Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json)
Hash identifier: ewtGThDXFlvMnbQbzjMwowBv225WAmUchdBfIySW9RE=
Subject key identifier: 72:5C:FD:23:11:DA:1C:34:44:D3:AD:CD:D3:22:C3:8C:C4:2F:F8:BE
Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Certificate serial: 019CAAC68CEE6F0BDDEEBE1C247D86EFAC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
Manifest number: 0C31
Signing time: Sun 01 Mar 2026 19:01:04 +0000
Manifest this update: Sun 01 Mar 2026 19:01:04 +0000
Manifest next update: Mon 02 Mar 2026 19:01:04 +0000
Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: ppNON19uJyhRbC9yKHuNc2e3r2A5xWH1wMqocdTsD/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:8c:ee:6f:0b:dd:ee:be:1c:24:7d:86:ef:ac:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Validity
Not Before: Mar 1 19:01:04 2026 GMT
Not After : Mar 2 19:01:04 2026 GMT
Subject: CN=725cfd2311da1c3444d3adcdd322c38cc42ff8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:4f:b4:32:d7:4d:65:94:2d:3c:68:66:4a:
be:fd:6b:07:14:4b:53:12:32:77:1a:22:24:35:b6:
40:a1:18:58:33:30:d0:67:e6:b4:c5:4a:c3:51:02:
a9:5d:c2:7c:bf:85:a0:bc:49:0f:8c:aa:df:86:fb:
00:65:ca:35:e0:3f:02:d5:06:6b:3f:3f:9a:8c:7b:
4a:82:e9:33:ec:d9:6e:9c:c5:49:c4:22:22:a3:c5:
85:2e:17:6e:07:8b:70:b1:c0:52:cb:43:e3:47:e8:
e5:ea:22:c2:3d:c1:db:af:94:9d:b6:b4:1e:15:44:
76:86:ab:66:8a:5e:02:26:6d:84:44:76:37:e6:32:
51:0f:5a:0b:2f:85:80:85:fe:a4:64:97:5f:3a:08:
f9:c4:ec:17:b1:cd:01:ca:be:ca:63:23:bf:fa:31:
a1:22:23:43:58:f3:05:dd:1a:b6:92:d3:03:c2:ac:
4f:91:0f:aa:ee:64:72:ab:13:f6:d7:17:7c:18:3e:
de:e2:94:81:72:fe:08:48:df:d3:21:88:56:ed:a7:
ff:7b:b1:1a:02:0f:09:04:b8:23:2a:cc:9b:ca:2b:
90:a1:e0:6b:73:ce:98:44:4d:95:12:a9:94:80:31:
ab:3d:1a:26:a0:fd:6b:07:00:8e:3a:e1:91:5f:06:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5C:FD:23:11:DA:1C:34:44:D3:AD:CD:D3:22:C3:8C:C4:2F:F8:BE
X509v3 Authority Key Identifier:
keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:13:61:77:cd:40:80:28:38:8e:88:a7:7e:55:03:69:c4:ca:
ee:7a:9b:8e:aa:0e:f3:f5:99:4f:e4:b8:0c:7f:b0:81:ac:04:
0e:7c:e8:ba:e4:36:54:52:96:4f:38:ea:29:c3:94:33:fd:a9:
84:32:a4:9e:b6:fd:5e:f2:3a:c9:77:c6:d4:c8:d0:62:1f:9d:
ab:50:dc:fa:b4:aa:c4:d1:35:68:5f:9d:59:95:68:0f:6c:3d:
b7:46:c9:bc:3a:01:18:fa:b9:ef:05:cf:88:5a:0b:29:e7:6a:
09:ac:43:83:a2:df:c8:a3:51:c1:54:b3:ae:c0:9d:9a:e6:e0:
fe:8a:77:70:0a:a8:f7:7e:95:9c:eb:af:8b:16:70:e5:b1:1d:
3c:52:1f:fd:54:8e:e3:cd:23:da:19:00:ea:b4:01:8f:bb:19:
34:37:9d:ee:e4:d6:e9:4f:96:a1:ab:73:70:a7:ef:93:50:c1:
d8:ef:52:54:0f:f5:23:26:d5:19:2e:6a:b8:89:9c:d7:b7:cf:
6b:a8:f0:7c:8c:e6:27:ba:ca:6a:e5:6a:c5:4c:56:bf:83:6a:
ec:ed:9a:a1:98:9c:d8:2b:af:20:25:e3:e8:40:ed:eb:a6:a4:
e1:0c:59:ea:b0:4a:ce:75:23:60:96:13:81:6a:55:50:76:68:
63:f8:05:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxozubwvd7r4cJH2G76wBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOGZmMWM5NjY2ZmUxOTVmMjRhYTFmZThjMzQ1ZDc5YzQ4
ZTdiYzAwHhcNMjYwMzAxMTkwMTA0WhcNMjYwMzAyMTkwMTA0WjAzMTEwLwYDVQQD
Eyg3MjVjZmQyMzExZGExYzM0NDRkM2FkY2RkMzIyYzM4Y2M0MmZmOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0apPtDLXTWWULTxoZkq+/WsHFEtT
EjJ3GiIkNbZAoRhYMzDQZ+a0xUrDUQKpXcJ8v4WgvEkPjKrfhvsAZco14D8C1QZr
Pz+ajHtKgukz7NlunMVJxCIio8WFLhduB4twscBSy0PjR+jl6iLCPcHbr5SdtrQe
FUR2hqtmil4CJm2ERHY35jJRD1oLL4WAhf6kZJdfOgj5xOwXsc0Byr7KYyO/+jGh
IiNDWPMF3Rq2ktMDwqxPkQ+q7mRyqxP21xd8GD7e4pSBcv4ISN/TIYhW7af/e7Ea
Ag8JBLgjKsybyiuQoeBrc86YRE2VEqmUgDGrPRomoP1rBwCOOuGRXwbktQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJc/SMR2hw0RNOtzdMiw4zEL/i+MB8GA1UdIwQY
MBaAFD+P8clmb+GV8kqh/ow0XXnEjnvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDRfeHlXWnY0Wlh5U3FILWpEUmRlY1NPZThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81NzJlYmYtMThiYi00YzM4LWE5OTQt
ZmJkMzYxY2I4MTkzLzEvUDRfeHlXWnY0Wlh5U3FILWpEUmRlY1NPZThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy81NzJlYmYtMThiYi00YzM4LWE5OTQtZmJkMzYxY2I4MTkz
LzEvUDRfeHlXWnY0Wlh5U3FILWpEUmRlY1NPZThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhNhd81A
gCg4joinflUDacTK7nqbjqoO8/WZT+S4DH+wgawEDnzouuQ2VFKWTzjqKcOUM/2p
hDKknrb9XvI6yXfG1MjQYh+dq1Dc+rSqxNE1aF+dWZVoD2w9t0bJvDoBGPq57wXP
iFoLKedqCaxDg6LfyKNRwVSzrsCdmubg/op3cAqo936VnOuvixZw5bEdPFIf/VSO
480j2hkA6rQBj7sZNDed7uTW6U+WoatzcKfvk1DB2O9SVA/1IybVGS5quImc17fP
a6jwfIzmJ7rKauVqxUxWv4Nq7O2aoZic2CuvICXj6EDt66ak4QxZ6rBKznUjYJYT
gWpVUHZoY/gFEg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:55 2026 by rpki-client