39:33:d0:d9:80:2d:4d:
cf:e6:72:d5:49:57:01:27:68:e9:6d:10:da:a4:b2:
c4:40:4e:17:54:76:c4:b8:5a:09:9e:05:e5:26:34:
ce:bd:4a:32:52:6c:6e:e3:b9:32:49:89:ce:79:1a:
0f:ff:67:55:37:06:f4:47:45:8e:9d:51:2e:6a:9a:
e6:73:9f:74:2b:56:9f:3b:a7:fd:9f:c8:fb:0b:02:
a7:41:f1:bf:62:0e:4b:78:8d:c8:66:ed:ac:df:d5:
eb:62:bb:17:78:55:61:dd:3e:c7:ee:73:c0:e7:54:
d4:60:e4:f5:e0:df:9f:4b:bd:2a:c6:9b:e3:fd:20:
62:96:69:c3:ab:cd:2e:75:4e:30:32:e5:8e:a0:62:
da:d7:e5:ce:e1:75:3b:0b:14:ad:63:18:4d:0b:5b:
75:d6:19:8c:7e:12:f5:79:09:15:88:e3:03:92:fe:
ff:09:e6:c8:c4:f6:38:7d:08:f5:e4:36:48:f3:20:
ce:1f:ad:e4:24:3b:42:6b:2e:f7:28:16:62:67:48:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:81:A3:EC:C2:86:35:4A:25:A5:C7:31:87:36:DE:FA:8F:D3:58:E1
X509v3 Authority Key Identifier:
keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:99:e1:ef:35:93:96:33:43:34:a9:f9:a5:b6:b2:9b:1e:5b:
03:77:20:5c:14:8f:c9:91:3b:02:40:45:45:57:54:71:59:d7:
e9:25:6a:af:07:2a:40:17:e9:b1:e0:69:98:6e:de:0c:1d:96:
3b:47:35:9d:d8:6e:34:2f:b2:dd:19:8a:7c:6c:46:d6:1e:21:
ee:37:56:fb:c4:f7:f3:d2:82:22:a5:94:55:a7:27:14:11:7b:
e0:cc:64:34:c1:a1:57:a0:26:ff:91:4a:d7:3a:ab:82:fc:9a:
6b:88:22:69:e7:e5:e3:09:5d:81:b8:a6:7a:17:83:b0:68:67:
d9:bc:96:91:0a:71:02:52:70:cd:5e:e8:25:08:25:de:44:5b:
cd:67:71:c5:71:e8:55:5d:26:67:97:58:5a:0b:31:7e:28:f6:
94:fc:46:97:24:1d:dd:87:6c:d7:b8:63:76:42:d3:57:b5:bc:
f4:79:8b:43:70:0d:98:66:ff:89:6b:bf:34:a6:cc:c8:c7:e2:
65:14:ab:f4:0f:c4:7f:24:0a:5a:fa:99:96:ae:90:8a:35:2a:
ef:73:18:c6:66:dd:a0:41:2f:38:3e:02:83:09:f2:07:9d:20:
a6:48:7a:0c:3d:44:15:03:fc:b1:d0:2c:e2:da:6c:86:04:1f:
15:38:df:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWSvmfke4wV0SUvubJWzDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZjc3ODkzNDZhOWY5MjkxNWYxZjc1YjEwYWY5NGY5N2I2
ZTI0ZmEwHhcNMjYwMzAxMTcwMTM2WhcNMjYwMzAyMTcwMTM2WjAzMTEwLwYDVQQD
Eyg3ZTgxYTNlY2MyODYzNTRhMjVhNWM3MzE4NzM2ZGVmYThmZDM1OGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFPFf2LqyzssATszWuNHvlR1Xu6P
FXNXQJY3DXaAz1PNyAjf0y1GBgSEozc3u/eveZnKPzkz0NmALU3P5nLVSVcBJ2jp
bRDapLLEQE4XVHbEuFoJngXlJjTOvUoyUmxu47kySYnOeRoP/2dVNwb0R0WOnVEu
aprmc590K1afO6f9n8j7CwKnQfG/Yg5LeI3IZu2s39XrYrsXeFVh3T7H7nPA51TU
YOT14N+fS70qxpvj/SBilmnDq80udU4wMuWOoGLa1+XO4XU7CxStYxhNC1t11hmM
fhL1eQkViOMDkv7/CebIxPY4fQj15DZI8yDOH63kJDtCay73KBZiZ0hdwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6Bo+zChjVKJaXHMYc23vqP01jhMB8GA1UdIwQY
MBaAFD/3eJNGqfkpFfH3WxCvlPl7biT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80ODFhMzUtMjQzNC00NmUzLWFlZTEt
YWUxMzA1MzEzM2NiLzEvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80ODFhMzUtMjQzNC00NmUzLWFlZTEtYWUxMzA1MzEzM2Ni
LzEvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJnh7zWT
ljNDNKn5pbaymx5bA3cgXBSPyZE7AkBFRVdUcVnX6SVqrwcqQBfpseBpmG7eDB2W
O0c1ndhuNC+y3RmKfGxG1h4h7jdW+8T389KCIqWUVacnFBF74MxkNMGhV6Am/5FK
1zqrgvyaa4giaefl4wldgbimeheDsGhn2byWkQpxAlJwzV7oJQgl3kRbzWdxxXHo
VV0mZ5dYWgsxfij2lPxGlyQd3Yds17hjdkLTV7W89HmLQ3ANmGb/iWu/NKbMyMfi
ZRSr9A/EfyQKWvqZlq6QijUq73MYxmbdoEEvOD4CgwnyB50gpkh6DD1EFQP8sdAs
4tpshgQfFTjfHQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:08 2026 by rpki-client