
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier: bcsUpSR8HMx0Qg5LW77HmdsmApc+8BBKvd9NH8y4Dqs=
Subject key identifier: 49:A3:32:29:F6:A6:F0:D6:BF:E7:2A:72:59:D6:83:4A:84:E5:E9:E6
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial: 019CA9EB64DB63A2B2825A52DC7C25DB2785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number: 05B2
Signing time: Sun 01 Mar 2026 15:01:42 +0000
Manifest this update: Sun 01 Mar 2026 15:01:42 +0000
Manifest next update: Mon 02 Mar 2026 15:01:42 +0000
Files and hashes: 1: 3fJrjAYV-8WA5qmnNRu8vP1jkLs.roa (hash: UTNsuGJV1hBq6NhuyQF7exUAJYp789Ei8OqvCYeZo7o=)
2: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: 222HjxlvKdndfTLvvDs/4mTRB2Yb4SnZTdPDDWvcEik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:64:db:63:a2:b2:82:5a:52:dc:7c:25:db:27:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
Validity
Not Before: Mar 1 15:01:42 2026 GMT
Not After : Mar 2 15:01:42 2026 GMT
Subject: CN=49a33229f6a6f0d6bfe72a7259d6834a84e5e9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:f4:ad:44:ae:d2:70:b5:49:4a:1e:76:05:
c4:ad:45:3b:02:6d:9a:9e:38:16:c7:51:c6:12:75:
c6:2c:53:08:9a:af:53:7f:4d:65:82:53:71:55:60:
49:fe:98:17:bb:b2:60:25:7f:50:7e:f1:dc:8b:a9:
69:30:74:83:fe:09:c6:e7:72:fa:7f:49:2d:1f:90:
3c:3a:2e:a8:9d:c9:80:31:f0:af:27:cb:74:7f:f6:
08:0c:90:1b:05:68:fc:1e:0a:0d:51:69:00:19:e3:
45:13:05:50:d2:a7:66:cf:8e:bf:ff:15:7e:d0:eb:
3c:28:dc:c2:4f:58:f2:8c:49:08:7b:1d:87:6e:f0:
63:22:8b:a2:5e:46:82:e4:57:c2:c1:23:37:55:27:
f9:bf:ad:9d:ae:21:5b:7a:47:f2:21:44:a3:a4:ac:
3e:99:3f:81:bc:6d:9a:4f:49:f0:19:0f:63:31:49:
e9:e3:b8:5d:33:74:5c:df:8a:76:8d:38:66:99:54:
4d:fa:fc:2f:ba:df:6a:da:b2:51:2c:b0:76:fc:5b:
c5:75:83:dd:68:10:7e:0c:36:91:54:90:56:ef:98:
e7:b1:93:df:5c:cc:10:96:db:8d:26:bf:bb:d1:e8:
be:03:01:75:10:b6:ec:35:d9:09:e8:7e:39:f6:49:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A3:32:29:F6:A6:F0:D6:BF:E7:2A:72:59:D6:83:4A:84:E5:E9:E6
X509v3 Authority Key Identifier:
keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:22:64:0f:d7:52:76:d7:85:8f:de:db:e0:a8:7f:cc:19:41:
b9:b5:53:00:8c:08:6a:90:f9:6a:70:37:2e:98:12:d0:66:c0:
bd:2f:8b:ac:5c:e0:f3:7c:f6:1a:90:3a:1f:3b:ac:fb:f9:e5:
b3:46:8f:4c:d4:02:91:86:5b:60:0e:b9:4d:80:2e:fc:c5:1f:
5a:c3:36:0a:73:f3:93:5f:4e:ca:d5:ca:10:c6:10:d6:22:fb:
e8:a3:c0:54:40:ac:70:67:79:18:64:3e:3c:0e:7b:ae:a9:dd:
d8:93:6a:7e:f2:3e:48:b3:01:b9:c0:3c:83:c8:79:f5:73:67:
41:02:2f:ca:a5:1a:5d:0a:3d:7b:eb:78:1d:ce:8d:f5:11:19:
5c:44:83:1a:5e:0f:85:d9:ee:78:dc:51:1a:9e:9f:f9:d2:50:
1a:2d:3b:d3:ec:a8:25:84:c9:2d:34:f8:6c:77:24:5f:ff:be:
ea:2c:66:0e:9a:83:6d:e5:37:ba:10:db:74:f6:06:9f:6c:94:
4c:34:25:0b:cb:bd:8d:c8:da:0f:bb:b5:8d:91:08:e8:c3:58:
c2:7e:34:60:12:b5:db:57:be:37:a2:8e:ed:29:a9:21:89:af:
cf:e4:8b:7c:ff:88:20:5e:23:22:1b:d9:e8:18:eb:e4:f4:d7:
08:81:70:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp62TbY6KyglpS3Hwl2yeFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmQwYjgyNjY0NGExODM4N2NmODMyMmRiN2U2NDZhZjYz
ZDk4NmEwHhcNMjYwMzAxMTUwMTQyWhcNMjYwMzAyMTUwMTQyWjAzMTEwLwYDVQQD
Eyg0OWEzMzIyOWY2YTZmMGQ2YmZlNzJhNzI1OWQ2ODM0YTg0ZTVlOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkb0rUSu0nC1SUoedgXErUU7Am2a
njgWx1HGEnXGLFMImq9Tf01lglNxVWBJ/pgXu7JgJX9QfvHci6lpMHSD/gnG53L6
f0ktH5A8Oi6oncmAMfCvJ8t0f/YIDJAbBWj8HgoNUWkAGeNFEwVQ0qdmz46//xV+
0Os8KNzCT1jyjEkIex2HbvBjIouiXkaC5FfCwSM3VSf5v62driFbekfyIUSjpKw+
mT+BvG2aT0nwGQ9jMUnp47hdM3Rc34p2jThmmVRN+vwvut9q2rJRLLB2/FvFdYPd
aBB+DDaRVJBW75jnsZPfXMwQltuNJr+70ei+AwF1ELbsNdkJ6H459kkzVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmjMin2pvDWv+cqclnWg0qE5enmMB8GA1UdIwQY
MBaAFKQtC4JmRKGDh8+DItt+ZGr2PZhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0Mjgt
ZTgyZDVlZTRlNDBmLzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0MjgtZTgyZDVlZTRlNDBm
LzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyJkD9dS
dteFj97b4Kh/zBlBubVTAIwIapD5anA3LpgS0GbAvS+LrFzg83z2GpA6Hzus+/nl
s0aPTNQCkYZbYA65TYAu/MUfWsM2CnPzk19OytXKEMYQ1iL76KPAVECscGd5GGQ+
PA57rqnd2JNqfvI+SLMBucA8g8h59XNnQQIvyqUaXQo9e+t4Hc6N9REZXESDGl4P
hdnueNxRGp6f+dJQGi070+yoJYTJLTT4bHckX/++6ixmDpqDbeU3uhDbdPYGn2yU
TDQlC8u9jcjaD7u1jZEI6MNYwn40YBK121e+N6KO7SmpIYmvz+SLfP+IIF4jIhvZ
6Bjr5PTXCIFwRg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:52:53 2026 by rpki-client