Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
File: pPTBZVXW8DttbI0KjMvhrx6uxDo.mft (raw, json)
Hash identifier: 2BQnKWPKtNPua/cyPTPxPdogsmyfTjmdKhjgUVjr05w=
Subject key identifier: 82:28:F3:06:F4:16:67:D7:E6:3D:C6:53:A3:D3:58:98:A8:8E:F2:A2
Authority key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
Certificate issuer: /CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Certificate serial: 019CB05AED1D17CD99D2CEB2CFF28762EDAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
Manifest number: 022F
Signing time: Mon 02 Mar 2026 21:01:14 +0000
Manifest this update: Mon 02 Mar 2026 21:01:14 +0000
Manifest next update: Tue 03 Mar 2026 21:01:14 +0000
Files and hashes: 1: lha0ZmedDVL5ojeX6XufkbgdzDc.roa (hash: aql9eZoUUBsK6RGXxorryRAzls71w3x+Yu3C3M/JeMA=)
2: pPTBZVXW8DttbI0KjMvhrx6uxDo.crl (hash: JYWzsWQPlvw7VnFz4YrztuVhSW9XC+kTlkwmCd5KaB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5a:ed:1d:17:cd:99:d2:ce:b2:cf:f2:87:62:ed:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Validity
Not Before: Mar 2 21:01:14 2026 GMT
Not After : Mar 3 21:01:14 2026 GMT
Subject: CN=8228f306f41667d7e63dc653a3d35898a88ef2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:a0:42:96:a5:1a:50:9c:b0:78:c9:2c:5a:
be:8c:0d:05:ae:08:fa:6d:bb:7f:f7:41:12:01:67:
64:f1:dd:d5:9e:be:a2:03:49:8d:65:1a:52:e0:58:
6e:0f:c1:4d:ba:48:90:e4:cc:12:1c:67:1c:22:79:
eb:36:19:d5:57:72:db:b9:3a:07:d0:22:22:0b:e1:
d8:7f:4e:d9:d1:6c:7c:bc:f5:e1:79:a2:80:da:de:
7a:49:78:99:b5:f1:d3:04:f1:6d:0c:4e:a9:9f:42:
51:1a:ad:d9:cb:24:c2:3c:0b:e5:f8:08:16:bf:83:
9b:66:ae:fd:fa:0e:bd:82:c8:22:a3:69:d4:59:61:
56:1e:e9:37:8a:52:d5:23:10:41:4b:69:21:c1:22:
ca:43:45:7f:4d:31:7d:43:1f:9c:32:fa:9c:97:a1:
95:f0:44:d0:3f:77:d5:24:f3:18:95:71:16:c2:74:
4e:7e:0a:88:9e:50:3e:67:64:6d:a6:44:80:8e:e9:
29:0f:96:e8:96:50:1d:23:f4:08:45:75:51:74:47:
b9:be:c1:10:ae:db:26:19:d1:fe:9d:4e:df:e8:35:
1e:6a:19:93:6e:2e:f3:73:92:2a:ee:fc:ae:18:f0:
e9:26:ff:4f:a8:92:c2:ed:5f:14:42:d0:7d:a3:b2:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:28:F3:06:F4:16:67:D7:E6:3D:C6:53:A3:D3:58:98:A8:8E:F2:A2
X509v3 Authority Key Identifier:
keyid:A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ab:ca:8c:49:68:5a:d0:e4:1b:9a:ca:3f:cc:cf:d7:db:5f:
26:99:cb:54:47:19:e1:36:4b:de:f9:42:93:05:dd:1d:17:44:
5e:22:bf:f9:0e:90:f7:74:75:2b:c7:9e:a5:b2:15:64:18:e4:
a5:85:57:72:6c:d7:db:ef:a3:c3:ab:98:71:1e:94:09:3e:ca:
33:46:3e:6c:cc:05:45:a7:c2:61:fb:30:b0:ec:88:a2:45:06:
54:6c:be:89:94:dc:55:0b:3c:f2:82:19:85:9f:45:51:cd:f3:
37:a9:7c:88:44:a2:8d:29:27:2e:29:b1:4e:e9:ba:bd:c3:80:
14:86:69:69:cd:1f:4c:91:3c:12:c2:88:fe:12:34:94:6c:75:
59:37:4e:16:91:5f:39:22:05:3a:9b:02:79:bb:48:40:f5:8a:
6b:16:60:59:7a:fa:7a:06:fc:10:d9:19:fe:d2:c6:95:7c:7c:
75:03:3f:d8:93:75:aa:09:fe:e0:7c:77:69:82:56:2e:b1:b9:
f9:40:d9:eb:71:71:35:e4:9c:30:b9:70:57:16:43:6a:67:9b:
2e:f0:32:67:fd:ac:d5:43:90:33:46:a2:fa:17:56:ca:e0:38:
0b:bb:fc:bf:04:85:a2:a1:f3:0f:0c:49:58:76:3b:76:b1:b1:
71:ed:69:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywWu0dF82Z0s6yz/KHYu2vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjRjMTY1NTVkNmYwM2I2ZDZjOGQwYThjY2JlMWFmMWVh
ZWM0M2EwHhcNMjYwMzAyMjEwMTE0WhcNMjYwMzAzMjEwMTE0WjAzMTEwLwYDVQQD
Eyg4MjI4ZjMwNmY0MTY2N2Q3ZTYzZGM2NTNhM2QzNTg5OGE4OGVmMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG+gQpalGlCcsHjJLFq+jA0Frgj6
bbt/90ESAWdk8d3Vnr6iA0mNZRpS4FhuD8FNukiQ5MwSHGccInnrNhnVV3LbuToH
0CIiC+HYf07Z0Wx8vPXheaKA2t56SXiZtfHTBPFtDE6pn0JRGq3ZyyTCPAvl+AgW
v4ObZq79+g69gsgio2nUWWFWHuk3ilLVIxBBS2khwSLKQ0V/TTF9Qx+cMvqcl6GV
8ETQP3fVJPMYlXEWwnROfgqInlA+Z2RtpkSAjukpD5bollAdI/QIRXVRdEe5vsEQ
rtsmGdH+nU7f6DUeahmTbi7zc5Iq7vyuGPDpJv9PqJLC7V8UQtB9o7LG4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIo8wb0FmfX5j3GU6PTWJiojvKiMB8GA1UdIwQY
MBaAFKT0wWVV1vA7bWyNCozL4a8ersQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBUQlpWWFc4RHR0YkkwS2pNdmhyeDZ1eERvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kOTQyOTQtNzk5OS00MDA5LTlkZDYt
MjU2N2Y0YTliMTM5LzEvcFBUQlpWWFc4RHR0YkkwS2pNdmhyeDZ1eERvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kOTQyOTQtNzk5OS00MDA5LTlkZDYtMjU2N2Y0YTliMTM5
LzEvcFBUQlpWWFc4RHR0YkkwS2pNdmhyeDZ1eERvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABavKjElo
WtDkG5rKP8zP19tfJpnLVEcZ4TZL3vlCkwXdHRdEXiK/+Q6Q93R1K8eepbIVZBjk
pYVXcmzX2++jw6uYcR6UCT7KM0Y+bMwFRafCYfswsOyIokUGVGy+iZTcVQs88oIZ
hZ9FUc3zN6l8iESijSknLimxTum6vcOAFIZpac0fTJE8EsKI/hI0lGx1WTdOFpFf
OSIFOpsCebtIQPWKaxZgWXr6egb8ENkZ/tLGlXx8dQM/2JN1qgn+4Hx3aYJWLrG5
+UDZ63FxNeScMLlwVxZDamebLvAyZ/2s1UOQM0ai+hdWyuA4C7v8vwSFoqHzDwxJ
WHY7drGxce1pqg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:10:25 2026 by rpki-client