Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
File: pmnxwhNwxE39EOKvaIyMTg6hKVU.mft (raw, json)
Hash identifier: lDjLdOgNCE/uFUSbDA6dyODxoEoO/jiEQorFtzgnQa4=
Subject key identifier: 1E:DF:0C:0C:99:CD:3A:57:C8:C6:FE:68:81:C6:AD:77:DF:BD:C3:71
Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
Certificate issuer: /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Certificate serial: 019CAD908FD3ABE518630D2A90FD2482E938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
Manifest number: 1090
Signing time: Mon 02 Mar 2026 08:00:58 +0000
Manifest this update: Mon 02 Mar 2026 08:00:58 +0000
Manifest next update: Tue 03 Mar 2026 08:00:58 +0000
Files and hashes: 1: pmnxwhNwxE39EOKvaIyMTg6hKVU.crl (hash: JNUnY+zZmYEpHEEXS0MYAmShme7aqrbmCNwfGLv5SbM=)
2: xHv2_HdEJG5Cfvg9tYmqVThQtwc.roa (hash: Nxypi5IV+neWqZvzXksjBejqnOVHDrNcZpixogm0gqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:8f:d3:ab:e5:18:63:0d:2a:90:fd:24:82:e9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Validity
Not Before: Mar 2 08:00:58 2026 GMT
Not After : Mar 3 08:00:58 2026 GMT
Subject: CN=1edf0c0c99cd3a57c8c6fe6881c6ad77dfbdc371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:02:d2:83:df:30:31:1a:3f:eb:70:78:93:
89:dc:ef:79:0f:08:26:11:f3:49:b7:b3:b2:ed:07:
36:12:11:05:54:4a:db:87:02:7e:1e:b8:f9:ab:0b:
d3:19:b3:73:f1:b7:23:af:2d:0d:d4:db:27:44:b2:
e1:4b:38:86:fa:60:cd:75:08:00:85:91:9c:54:f6:
dd:b1:3c:8a:eb:0a:74:0c:9e:d7:67:9d:0e:10:dc:
77:b0:cc:92:af:5e:2b:13:d8:68:66:a3:5e:11:34:
4e:5b:5e:14:4d:53:21:ab:8e:49:ba:51:14:d6:74:
b3:2c:c5:f1:18:88:c1:99:ef:04:3c:4b:11:a3:31:
ad:82:71:58:8e:6b:03:9f:68:cb:cf:4e:56:7c:45:
de:91:12:b5:31:16:db:19:ea:fd:6a:43:e6:27:56:
22:62:cd:35:9e:c9:e4:6b:5e:ba:28:95:48:10:d3:
af:81:dc:59:1a:e9:66:de:a8:ba:f9:94:6a:33:4d:
f8:e8:ce:64:7e:cc:6a:41:c6:ee:58:00:d5:4c:23:
26:fa:45:e1:6c:c3:2a:03:a7:ca:0d:72:b4:3a:e1:
9f:19:2a:2a:82:ec:59:b1:4c:72:8f:d8:4d:2b:bd:
53:71:4f:87:58:53:41:6c:2d:62:b5:f9:9a:4c:c6:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DF:0C:0C:99:CD:3A:57:C8:C6:FE:68:81:C6:AD:77:DF:BD:C3:71
X509v3 Authority Key Identifier:
keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:00:9d:2a:47:bc:d6:dc:05:0a:40:f2:ec:b4:83:7c:71:50:
5d:f4:67:6f:c6:16:4a:c6:40:85:fe:0c:28:86:85:ae:84:6c:
c3:cc:b3:59:c5:08:4e:fd:c0:de:f0:c7:98:5c:f9:95:93:07:
76:0f:a5:d9:c1:79:ca:e4:d2:9d:22:d4:9d:f7:71:c6:ab:ce:
82:d3:c5:96:e2:ee:9d:dc:f5:7d:9b:df:d2:9b:01:80:e3:85:
bd:9a:91:ef:da:72:02:51:d4:fd:ac:49:32:3a:9f:04:fe:de:
78:81:1d:b6:8b:a1:25:ba:e1:c1:4d:2f:45:29:92:93:27:f2:
5c:74:f5:dd:1f:9e:cd:41:34:7f:d7:ad:23:0b:6b:04:c7:b6:
8a:2b:33:4a:ad:3e:d0:cd:45:8c:c2:4d:5d:9c:d4:c4:d5:1b:
59:57:dd:38:a2:89:bc:7d:6f:4d:9c:4a:90:f8:fb:e7:a0:5f:
98:2c:90:d9:de:1b:ed:28:20:c9:66:35:55:01:97:b6:5c:33:
e4:20:2c:35:ab:48:52:63:ff:07:de:8c:f2:a5:4a:45:6c:c2:
84:6c:6e:16:d2:93:20:2d:bf:c2:b6:a5:f1:c1:2e:22:20:cd:
59:70:1b:84:3c:2f:37:d7:fa:ca:17:80:9e:b8:7f:19:f2:7c:
57:82:e7:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkI/Tq+UYYw0qkP0kguk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjlmMWMyMTM3MGM0NGRmZDEwZTJhZjY4OGM4YzRlMGVh
MTI5NTUwHhcNMjYwMzAyMDgwMDU4WhcNMjYwMzAzMDgwMDU4WjAzMTEwLwYDVQQD
EygxZWRmMGMwYzk5Y2QzYTU3YzhjNmZlNjg4MWM2YWQ3N2RmYmRjMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovcC0oPfMDEaP+tweJOJ3O95Dwgm
EfNJt7Oy7Qc2EhEFVErbhwJ+Hrj5qwvTGbNz8bcjry0N1NsnRLLhSziG+mDNdQgA
hZGcVPbdsTyK6wp0DJ7XZ50OENx3sMySr14rE9hoZqNeETROW14UTVMhq45JulEU
1nSzLMXxGIjBme8EPEsRozGtgnFYjmsDn2jLz05WfEXekRK1MRbbGer9akPmJ1Yi
Ys01nsnka166KJVIENOvgdxZGulm3qi6+ZRqM0346M5kfsxqQcbuWADVTCMm+kXh
bMMqA6fKDXK0OuGfGSoqguxZsUxyj9hNK71TcU+HWFNBbC1itfmaTMbvlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7fDAyZzTpXyMb+aIHGrXffvcNxMB8GA1UdIwQY
MBaAFKZp8cITcMRN/RDir2iMjE4OoSlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lN2I0MGMtNDE0Yi00NzNhLWI4Yzct
YjdiMTQ4MTYyNWIxLzEvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lN2I0MGMtNDE0Yi00NzNhLWI4YzctYjdiMTQ4MTYyNWIx
LzEvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADACdKke8
1twFCkDy7LSDfHFQXfRnb8YWSsZAhf4MKIaFroRsw8yzWcUITv3A3vDHmFz5lZMH
dg+l2cF5yuTSnSLUnfdxxqvOgtPFluLundz1fZvf0psBgOOFvZqR79pyAlHU/axJ
MjqfBP7eeIEdtouhJbrhwU0vRSmSkyfyXHT13R+ezUE0f9etIwtrBMe2iiszSq0+
0M1FjMJNXZzUxNUbWVfdOKKJvH1vTZxKkPj756BfmCyQ2d4b7SggyWY1VQGXtlwz
5CAsNatIUmP/B96M8qVKRWzChGxuFtKTIC2/wral8cEuIiDNWXAbhDwvN9f6yheA
nrh/GfJ8V4LnnQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:03 2026 by rpki-client