Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier: oi9x210A9Q/aQLnBuwD9noalBUREYI52LgooXi0wwZ0=
Subject key identifier: BE:F7:DF:3E:B1:02:CE:79:34:14:29:C3:99:1E:A8:87:4B:E9:E7:A8
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial: 019D99CFF0C05DE2827A5842FC9B73D04DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number: 067E
Signing time: Fri 17 Apr 2026 05:00:34 +0000
Manifest this update: Fri 17 Apr 2026 05:00:34 +0000
Manifest next update: Sat 18 Apr 2026 05:00:34 +0000
Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: 0FSgb4YQ+bf3P2bKZTRLrE2QcyZxgDZEtp7PvitMf9U=)
2: vYMGfpWvYNZs02-62C7WJ9xAV3E.roa (hash: sKzGuqCRJukA31DoIxhryBDpKKKc57ySQcucjlkvX1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f0:c0:5d:e2:82:7a:58:42:fc:9b:73:d0:4d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Validity
Not Before: Apr 17 05:00:34 2026 GMT
Not After : Apr 18 05:00:34 2026 GMT
Subject: CN=bef7df3eb102ce79341429c3991ea8874be9e7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:56:5b:89:79:2a:01:28:6a:ba:2b:80:6c:7a:
af:ef:06:f6:bf:49:0e:3a:4b:19:ef:09:ac:41:d9:
c1:26:8e:6c:17:0e:93:62:46:81:38:39:21:75:f3:
77:ba:13:6e:21:c8:39:f4:6c:51:9c:9f:cd:2c:35:
4b:7c:1f:44:01:f5:6f:b7:ea:52:07:3b:66:b2:48:
80:03:da:d2:c7:42:ac:86:0c:12:df:47:80:4d:32:
74:b1:a1:86:50:76:31:f6:c9:c2:a5:f7:78:43:3e:
ae:c7:20:ee:7f:1e:78:1d:23:f1:8e:6c:35:c9:98:
ae:da:92:18:ab:6f:37:f7:87:e8:24:4c:a5:3f:4d:
15:ee:6b:7d:9e:21:57:14:2c:75:ea:75:3d:0f:a9:
4f:b7:85:2b:cb:cd:c1:1f:aa:f0:65:7a:d5:ff:98:
7f:5b:2e:75:d7:56:07:d0:ca:06:68:29:a7:86:f3:
95:05:9a:bf:d5:c0:40:82:97:2b:2f:3f:08:4d:c0:
35:75:5d:54:8d:56:4a:37:36:ac:74:1b:7c:ad:e4:
59:9b:04:01:97:07:80:f9:14:e4:5b:cd:89:d1:1f:
55:35:62:0b:c6:7f:6d:a0:db:51:13:e6:fd:b3:e8:
21:0f:58:a9:e6:18:3c:35:fe:53:bb:5c:79:22:e2:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F7:DF:3E:B1:02:CE:79:34:14:29:C3:99:1E:A8:87:4B:E9:E7:A8
X509v3 Authority Key Identifier:
keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4d:ae:86:32:78:6f:38:5a:fb:2c:c4:32:74:68:24:57:68:
98:97:57:3c:f6:9e:7c:cf:f2:c2:74:d4:c6:cc:84:ce:12:a6:
6e:ae:e5:f1:15:05:d2:28:de:26:c0:53:41:42:3d:2d:54:94:
de:17:93:ea:90:c4:c9:55:b1:2c:78:27:d3:7a:d1:5f:a9:53:
88:47:5a:55:e4:0a:ec:79:95:8a:76:70:e2:f8:68:2a:21:77:
16:4a:25:41:e4:db:ad:cf:0e:48:a9:2d:d6:66:3a:a6:db:e9:
44:f8:3c:ff:4c:6a:6e:af:4e:2b:de:26:d3:84:4e:67:11:c6:
41:99:c8:f4:aa:88:fd:aa:3b:4d:8c:e1:2c:c7:d2:aa:74:35:
a5:74:d4:30:e5:2b:d1:43:0f:95:cf:ac:a5:1d:df:4a:f3:09:
38:f1:b6:24:29:60:5c:8e:ee:10:8b:2f:c0:fd:be:d2:d4:49:
e1:74:06:1d:c8:86:15:11:14:9e:a3:ea:36:7d:b7:66:e5:08:
8f:b6:a0:93:17:a4:8f:a4:12:12:48:37:af:a8:2c:d1:5e:64:
94:61:19:38:db:13:77:e4:96:91:f0:47:c3:ad:a6:f7:46:e8:
e8:55:6c:af:bf:db:17:c8:5c:50:50:0e:91:fc:c7:8c:69:63:
c9:10:00:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz/DAXeKCelhC/Jtz0E2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjODdmZWI0YWI5YTU3NzY1ZmMwYTY2NDU3MmMzNTAzMmU4
NjZhZDQwHhcNMjYwNDE3MDUwMDM0WhcNMjYwNDE4MDUwMDM0WjAzMTEwLwYDVQQD
EyhiZWY3ZGYzZWIxMDJjZTc5MzQxNDI5YzM5OTFlYTg4NzRiZTllN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VZbiXkqAShquiuAbHqv7wb2v0kO
OksZ7wmsQdnBJo5sFw6TYkaBODkhdfN3uhNuIcg59GxRnJ/NLDVLfB9EAfVvt+pS
BztmskiAA9rSx0KshgwS30eATTJ0saGGUHYx9snCpfd4Qz6uxyDufx54HSPxjmw1
yZiu2pIYq28394foJEylP00V7mt9niFXFCx16nU9D6lPt4Ury83BH6rwZXrV/5h/
Wy5111YH0MoGaCmnhvOVBZq/1cBAgpcrLz8ITcA1dV1UjVZKNzasdBt8reRZmwQB
lweA+RTkW82J0R9VNWILxn9toNtRE+b9s+ghD1ip5hg8Nf5Tu1x5IuKypwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL733z6xAs55NBQpw5keqIdL6eeoMB8GA1UdIwQY
MBaAFDyH/rSrmld2X8CmZFcsNQMuhmrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQt
NDhmYjAwZmM5N2I2LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQtNDhmYjAwZmM5N2I2
LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV02uhjJ4
bzha+yzEMnRoJFdomJdXPPaefM/ywnTUxsyEzhKmbq7l8RUF0ijeJsBTQUI9LVSU
3heT6pDEyVWxLHgn03rRX6lTiEdaVeQK7HmVinZw4vhoKiF3FkolQeTbrc8OSKkt
1mY6ptvpRPg8/0xqbq9OK94m04ROZxHGQZnI9KqI/ao7TYzhLMfSqnQ1pXTUMOUr
0UMPlc+spR3fSvMJOPG2JClgXI7uEIsvwP2+0tRJ4XQGHciGFREUnqPqNn23ZuUI
j7agkxekj6QSEkg3r6gs0V5klGEZONsTd+SWkfBHw62m90bo6FVsr7/bF8hcUFAO
kfzHjGljyRAAJA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:37 2026 by rpki-client