Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier: ernJ8ua3yLxVzr6DWaMhEmDEiw8rrCK11QwSixvy6OU=
Subject key identifier: FD:6F:E4:BA:B1:24:A8:29:8C:7D:BD:BE:45:FD:30:24:BB:3E:85:96
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 019CAEA313FE26466D996A34588D1DAC9C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number: 0A00
Signing time: Mon 02 Mar 2026 13:00:48 +0000
Manifest this update: Mon 02 Mar 2026 13:00:48 +0000
Manifest next update: Tue 03 Mar 2026 13:00:48 +0000
Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: UF3eOBgbDR8Z443MlxWLpHeM6wNEC/w1vcJrQOATZEM=)
2: o2oMp4w_9TGCM9aisNXx6hIf0dE.roa (hash: 5zj6ry4dUTAYdyPOXRmxJv5IwbCW/zphAyYpf0E3ouc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:13:fe:26:46:6d:99:6a:34:58:8d:1d:ac:9c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Mar 2 13:00:48 2026 GMT
Not After : Mar 3 13:00:48 2026 GMT
Subject: CN=fd6fe4bab124a8298c7dbdbe45fd3024bb3e8596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:55:fd:f2:40:63:a8:a0:71:b1:bf:63:97:
92:af:02:09:5f:96:a4:26:aa:f1:2a:28:b5:95:67:
09:f9:85:d3:35:e7:d0:2c:2b:55:7a:b7:dc:28:3c:
8a:ca:da:da:eb:48:0c:bc:95:8e:3b:1f:cf:b5:0c:
5a:2b:92:56:52:8f:53:65:42:e8:70:a9:b2:b7:e0:
db:0d:b8:2e:d9:c0:be:66:d4:9a:1c:f0:e5:71:1b:
37:93:e0:08:7f:94:da:4e:d7:30:f0:79:63:7d:42:
7b:92:19:71:bd:a8:5d:f6:31:2e:a6:e5:e3:4d:90:
33:0a:c5:46:a0:dd:8b:f1:82:f9:c8:59:3d:d1:de:
66:9a:64:86:b5:16:52:6f:fa:e9:b7:76:57:bf:61:
55:bd:cf:57:82:de:86:85:ad:d1:d4:e9:a8:fa:f0:
5e:6e:c3:76:ed:e0:5e:92:f7:af:54:dc:63:09:5f:
ac:09:11:81:71:e3:f0:d2:5a:b9:fa:97:cc:0e:d2:
80:0a:ac:de:15:0e:9d:96:fa:3d:4e:8d:f0:24:8c:
1b:92:f7:f5:9b:f6:b7:59:00:ef:6a:20:a8:65:60:
3b:4e:f8:57:60:c2:b4:5b:b4:96:5b:7a:1b:f5:10:
3b:b5:00:49:70:4f:16:22:cd:71:34:a4:a4:c8:da:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6F:E4:BA:B1:24:A8:29:8C:7D:BD:BE:45:FD:30:24:BB:3E:85:96
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6c:2c:bd:e1:b4:4b:5d:dd:40:70:3a:0c:6e:6a:42:b9:59:
da:54:f1:af:df:d1:1a:5e:ff:9b:ef:5a:26:c6:b5:60:0b:28:
58:16:58:26:5f:58:9d:ed:26:1d:f6:30:ab:76:33:2f:e0:7b:
65:64:05:69:66:9d:3a:37:4a:4d:db:47:b5:25:d1:fb:6c:d3:
c6:e1:e1:01:f2:8d:cc:16:83:5b:59:99:8a:8e:b7:5b:3b:e8:
f7:2c:c8:a1:62:f1:00:0e:b9:ba:bc:19:7e:27:91:8b:33:d9:
bb:2e:61:c4:1b:34:70:cd:69:e9:63:c6:b6:03:0f:a5:c4:b0:
8b:6f:b7:9b:36:bd:0e:06:9a:26:c9:71:eb:af:68:89:a5:3a:
e4:fe:32:31:13:98:e8:0b:64:2d:83:8f:a9:2a:4d:e0:0a:7b:
5c:c9:fb:6f:7a:2d:e2:a5:7a:06:5a:bb:30:53:98:fa:f6:15:
51:95:ed:36:f3:b3:f9:d2:f3:e4:99:cc:fe:d3:7c:37:26:1b:
24:5c:8e:f3:6a:2a:dc:18:56:b9:6b:88:7e:b0:49:55:a0:4c:
97:37:b7:fb:4b:42:34:58:6f:91:be:c7:60:fc:a0:4d:85:f8:
a8:be:40:37:b5:e3:5a:4e:61:57:d2:55:ce:c8:bd:9f:b1:41:
b8:a4:b3:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuoxP+JkZtmWo0WI0drJxMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNDMyNzdiN2NhNzlkMGU5ZTA3ZmM0YTRiMzE4MDQxZGY0
MTVjYjMwHhcNMjYwMzAyMTMwMDQ4WhcNMjYwMzAzMTMwMDQ4WjAzMTEwLwYDVQQD
EyhmZDZmZTRiYWIxMjRhODI5OGM3ZGJkYmU0NWZkMzAyNGJiM2U4NTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEtV/fJAY6igcbG/Y5eSrwIJX5ak
JqrxKii1lWcJ+YXTNefQLCtVerfcKDyKytra60gMvJWOOx/PtQxaK5JWUo9TZULo
cKmyt+DbDbgu2cC+ZtSaHPDlcRs3k+AIf5TaTtcw8HljfUJ7khlxvahd9jEupuXj
TZAzCsVGoN2L8YL5yFk90d5mmmSGtRZSb/rpt3ZXv2FVvc9Xgt6Gha3R1Omo+vBe
bsN27eBekvevVNxjCV+sCRGBcePw0lq5+pfMDtKACqzeFQ6dlvo9To3wJIwbkvf1
m/a3WQDvaiCoZWA7TvhXYMK0W7SWW3ob9RA7tQBJcE8WIs1xNKSkyNoEyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1v5LqxJKgpjH29vkX9MCS7PoWWMB8GA1UdIwQY
MBaAFD5DJ3t8p50Ongf8SksxgEHfQVyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUt
M2NmMmE0NjIyZmJjLzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUtM2NmMmE0NjIyZmJj
LzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmwsveG0
S13dQHA6DG5qQrlZ2lTxr9/RGl7/m+9aJsa1YAsoWBZYJl9Yne0mHfYwq3YzL+B7
ZWQFaWadOjdKTdtHtSXR+2zTxuHhAfKNzBaDW1mZio63Wzvo9yzIoWLxAA65urwZ
fieRizPZuy5hxBs0cM1p6WPGtgMPpcSwi2+3mza9DgaaJslx669oiaU65P4yMROY
6AtkLYOPqSpN4Ap7XMn7b3ot4qV6Blq7MFOY+vYVUZXtNvOz+dLz5JnM/tN8NyYb
JFyO82oq3BhWuWuIfrBJVaBMlze3+0tCNFhvkb7HYPygTYX4qL5AN7XjWk5hV9JV
zsi9n7FBuKSzGw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:51 2026 by rpki-client