Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier: R7q33T3WqYQ9f5f3+ZxZURSDDSgdZWg74WrXetvW4qk=
Subject key identifier: 6D:CC:5A:19:47:95:B3:57:D4:53:74:C0:2E:2C:C9:81:54:19:B1:DF
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial: 019D985006E5248B727E21769816369CC711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number: 142A
Signing time: Thu 16 Apr 2026 22:01:14 +0000
Manifest this update: Thu 16 Apr 2026 22:01:14 +0000
Manifest next update: Fri 17 Apr 2026 22:01:14 +0000
Files and hashes: 1: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: t/D8crjUznrRFeMQYl+qH7T5himITAs085Q7HtPjZug=)
2: TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa (hash: 4NWLdATC5TzLcy4vgySsRMRG+JcNTxLmpZ+bS7QNQno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:06:e5:24:8b:72:7e:21:76:98:16:36:9c:c7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Validity
Not Before: Apr 16 22:01:14 2026 GMT
Not After : Apr 17 22:01:14 2026 GMT
Subject: CN=6dcc5a194795b357d45374c02e2cc9815419b1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:38:8f:6c:2c:47:8b:47:d5:af:10:84:b0:
1e:62:3a:db:82:bf:4c:53:22:0f:3f:e5:ef:31:a7:
4f:c3:5f:77:a2:24:6e:1e:e0:a4:0b:b1:1f:0f:78:
38:e3:c4:2e:a6:ec:98:6b:6b:b2:8e:c4:44:fe:a1:
87:14:9d:a9:61:fa:1d:ad:2b:88:ca:ed:88:8d:5a:
13:95:bd:8f:3f:cc:36:02:3f:00:8f:95:0c:d1:3d:
43:42:97:a8:d5:4d:42:83:46:f7:c4:9c:f3:76:af:
ae:4f:d1:e0:59:a5:12:ad:f9:d8:fd:23:10:b2:63:
bb:53:39:57:09:ee:4c:fc:88:cd:9b:bb:78:71:48:
33:a4:28:92:f1:3f:70:35:68:15:61:fb:88:f1:15:
b0:e5:db:35:6f:e3:66:3f:12:e6:52:12:ac:81:59:
d9:81:a4:be:97:a1:23:86:e5:16:64:d7:b8:b6:50:
d0:db:a7:80:0a:60:86:61:85:cc:4c:4a:23:37:fd:
a3:90:04:d1:06:48:e6:8c:ca:13:aa:0e:5e:bf:a3:
7a:86:e5:cb:7f:cc:7e:1d:40:e0:1a:7f:99:e9:3d:
c1:95:1f:a5:19:6b:12:14:5b:01:97:8f:59:88:14:
4d:a3:e7:46:3e:2a:d8:b1:b9:ca:a1:63:66:0f:7e:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CC:5A:19:47:95:B3:57:D4:53:74:C0:2E:2C:C9:81:54:19:B1:DF
X509v3 Authority Key Identifier:
keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:85:27:9b:77:70:92:d8:f2:0b:e6:9d:14:d5:ef:4e:d5:07:
d9:0d:a0:4e:cd:a4:9f:5a:6b:37:3c:13:1c:37:1b:54:2c:af:
10:6e:ec:17:45:5d:4d:78:61:74:b8:2d:c4:df:dc:a9:67:ec:
ea:57:2f:48:fc:ff:6a:85:c8:00:bc:c8:a2:60:7d:19:e1:61:
59:c4:d3:4e:c0:c3:57:db:5c:36:cb:0c:bd:c2:5c:90:6d:02:
dd:98:1d:5e:02:1e:61:7c:33:e9:7a:2b:04:ed:8d:fc:de:7a:
12:39:e2:c9:ea:c7:54:fb:31:d8:1a:45:86:e3:46:b5:a9:b0:
d1:a5:ab:ad:0f:e4:f3:8c:b5:d0:8a:c3:c1:c3:c6:f2:bb:64:
54:98:ed:45:7c:c9:c8:9a:7c:f5:51:4c:e2:2c:d6:7b:6b:7a:
74:b0:46:4b:6e:c9:5c:b8:5e:6c:8d:af:c8:44:bd:7d:16:d5:
2a:b8:25:cd:bb:71:f2:ac:8a:69:43:34:28:5c:0d:33:e0:73:
a3:0b:a3:0d:bc:d0:a5:ce:84:31:6e:9d:71:51:44:83:3a:b2:
ac:43:12:05:81:07:d8:7f:ed:9e:be:28:f9:e1:8b:db:1f:12:
9b:72:f7:3d:f0:5b:a9:58:b7:f3:b4:a0:65:ac:76:d5:44:6e:
14:f0:d1:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUAblJItyfiF2mBY2nMcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYzIzZThhOGVjOTM5NmIxYjU0Y2ZmYjI3MWM1NTc2NmQ5
NDkxOTkwHhcNMjYwNDE2MjIwMTE0WhcNMjYwNDE3MjIwMTE0WjAzMTEwLwYDVQQD
Eyg2ZGNjNWExOTQ3OTViMzU3ZDQ1Mzc0YzAyZTJjYzk4MTU0MTliMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnac4j2wsR4tH1a8QhLAeYjrbgr9M
UyIPP+XvMadPw193oiRuHuCkC7EfD3g448QupuyYa2uyjsRE/qGHFJ2pYfodrSuI
yu2IjVoTlb2PP8w2Aj8Aj5UM0T1DQpeo1U1Cg0b3xJzzdq+uT9HgWaUSrfnY/SMQ
smO7UzlXCe5M/IjNm7t4cUgzpCiS8T9wNWgVYfuI8RWw5ds1b+NmPxLmUhKsgVnZ
gaS+l6EjhuUWZNe4tlDQ26eACmCGYYXMTEojN/2jkATRBkjmjMoTqg5ev6N6huXL
f8x+HUDgGn+Z6T3BlR+lGWsSFFsBl49ZiBRNo+dGPirYsbnKoWNmD35yEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3MWhlHlbNX1FN0wC4syYFUGbHfMB8GA1UdIwQY
MBaAFD3CPoqOyTlrG1TP+yccVXZtlJGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUt
YzBkZDQ3NzFjMmFhLzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUtYzBkZDQ3NzFjMmFh
LzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoUnm3dw
ktjyC+adFNXvTtUH2Q2gTs2kn1prNzwTHDcbVCyvEG7sF0VdTXhhdLgtxN/cqWfs
6lcvSPz/aoXIALzIomB9GeFhWcTTTsDDV9tcNssMvcJckG0C3ZgdXgIeYXwz6Xor
BO2N/N56EjniyerHVPsx2BpFhuNGtamw0aWrrQ/k84y10IrDwcPG8rtkVJjtRXzJ
yJp89VFM4izWe2t6dLBGS27JXLhebI2vyES9fRbVKrglzbtx8qyKaUM0KFwNM+Bz
owujDbzQpc6EMW6dcVFEgzqyrEMSBYEH2H/tnr4o+eGL2x8Sm3L3PfBbqVi387Sg
Zax21URuFPDRmA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:14 2026 by rpki-client