Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
File: P1jM0LF5IrWNXoss8uV5zmmrOGM.mft (raw, json)
Hash identifier: WFqOWMHRWYa9cLcBUaBbohPu7mcqFvt8e5awyTShgU8=
Subject key identifier: AF:71:25:8B:0B:10:F4:0B:E2:A6:E7:A1:C2:10:A7:EA:F2:D5:96:EE
Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Certificate serial: 019CA832CE21578B6D9A614A65C4D5B1A551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
Manifest number: 0283
Signing time: Sun 01 Mar 2026 07:00:27 +0000
Manifest this update: Sun 01 Mar 2026 07:00:27 +0000
Manifest next update: Mon 02 Mar 2026 07:00:27 +0000
Files and hashes: 1: P1jM0LF5IrWNXoss8uV5zmmrOGM.crl (hash: i7y/vPacq/HxjFviAF3GfxjDoXQrY2n1sBjNQqlOQmw=)
2: pwkOfI0N-Tqs6EWE-ZLxQ2pD3ZM.asa (hash: 76UHeLcM+om1iT2qZCwO5q94A8qOQbIQ5FrClESA93w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:32:ce:21:57:8b:6d:9a:61:4a:65:c4:d5:b1:a5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Validity
Not Before: Mar 1 07:00:27 2026 GMT
Not After : Mar 2 07:00:27 2026 GMT
Subject: CN=af71258b0b10f40be2a6e7a1c210a7eaf2d596ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:0f:ca:dc:c5:0c:e7:0f:ca:90:0c:40:68:
89:ca:37:9b:2d:26:e0:0a:bf:5f:46:c2:b2:df:37:
5e:14:68:07:c1:93:de:69:4f:01:97:7b:be:09:c2:
44:37:e1:a9:a0:cc:22:9e:39:ea:b5:01:bb:61:57:
1b:10:93:a8:39:3c:cb:8f:0d:31:fb:96:92:0d:e2:
e4:62:7d:16:21:35:5c:44:c0:ed:d2:da:8a:0e:c0:
09:5b:f1:87:d9:97:6d:84:95:c8:9f:b4:b9:0e:47:
ea:ed:b6:bb:d0:aa:e8:e6:26:cf:5f:26:41:e7:4d:
f3:1e:40:f6:31:fd:f7:ac:4a:ec:26:c2:c0:0b:a0:
10:b1:ab:63:6a:0d:9a:89:81:ef:04:1c:3b:e3:5f:
b0:e3:2b:04:2c:6e:5e:e0:b1:57:f0:54:63:25:aa:
89:f2:3e:a2:47:33:85:4f:68:bc:57:79:1b:06:8d:
30:55:a4:bd:bf:e7:9d:6b:8a:3f:79:8b:be:a2:24:
d6:44:0a:66:93:f6:ff:ea:a9:8f:fd:62:2e:5a:d2:
c6:62:27:50:f3:d1:e8:9c:0f:cd:6d:ce:01:99:ba:
a4:e0:2c:c3:6d:1e:ec:fd:d6:3e:1b:40:28:b8:86:
c6:92:cd:44:bf:21:f6:0d:b3:45:c6:fe:f6:36:ed:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:71:25:8B:0B:10:F4:0B:E2:A6:E7:A1:C2:10:A7:EA:F2:D5:96:EE
X509v3 Authority Key Identifier:
keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:99:db:fa:88:33:20:4e:56:1b:d3:2c:30:ec:a2:ec:ca:41:
de:6b:37:8e:27:10:fb:24:17:9e:67:a4:f4:c6:15:57:44:6a:
7a:a4:7e:ed:62:03:77:07:45:a4:5f:ef:4b:ed:b2:21:d4:71:
ab:b3:ca:a7:d2:b3:d3:60:d8:ed:84:a1:af:c5:e2:2f:6a:53:
ab:09:87:b6:d4:b8:b8:95:ed:16:41:8b:c0:4d:94:3c:11:77:
59:3b:58:1e:26:53:90:7a:8e:2a:87:a3:aa:c2:58:8d:c0:14:
28:75:68:ac:72:8f:89:c6:d7:4d:20:6b:3e:96:f9:15:74:9e:
60:ed:ab:6f:37:e6:fe:d5:76:83:a6:7b:ea:1c:08:d8:09:16:
ac:02:33:6b:d2:73:7f:15:81:e1:c3:a0:48:f6:92:b7:1a:b1:
d0:8e:aa:e2:b1:ad:ad:db:df:9f:ce:ee:b0:ae:5c:ab:84:e8:
27:d0:e3:4f:3a:26:a7:48:59:57:6e:33:4b:b2:3a:05:7a:41:
11:98:de:a6:56:71:94:86:1c:5d:03:93:7f:41:44:7a:33:b4:
6f:0f:29:a9:32:11:d5:e3:bc:ae:4a:55:01:aa:16:7d:84:5a:
af:3b:4c:20:fb:de:d5:08:08:dd:36:52:d8:ba:11:e7:75:e7:
79:56:fb:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyoMs4hV4ttmmFKZcTVsaVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNThjY2QwYjE3OTIyYjU4ZDVlOGIyY2YyZTU3OWNlNjlh
YjM4NjMwHhcNMjYwMzAxMDcwMDI3WhcNMjYwMzAyMDcwMDI3WjAzMTEwLwYDVQQD
EyhhZjcxMjU4YjBiMTBmNDBiZTJhNmU3YTFjMjEwYTdlYWYyZDU5NmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDsPytzFDOcPypAMQGiJyjebLSbg
Cr9fRsKy3zdeFGgHwZPeaU8Bl3u+CcJEN+GpoMwinjnqtQG7YVcbEJOoOTzLjw0x
+5aSDeLkYn0WITVcRMDt0tqKDsAJW/GH2ZdthJXIn7S5Dkfq7ba70Kro5ibPXyZB
503zHkD2Mf33rErsJsLAC6AQsatjag2aiYHvBBw741+w4ysELG5e4LFX8FRjJaqJ
8j6iRzOFT2i8V3kbBo0wVaS9v+eda4o/eYu+oiTWRApmk/b/6qmP/WIuWtLGYidQ
89HonA/Nbc4Bmbqk4CzDbR7s/dY+G0AouIbGks1EvyH2DbNFxv72Nu0vMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9xJYsLEPQL4qbnocIQp+ry1ZbuMB8GA1UdIwQY
MBaAFD9YzNCxeSK1jV6LLPLlec5pqzhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xOGRiZTItYmM2ZS00YTkyLWI5ZWYt
ZWQ3OWEyZjIyNWMwLzEvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xOGRiZTItYmM2ZS00YTkyLWI5ZWYtZWQ3OWEyZjIyNWMw
LzEvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpnb+ogz
IE5WG9MsMOyi7MpB3ms3jicQ+yQXnmek9MYVV0RqeqR+7WIDdwdFpF/vS+2yIdRx
q7PKp9Kz02DY7YShr8XiL2pTqwmHttS4uJXtFkGLwE2UPBF3WTtYHiZTkHqOKoej
qsJYjcAUKHVorHKPicbXTSBrPpb5FXSeYO2rbzfm/tV2g6Z76hwI2AkWrAIza9Jz
fxWB4cOgSPaStxqx0I6q4rGtrdvfn87usK5cq4ToJ9DjTzomp0hZV24zS7I6BXpB
EZjeplZxlIYcXQOTf0FEejO0bw8pqTIR1eO8rkpVAaoWfYRarztMIPve1QgI3TZS
2LoR53XneVb7kA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:41 2026 by rpki-client