Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
File: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft (raw, json)
Hash identifier: rFu3xhZWLwsrS7EIlaHoh5YnsipcKK45+Pm7Qh+yDc0=
Subject key identifier: B2:8A:29:17:EF:F9:D0:37:39:4F:F0:77:53:F2:1F:F3:93:62:70:05
Authority key identifier: A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
Certificate issuer: /CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Certificate serial: 019CAAFCFE981CFB974BF4F410B6AC7242E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
Manifest number: 0EFE
Signing time: Sun 01 Mar 2026 20:00:32 +0000
Manifest this update: Sun 01 Mar 2026 20:00:32 +0000
Manifest next update: Mon 02 Mar 2026 20:00:32 +0000
Files and hashes: 1: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl (hash: rQdCmBHi4zoqpAjrzSROCu3fYabctv6OWqvcuO5OlO8=)
2: vFPz2EZZAEU2N3SgGFxaDNU5jHs.roa (hash: EuLVLB/JUDTlNe7Sgb1DpN69/WpO8B+6KWA2ZGoI7bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fe:98:1c:fb:97:4b:f4:f4:10:b6:ac:72:42:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Validity
Not Before: Mar 1 20:00:32 2026 GMT
Not After : Mar 2 20:00:32 2026 GMT
Subject: CN=b28a2917eff9d037394ff07753f21ff393627005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:df:b3:92:5d:87:78:a5:93:74:95:2f:2e:
29:09:b8:d0:09:bd:30:35:06:5f:52:c4:eb:ec:d8:
10:2e:c4:55:4c:46:b6:fa:ab:8f:61:46:e3:d7:eb:
6e:03:db:e6:5e:41:78:22:a3:84:a3:95:f4:4a:7a:
8f:a5:7e:2f:65:60:f5:99:44:47:2d:f6:21:df:4e:
88:27:09:b1:6f:ca:bd:36:b4:91:64:45:ea:0e:fb:
f1:dd:bf:06:bb:eb:35:7e:0c:bd:c2:27:24:02:d5:
ec:06:2d:dc:87:5d:d0:5e:17:c6:12:aa:63:09:dd:
7f:2d:3f:d1:35:54:7e:b7:32:97:ad:43:c8:5c:b6:
de:0a:a2:aa:24:65:e2:a8:c0:a9:09:87:7d:44:e5:
63:00:de:d9:5c:d3:24:04:9b:48:d9:0f:a5:7e:32:
f3:fb:71:bd:46:4c:68:3d:ed:37:ab:b2:8f:f8:c2:
c3:b2:56:db:0c:b1:5f:48:06:68:c7:59:ed:aa:a9:
44:19:b3:ce:d5:33:ed:a7:e9:1e:ea:ea:26:3d:13:
51:d0:93:81:e9:99:85:7e:57:4d:d1:0a:b7:17:ad:
24:53:73:29:8e:d5:0f:9b:32:47:a1:4a:65:e9:4f:
06:24:28:bd:ce:27:34:ef:e9:24:32:e4:22:0a:30:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8A:29:17:EF:F9:D0:37:39:4F:F0:77:53:F2:1F:F3:93:62:70:05
X509v3 Authority Key Identifier:
keyid:A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:41:f9:ed:6c:17:27:d5:08:3c:31:a2:89:a5:c7:af:55:80:
44:8f:c8:be:4f:59:f0:95:0c:85:d9:f6:0f:0f:f2:26:0f:ff:
5f:0c:0e:da:73:1d:2b:58:66:2b:a7:4d:66:57:92:0a:34:36:
47:d4:ee:06:41:6f:46:6f:cf:00:6c:f0:be:c9:18:d2:5a:a6:
11:9b:5a:f1:d0:a8:0e:eb:c9:0a:0f:d1:46:b4:a6:4f:d7:7f:
55:97:e6:06:cc:a8:b1:3a:45:c2:fb:69:6a:03:f5:dd:89:ab:
96:76:1d:ee:7f:d2:19:13:fe:b8:eb:69:5a:94:4a:12:e1:0a:
e3:2b:80:6f:68:89:22:5b:0b:8d:9f:32:3b:0c:38:a8:d4:ec:
38:2a:d5:73:57:0f:bd:a5:57:b4:3a:52:79:ae:6a:0a:95:2a:
ef:e9:69:00:4d:a2:45:e7:40:76:7f:f1:1b:a1:46:86:2b:62:
42:43:ec:10:45:45:cd:19:b6:69:4f:08:4b:55:f2:49:3d:a6:
37:3e:b4:dc:2b:0b:97:17:14:b1:ba:3c:06:66:18:e8:fb:c6:
06:0b:d2:13:7a:4c:2d:23:0e:98:02:0e:46:91:c2:72:b9:96:
bd:21:90:51:7e:e5:57:35:5a:d2:b4:8a:ca:fe:66:4e:ba:e6:
a1:0a:c6:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/P6YHPuXS/T0ELasckLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NzMyNWU0OTVjYjAxNTAyMDNiNzlmMjQ2ZjRjZDRjMGZl
YzI0ZmYwHhcNMjYwMzAxMjAwMDMyWhcNMjYwMzAyMjAwMDMyWjAzMTEwLwYDVQQD
EyhiMjhhMjkxN2VmZjlkMDM3Mzk0ZmYwNzc1M2YyMWZmMzkzNjI3MDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DPfs5Jdh3ilk3SVLy4pCbjQCb0w
NQZfUsTr7NgQLsRVTEa2+quPYUbj1+tuA9vmXkF4IqOEo5X0SnqPpX4vZWD1mURH
LfYh306IJwmxb8q9NrSRZEXqDvvx3b8Gu+s1fgy9wickAtXsBi3ch13QXhfGEqpj
Cd1/LT/RNVR+tzKXrUPIXLbeCqKqJGXiqMCpCYd9ROVjAN7ZXNMkBJtI2Q+lfjLz
+3G9RkxoPe03q7KP+MLDslbbDLFfSAZox1ntqqlEGbPO1TPtp+ke6uomPRNR0JOB
6ZmFfldN0Qq3F60kU3MpjtUPmzJHoUpl6U8GJCi9zic07+kkMuQiCjClJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKKKRfv+dA3OU/wd1PyH/OTYnAFMB8GA1UdIwQY
MBaAFKdzJeSVywFQIDt58kb0zUwP7CT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iZjg0MTEtNjk2MC00Y2VmLTkxZjkt
MTNiNmE2ZDcxYTQxLzEvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9iZjg0MTEtNjk2MC00Y2VmLTkxZjktMTNiNmE2ZDcxYTQx
LzEvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEH57WwX
J9UIPDGiiaXHr1WARI/Ivk9Z8JUMhdn2Dw/yJg//XwwO2nMdK1hmK6dNZleSCjQ2
R9TuBkFvRm/PAGzwvskY0lqmEZta8dCoDuvJCg/RRrSmT9d/VZfmBsyosTpFwvtp
agP13YmrlnYd7n/SGRP+uOtpWpRKEuEK4yuAb2iJIlsLjZ8yOww4qNTsOCrVc1cP
vaVXtDpSea5qCpUq7+lpAE2iRedAdn/xG6FGhitiQkPsEEVFzRm2aU8IS1XyST2m
Nz603CsLlxcUsbo8BmYY6PvGBgvSE3pMLSMOmAIORpHCcrmWvSGQUX7lVzVa0rSK
yv5mTrrmoQrG5Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:03 2026 by rpki-client