Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
File: PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json)
Hash identifier: XUMs3+JSOB+FPTtqz7QVNYo4J/vq4pRGRodW922nf9Y=
Subject key identifier: 38:85:15:DB:25:68:11:7C:6A:B1:D8:F4:B1:80:6E:0B:C9:A1:92:50
Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Certificate serial: 019CAE35F22DD2E8E8B510483D531B5C9F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
Manifest number: 04A9
Signing time: Mon 02 Mar 2026 11:01:36 +0000
Manifest this update: Mon 02 Mar 2026 11:01:36 +0000
Manifest next update: Tue 03 Mar 2026 11:01:36 +0000
Files and hashes: 1: 09Idh6750rzqiPUR4c726kV5rOk.roa (hash: mc1V6hIQgSw8lLoVocREyrEscnS5kZmkg0rvjeUzfkM=)
2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: /oHlZBijo5YXTL0N1lh2SSStHVKZnEg6EwUeM1FEfDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:f2:2d:d2:e8:e8:b5:10:48:3d:53:1b:5c:9f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Validity
Not Before: Mar 2 11:01:36 2026 GMT
Not After : Mar 3 11:01:36 2026 GMT
Subject: CN=388515db2568117c6ab1d8f4b1806e0bc9a19250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d0:e0:43:dd:7f:7e:14:3d:60:76:84:32:b7:
25:90:a5:92:cc:91:08:5a:31:77:d6:c2:7c:74:4b:
34:42:0e:42:77:b3:9e:99:c9:10:d7:91:a2:41:ec:
24:b2:d7:66:59:dc:7f:ba:07:d7:d5:b0:72:69:35:
d4:64:aa:f3:cb:80:0f:1d:15:bc:e4:de:fe:36:7b:
17:f1:05:a9:f2:18:cf:1e:a1:f3:e0:4f:27:a4:92:
ce:07:95:a4:dd:cf:a2:b2:67:8c:ef:02:af:10:5f:
b9:d2:5a:d8:bf:a6:97:8f:23:0a:48:78:b2:7d:ec:
84:ef:5f:4a:e2:3d:54:cb:48:a4:b4:b0:17:a1:82:
16:9b:0b:f5:d7:59:04:48:d2:20:4b:58:d7:69:63:
16:80:17:d1:6b:90:ea:51:4c:ac:86:ca:5e:e6:02:
7a:62:2d:c6:a3:a5:15:cc:76:6c:9f:46:e6:df:ef:
e9:34:a7:51:9d:ee:b1:05:b5:50:96:fb:f9:36:eb:
f9:83:d7:10:8a:3f:13:38:48:38:a4:19:f2:7d:d1:
e3:03:a5:d7:93:11:86:83:17:47:15:27:1c:ea:75:
69:c1:1d:6f:59:8c:08:9a:e0:1c:85:3d:8e:1e:99:
d9:3e:98:9a:5f:80:6e:f1:01:33:2b:a5:2f:58:55:
fd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:85:15:DB:25:68:11:7C:6A:B1:D8:F4:B1:80:6E:0B:C9:A1:92:50
X509v3 Authority Key Identifier:
keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:dd:b4:f1:91:74:ae:d4:fc:ca:b0:cf:5a:f6:67:fe:e6:01:
3d:3c:24:a0:27:76:75:39:f1:e4:a5:aa:b4:44:8d:97:dc:39:
f8:ff:95:4e:59:04:e4:73:18:6a:6e:51:ae:f8:9c:22:3d:f3:
8f:a8:75:b8:ea:72:87:3b:f5:04:37:28:fd:16:1e:6f:bc:b0:
13:82:0b:ad:0a:3d:27:23:d3:9d:e1:90:27:f3:40:fd:ea:38:
e6:71:d5:43:f2:58:61:89:34:9c:23:fd:43:d7:e8:3e:f1:65:
70:ee:cf:93:37:64:ee:6e:34:c1:d2:0f:5a:97:f7:32:6d:00:
0b:88:23:47:79:c8:25:01:72:81:ad:05:34:c6:b9:4e:f6:e7:
6e:b8:6c:fc:6c:7d:5a:27:89:02:67:95:0e:99:cf:af:c3:1f:
f0:dd:b2:17:ae:90:08:93:68:af:5f:74:73:44:e6:0a:bc:c8:
0a:93:bc:83:cc:06:a4:44:1c:c6:c8:f0:84:6d:17:e0:61:4f:
8d:33:c4:4b:44:8a:91:b6:0f:4f:0a:46:6b:61:1d:6a:99:e4:
d2:93:1f:9b:b4:e9:7f:dd:47:de:b4:8c:5b:06:62:b6:98:be:
cb:c1:fb:f5:5d:8f:66:3c:b7:e1:5d:f4:05:14:0e:32:bd:47:
e6:ee:35:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNfIt0ujotRBIPVMbXJ+HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWI1ODE3YmJlN2U1YTFjNWZiMTMwNTUxYjg0YWI0ODgw
MTZmOTIwHhcNMjYwMzAyMTEwMTM2WhcNMjYwMzAzMTEwMTM2WjAzMTEwLwYDVQQD
EygzODg1MTVkYjI1NjgxMTdjNmFiMWQ4ZjRiMTgwNmUwYmM5YTE5MjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktDgQ91/fhQ9YHaEMrclkKWSzJEI
WjF31sJ8dEs0Qg5Cd7OemckQ15GiQewkstdmWdx/ugfX1bByaTXUZKrzy4APHRW8
5N7+NnsX8QWp8hjPHqHz4E8npJLOB5Wk3c+ismeM7wKvEF+50lrYv6aXjyMKSHiy
feyE719K4j1Uy0iktLAXoYIWmwv111kESNIgS1jXaWMWgBfRa5DqUUyshspe5gJ6
Yi3Go6UVzHZsn0bm3+/pNKdRne6xBbVQlvv5Nuv5g9cQij8TOEg4pBnyfdHjA6XX
kxGGgxdHFScc6nVpwR1vWYwImuAchT2OHpnZPpiaX4Bu8QEzK6UvWFX9kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiFFdslaBF8arHY9LGAbgvJoZJQMB8GA1UdIwQY
MBaAFD3rWBe75+WhxfsTBVG4SrSIAW+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZTQ5YTEtNzNhOS00NTgxLWI4OGMt
ZjEwNDg2ZTYwYTUzLzEvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wZTQ5YTEtNzNhOS00NTgxLWI4OGMtZjEwNDg2ZTYwYTUz
LzEvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9208ZF0
rtT8yrDPWvZn/uYBPTwkoCd2dTnx5KWqtESNl9w5+P+VTlkE5HMYam5RrvicIj3z
j6h1uOpyhzv1BDco/RYeb7ywE4ILrQo9JyPTneGQJ/NA/eo45nHVQ/JYYYk0nCP9
Q9foPvFlcO7Pkzdk7m40wdIPWpf3Mm0AC4gjR3nIJQFyga0FNMa5Tvbnbrhs/Gx9
WieJAmeVDpnPr8Mf8N2yF66QCJNor190c0TmCrzICpO8g8wGpEQcxsjwhG0X4GFP
jTPES0SKkbYPTwpGa2Edapnk0pMfm7Tpf91H3rSMWwZitpi+y8H79V2PZjy34V30
BRQOMr1H5u41/A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:54 2026 by rpki-client