Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier: naDH88wMZxpt7OnG3kFyrPNhuNuzMUPjL+z9soo2N2o=
Subject key identifier: C9:51:FC:A7:AC:CA:E0:66:44:69:8C:B6:92:CA:13:EE:EE:2C:47:48
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 019CAAC63187F138596B33731D081ED2CF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:41 +0000
Manifest this update: Sun 01 Mar 2026 19:00:41 +0000
Manifest next update: Mon 02 Mar 2026 19:00:41 +0000
Files and hashes: 1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: pnm0eV8JHj/RXwAeotE9LZUzKgA9PX8X/0cbKhz9Huo=)
2: Rbj8kULps77k1vuvOD23vcXMVrk.roa (hash: e6y1bFDYJyurguxeJmMNNNjCgXXxGouget3ofm5Tn7M=)
3: RoI3MM-0KYlxwCOUfkaDOeYsU5U.roa (hash: dLJKzgwKEgf2VwAfUCSXlmN7iFsDt2XbjlyglNJp8Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:31:87:f1:38:59:6b:33:73:1d:08:1e:d2:cf:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Mar 1 19:00:41 2026 GMT
Not After : Mar 2 19:00:41 2026 GMT
Subject: CN=c951fca7accae06644698cb692ca13eeee2c4748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4f:7e:38:c0:ed:0c:d9:6a:1a:bc:76:71:2a:
df:96:1f:0c:6b:3b:22:6e:dc:50:47:db:04:24:9b:
03:dd:e3:52:9e:b9:86:03:b9:76:b9:81:d1:ec:80:
a7:ee:db:34:5a:62:16:70:c8:9f:be:12:cc:bd:32:
2f:f8:67:a5:96:96:a9:6a:25:c3:69:85:fc:45:81:
5c:e6:10:3b:41:34:1d:60:27:28:9d:81:cd:b7:15:
d4:4d:a1:77:75:79:8b:d7:98:65:22:67:59:f0:84:
75:39:e1:21:61:44:9c:58:98:62:0d:87:53:e6:08:
df:eb:28:38:3d:7b:84:89:94:3a:d9:67:5d:61:5e:
fa:00:b6:16:99:89:12:cd:d0:f6:49:d9:5c:d6:40:
e3:30:71:8d:e4:96:6b:0e:d6:56:34:75:af:58:15:
81:f4:7e:83:dd:31:f6:d3:2d:f5:9f:4e:65:bc:5c:
80:52:1b:13:36:6c:78:8e:e4:b3:fb:9b:43:de:a0:
b2:ec:ec:d5:b5:33:5b:67:aa:41:31:48:87:f9:6d:
ea:3c:71:f5:31:b6:9d:97:dc:7f:e9:e3:26:df:c9:
e1:63:98:7b:75:b8:b8:4c:57:c2:3b:48:02:f1:4f:
1e:52:ae:51:47:8c:5c:5e:68:b3:df:f7:b2:1b:72:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:51:FC:A7:AC:CA:E0:66:44:69:8C:B6:92:CA:13:EE:EE:2C:47:48
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:62:d1:ea:96:6d:54:46:73:04:a9:ca:e8:dc:78:b2:c7:61:
d1:9b:bf:a4:ee:eb:a6:fb:9b:0a:9f:e4:e4:74:13:a5:8e:af:
d7:73:48:65:ae:51:25:d8:38:d0:ce:82:3a:ba:50:83:df:1c:
9a:5d:49:ef:eb:3c:46:02:3d:0c:e7:89:fc:3b:47:1f:39:1d:
b8:dd:89:e0:f2:b8:85:e4:b7:74:eb:be:26:4e:43:d0:d6:47:
f3:4c:e9:bb:f0:8e:f4:d2:38:58:63:b8:88:3a:c9:4d:1f:5f:
bc:8b:36:17:3c:15:c6:93:3b:c8:b0:c5:fc:14:93:8c:00:e3:
23:0e:e1:bc:67:d2:05:cb:b2:e8:69:6d:98:83:28:9b:b0:0e:
ec:54:60:ef:e0:25:b0:2f:a8:ec:06:a2:d4:20:b0:f8:5b:90:
76:8d:64:2e:c5:3b:c3:6f:f8:af:83:bf:b1:49:b6:8f:f4:5d:
b7:26:6d:2b:e7:b3:85:3c:75:a7:59:57:39:a3:ec:dc:7a:25:
3e:76:18:2e:9c:8b:31:34:89:87:93:d8:0c:08:ed:8b:3b:e3:
7f:20:a4:07:6f:47:b5:35:97:03:39:3f:79:76:c5:50:4a:19:
63:f1:cf:5f:14:3e:af:f5:99:2a:8a:97:b4:8a:d3:89:a7:66:
96:07:5d:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxjGH8ThZazNzHQge0s+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMmI0ZmNlYTRiNzIyZjJhNmY2YzcwNWM1NTg5ZWUxYWJj
NjIwYWUwHhcNMjYwMzAxMTkwMDQxWhcNMjYwMzAyMTkwMDQxWjAzMTEwLwYDVQQD
EyhjOTUxZmNhN2FjY2FlMDY2NDQ2OThjYjY5MmNhMTNlZWVlMmM0NzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk9+OMDtDNlqGrx2cSrflh8Mazsi
btxQR9sEJJsD3eNSnrmGA7l2uYHR7ICn7ts0WmIWcMifvhLMvTIv+GellpapaiXD
aYX8RYFc5hA7QTQdYCconYHNtxXUTaF3dXmL15hlImdZ8IR1OeEhYUScWJhiDYdT
5gjf6yg4PXuEiZQ62WddYV76ALYWmYkSzdD2Sdlc1kDjMHGN5JZrDtZWNHWvWBWB
9H6D3TH20y31n05lvFyAUhsTNmx4juSz+5tD3qCy7OzVtTNbZ6pBMUiH+W3qPHH1
Mbadl9x/6eMm38nhY5h7dbi4TFfCO0gC8U8eUq5RR4xcXmiz3/eyG3IP0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlR/KesyuBmRGmMtpLKE+7uLEdIMB8GA1UdIwQY
MBaAFD8rT86ktyLypvbHBcVYnuGrxiCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NWIyMzctZDA0MS00NDk3LWE3Mjkt
NjI1M2FkMDhmODU4LzEvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84NWIyMzctZDA0MS00NDk3LWE3MjktNjI1M2FkMDhmODU4
LzEvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmLR6pZt
VEZzBKnK6Nx4ssdh0Zu/pO7rpvubCp/k5HQTpY6v13NIZa5RJdg40M6COrpQg98c
ml1J7+s8RgI9DOeJ/DtHHzkduN2J4PK4heS3dOu+Jk5D0NZH80zpu/CO9NI4WGO4
iDrJTR9fvIs2FzwVxpM7yLDF/BSTjADjIw7hvGfSBcuy6GltmIMom7AO7FRg7+Al
sC+o7Aai1CCw+FuQdo1kLsU7w2/4r4O/sUm2j/RdtyZtK+ezhTx1p1lXOaPs3Hol
PnYYLpyLMTSJh5PYDAjtizvjfyCkB29HtTWXAzk/eXbFUEoZY/HPXxQ+r/WZKoqX
tIrTiadmlgddEg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:57 2026 by rpki-client