Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
File: Pbiird2wAoUIVJlqlLcrh_Snsw8.mft (raw, json)
Hash identifier: hQHrTwVP2l4gveRWbjK6iVNVKmOywzICxCpxL6CWdVs=
Subject key identifier: 65:6B:39:0C:65:54:57:2E:72:5B:F5:8D:93:20:D5:B0:43:44:19:B6
Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Certificate serial: 019CADC77FE2DB515481C1E5E04993D099ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
Manifest number: 10F5
Signing time: Mon 02 Mar 2026 09:00:58 +0000
Manifest this update: Mon 02 Mar 2026 09:00:58 +0000
Manifest next update: Tue 03 Mar 2026 09:00:58 +0000
Files and hashes: 1: Pbiird2wAoUIVJlqlLcrh_Snsw8.crl (hash: MGT62qXSO2I2zraIJ4Sll7K+cYuX5xvIJB7s2jQHyDo=)
2: d1oY-rePzrEhSHN4TgD8ubZR5-k.roa (hash: jS9ynsZdE/EEvcdn5+RIkD8jADjtptlW575sCzvdXBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:7f:e2:db:51:54:81:c1:e5:e0:49:93:d0:99:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Validity
Not Before: Mar 2 09:00:58 2026 GMT
Not After : Mar 3 09:00:58 2026 GMT
Subject: CN=656b390c6554572e725bf58d9320d5b0434419b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:f1:18:dd:5c:2c:63:fa:2f:49:57:f1:27:
30:c5:00:ae:db:3f:3b:08:d2:7e:db:81:84:b8:41:
9a:b5:03:f2:f5:a1:7e:b1:e0:f3:64:db:a8:c0:f1:
29:42:5f:ab:f1:12:b1:01:33:70:26:ee:6b:f8:02:
b1:2c:70:c4:ce:a1:cd:c8:b6:17:79:79:50:e5:0c:
1a:b1:39:55:14:0a:59:e7:3d:5a:61:b1:a0:ea:8f:
e5:bc:05:2e:17:65:2e:7d:4e:d8:85:6d:a3:f0:a9:
30:35:f0:f2:72:59:51:00:8e:9c:59:99:c9:1f:eb:
d7:bb:7b:67:e5:6f:58:b6:29:9d:48:66:3a:4d:26:
2b:f6:21:4b:97:02:8e:50:31:71:23:0d:41:4e:67:
73:f9:1e:e9:50:aa:3d:92:3c:68:50:a2:2e:3d:dc:
c7:6f:1a:55:e5:fb:f7:0d:fa:dc:41:84:d4:8a:9d:
5a:ae:f5:41:a4:3f:df:19:c3:f1:22:9d:92:ed:f1:
69:f5:03:fa:fe:c9:4e:c7:6e:fe:de:be:9c:e4:25:
9e:1c:80:14:e8:d6:84:26:90:e6:40:ae:02:5f:8c:
b2:f2:72:49:fa:7f:fc:0d:f1:29:00:bb:ba:50:97:
39:ba:d9:0f:37:86:f0:b6:16:f9:91:a4:39:79:71:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6B:39:0C:65:54:57:2E:72:5B:F5:8D:93:20:D5:B0:43:44:19:B6
X509v3 Authority Key Identifier:
keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:eb:49:fe:bb:56:d7:67:2a:1f:38:c3:61:c7:98:27:e6:7e:
df:45:da:3c:6b:b3:e0:7c:b5:f5:9e:08:3b:85:d2:87:9c:0c:
6e:d3:b7:f4:0e:8c:cc:4a:1b:b2:53:95:c2:21:5f:52:03:aa:
ec:e0:ee:00:c0:d9:53:5d:69:9c:db:d4:d8:36:20:a8:7d:52:
86:9b:a9:8c:8b:73:35:37:02:dc:12:39:15:64:a0:bf:ac:b4:
9b:70:05:54:a9:13:11:b3:b2:f3:69:64:2b:31:95:b4:a1:2d:
58:c2:ae:e3:4d:65:70:78:68:30:1e:f2:90:3e:bf:2d:ac:c9:
ed:9f:ee:4f:60:43:17:96:fd:80:ef:46:66:92:53:f3:0f:7f:
5b:e2:45:ed:f5:ef:4c:89:4e:02:5c:87:9d:8b:c3:ca:09:47:
eb:c2:b8:af:ad:94:76:e7:da:a8:81:3c:6f:27:23:ee:cc:62:
67:2c:9c:b4:05:d5:d2:92:98:62:d6:d0:53:73:3e:01:1d:23:
1b:a7:51:f1:75:61:fc:5d:93:a1:49:96:a9:89:15:c4:4f:ba:
a5:ac:21:1d:59:28:73:ac:9b:9a:1a:d1:b2:67:e5:68:5e:be:
ca:b8:26:76:d2:96:7b:b4:5e:2c:a8:cd:cc:88:d3:c7:c7:8c:
c0:29:3f:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx3/i21FUgcHl4EmT0JntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjhhMmFkZGRiMDAyODUwODU0OTk2YTk0YjcyYjg3ZjRh
N2IzMGYwHhcNMjYwMzAyMDkwMDU4WhcNMjYwMzAzMDkwMDU4WjAzMTEwLwYDVQQD
Eyg2NTZiMzkwYzY1NTQ1NzJlNzI1YmY1OGQ5MzIwZDViMDQzNDQxOWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFPxGN1cLGP6L0lX8ScwxQCu2z87
CNJ+24GEuEGatQPy9aF+seDzZNuowPEpQl+r8RKxATNwJu5r+AKxLHDEzqHNyLYX
eXlQ5QwasTlVFApZ5z1aYbGg6o/lvAUuF2UufU7YhW2j8KkwNfDycllRAI6cWZnJ
H+vXu3tn5W9YtimdSGY6TSYr9iFLlwKOUDFxIw1BTmdz+R7pUKo9kjxoUKIuPdzH
bxpV5fv3DfrcQYTUip1arvVBpD/fGcPxIp2S7fFp9QP6/slOx27+3r6c5CWeHIAU
6NaEJpDmQK4CX4yy8nJJ+n/8DfEpALu6UJc5utkPN4bwthb5kaQ5eXGLAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVrOQxlVFcuclv1jZMg1bBDRBm2MB8GA1UdIwQY
MBaAFD24oq3dsAKFCFSZapS3K4f0p7MPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQt
YTBhNzJhNzMzYzAyLzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQtYTBhNzJhNzMzYzAy
LzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArOtJ/rtW
12cqHzjDYceYJ+Z+30XaPGuz4Hy19Z4IO4XSh5wMbtO39A6MzEobslOVwiFfUgOq
7ODuAMDZU11pnNvU2DYgqH1ShpupjItzNTcC3BI5FWSgv6y0m3AFVKkTEbOy82lk
KzGVtKEtWMKu401lcHhoMB7ykD6/LazJ7Z/uT2BDF5b9gO9GZpJT8w9/W+JF7fXv
TIlOAlyHnYvDyglH68K4r62UdufaqIE8bycj7sxiZyyctAXV0pKYYtbQU3M+AR0j
G6dR8XVh/F2ToUmWqYkVxE+6pawhHVkoc6ybmhrRsmflaF6+yrgmdtKWe7ReLKjN
zIjTx8eMwCk/Dw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:13 2026 by rpki-client