Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier: 5P2wHgRt3Wv8qkFJCfJos+81mNwtOCO0dfBfb4rtqU0=
Subject key identifier: 37:88:87:DA:20:06:A6:A1:7A:12:E0:BC:0F:BB:54:5D:B1:C3:A6:E5
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial: 019CAA592950AA7497022FF3E8592E5DA0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number: 0602
Signing time: Sun 01 Mar 2026 17:01:35 +0000
Manifest this update: Sun 01 Mar 2026 17:01:35 +0000
Manifest next update: Mon 02 Mar 2026 17:01:35 +0000
Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: gsWA7kAMieydkpadUiMGbDFf1s4oQYbAyEkCD0uYHcM=)
2: vYMGfpWvYNZs02-62C7WJ9xAV3E.roa (hash: sKzGuqCRJukA31DoIxhryBDpKKKc57ySQcucjlkvX1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:29:50:aa:74:97:02:2f:f3:e8:59:2e:5d:a0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Validity
Not Before: Mar 1 17:01:35 2026 GMT
Not After : Mar 2 17:01:35 2026 GMT
Subject: CN=378887da2006a6a17a12e0bc0fbb545db1c3a6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:33:c2:b4:a3:5c:49:df:3b:0e:03:30:e2:
fe:f3:2f:14:c4:98:d8:0f:cd:0b:41:90:3f:e6:27:
90:48:7a:2d:89:03:63:f5:14:89:6f:43:50:c0:29:
e7:10:97:db:e0:1e:bc:ec:e5:c7:7b:07:f5:84:4d:
2c:ac:52:fd:5b:5c:fd:74:e4:a0:f0:1c:0f:f8:84:
f1:ab:2e:7b:a5:8d:4e:fd:3c:d1:a5:de:9e:7c:94:
4f:7a:c5:88:b1:bb:5b:11:c5:88:2c:01:d7:cc:b4:
5f:d3:09:25:71:0a:30:12:a1:90:ad:38:ad:5a:31:
29:ca:b5:65:c4:70:69:99:0c:fa:2c:5b:60:7c:a9:
7e:8b:a3:77:cd:99:57:a8:ed:94:2a:ff:e0:bf:b6:
c6:b5:67:6c:7a:e6:07:85:1f:1e:4d:e9:97:99:f5:
a9:68:71:77:5f:00:7b:88:77:80:66:58:a0:5c:40:
b4:3f:24:d1:76:60:9e:af:76:a1:9f:1e:9c:43:70:
8e:61:cc:e2:bf:f5:b0:1e:14:fa:ec:64:17:42:99:
df:b1:11:4d:a3:80:84:1b:0e:9b:08:37:85:f6:9b:
87:bd:d5:3e:fe:dc:27:8d:c5:21:72:71:ae:31:32:
42:39:67:c8:b8:56:1d:f1:24:6d:2c:62:e3:d1:42:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:88:87:DA:20:06:A6:A1:7A:12:E0:BC:0F:BB:54:5D:B1:C3:A6:E5
X509v3 Authority Key Identifier:
keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d6:5b:86:4c:eb:b1:b4:8a:a5:c0:dc:a2:a0:51:86:bf:6b:
d5:33:be:67:5c:84:41:e8:22:c3:41:8b:e6:f6:5e:fb:0f:1d:
d9:96:10:d3:d2:b4:94:50:8b:fa:04:86:f4:fc:18:0d:e8:28:
33:96:97:bb:a5:d9:41:71:58:e8:05:51:2e:f0:41:e5:50:4b:
24:1b:b0:96:8a:96:fc:f4:a1:84:b1:ad:73:96:b3:52:a1:e8:
d2:d2:95:e0:65:f3:bb:b3:9f:73:01:74:b7:0c:f8:c8:df:c0:
3b:87:ff:2d:35:a4:19:10:8e:1f:7f:e4:f7:17:38:d2:ba:2a:
2b:b5:0e:2f:1b:e9:cd:d8:9b:e4:e2:55:13:3e:ec:38:30:3f:
1e:0e:18:86:01:43:77:c1:b3:f1:31:3b:4b:50:b1:dc:86:2d:
56:89:a6:e5:55:04:d2:a7:4f:d0:a9:65:b4:af:cc:0f:1b:f7:
ae:57:54:f4:aa:fc:6b:22:df:eb:3d:94:6e:a1:db:96:d1:1b:
3f:c9:48:71:2c:be:25:f3:7b:da:79:ce:c4:b0:7f:fd:f6:6e:
37:0b:fe:e9:1e:e9:46:ce:da:aa:8e:71:da:38:34:34:bd:3d:
15:ed:12:26:39:0f:1f:fe:47:d7:52:82:f8:e5:8b:7a:5a:87:
64:d5:3e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWSlQqnSXAi/z6FkuXaDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjODdmZWI0YWI5YTU3NzY1ZmMwYTY2NDU3MmMzNTAzMmU4
NjZhZDQwHhcNMjYwMzAxMTcwMTM1WhcNMjYwMzAyMTcwMTM1WjAzMTEwLwYDVQQD
EygzNzg4ODdkYTIwMDZhNmExN2ExMmUwYmMwZmJiNTQ1ZGIxYzNhNmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojozwrSjXEnfOw4DMOL+8y8UxJjY
D80LQZA/5ieQSHotiQNj9RSJb0NQwCnnEJfb4B687OXHewf1hE0srFL9W1z9dOSg
8BwP+ITxqy57pY1O/TzRpd6efJRPesWIsbtbEcWILAHXzLRf0wklcQowEqGQrTit
WjEpyrVlxHBpmQz6LFtgfKl+i6N3zZlXqO2UKv/gv7bGtWdseuYHhR8eTemXmfWp
aHF3XwB7iHeAZligXEC0PyTRdmCer3ahnx6cQ3COYcziv/WwHhT67GQXQpnfsRFN
o4CEGw6bCDeF9puHvdU+/twnjcUhcnGuMTJCOWfIuFYd8SRtLGLj0UJ+zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeIh9ogBqahehLgvA+7VF2xw6blMB8GA1UdIwQY
MBaAFDyH/rSrmld2X8CmZFcsNQMuhmrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQt
NDhmYjAwZmM5N2I2LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQtNDhmYjAwZmM5N2I2
LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNZbhkzr
sbSKpcDcoqBRhr9r1TO+Z1yEQegiw0GL5vZe+w8d2ZYQ09K0lFCL+gSG9PwYDego
M5aXu6XZQXFY6AVRLvBB5VBLJBuwloqW/PShhLGtc5azUqHo0tKV4GXzu7OfcwF0
twz4yN/AO4f/LTWkGRCOH3/k9xc40roqK7UOLxvpzdib5OJVEz7sODA/Hg4YhgFD
d8Gz8TE7S1Cx3IYtVomm5VUE0qdP0KlltK/MDxv3rldU9Kr8ayLf6z2UbqHbltEb
P8lIcSy+JfN72nnOxLB//fZuNwv+6R7pRs7aqo5x2jg0NL09Fe0SJjkPH/5H11KC
+OWLelqHZNU+QQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:18:50 2026 by rpki-client