Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
File: PGu5kW2QqkR3ctA_Ce37or3PN5I.mft (raw, json)
Hash identifier: +f4+Z0VQ6YmUSUiTFMk4CEyUk7nmRXnbRQiO9WkWkHw=
Subject key identifier: A2:BE:2F:0D:44:13:E7:CC:65:BE:A4:63:DE:B2:CA:69:01:1D:1C:5F
Authority key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
Certificate issuer: /CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Certificate serial: 019D99CFC96A31D002EC411FFEDC32140887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
Manifest number: 09A6
Signing time: Fri 17 Apr 2026 05:00:24 +0000
Manifest this update: Fri 17 Apr 2026 05:00:24 +0000
Manifest next update: Sat 18 Apr 2026 05:00:24 +0000
Files and hashes: 1: PGu5kW2QqkR3ctA_Ce37or3PN5I.crl (hash: 2iZRZTCP3Ym1XJi0m1rf0//IoKnCyHVJD2M0hoIVcOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:c9:6a:31:d0:02:ec:41:1f:fe:dc:32:14:08:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Validity
Not Before: Apr 17 05:00:24 2026 GMT
Not After : Apr 18 05:00:24 2026 GMT
Subject: CN=a2be2f0d4413e7cc65bea463deb2ca69011d1c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:89:51:34:b3:92:e7:29:d6:c0:09:1a:bd:
c3:f6:17:20:1d:5f:a4:90:36:20:9a:cc:27:58:d2:
26:97:89:d8:1f:73:6d:ca:a1:11:04:1a:0d:82:58:
89:d3:58:23:f5:df:ae:5f:80:aa:cf:38:c7:3c:a2:
6c:b3:12:ca:c1:6b:84:42:be:2d:45:97:23:66:93:
85:0e:ed:17:b6:17:74:f9:6b:42:74:21:ec:2c:f0:
e0:b6:db:24:0a:99:d2:0a:cb:c5:f3:8a:5b:5a:02:
d2:8d:38:77:9f:ae:71:64:79:ed:ff:fe:f2:84:0b:
70:f8:67:57:d2:5a:19:4f:16:67:f3:77:f5:d1:25:
4f:35:c8:e2:07:4d:c2:ac:d4:e9:e6:90:d6:aa:a9:
38:4f:95:eb:16:6e:55:87:39:f5:fe:72:1b:75:58:
d2:2d:c2:6f:ed:ad:7e:4d:52:a3:40:64:11:51:a4:
e7:e0:da:a5:d1:56:70:e7:e0:70:ed:f3:76:6e:bf:
57:1e:65:6e:20:e7:db:30:ff:6b:a7:d0:0e:e2:c1:
cc:04:11:8d:a0:8d:13:c6:3e:ee:d8:0e:18:f7:c5:
8e:99:53:31:2c:0d:26:14:37:9a:e5:c9:ce:f2:96:
eb:f0:1e:01:6c:da:98:fa:4b:7c:70:19:ac:cd:e5:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BE:2F:0D:44:13:E7:CC:65:BE:A4:63:DE:B2:CA:69:01:1D:1C:5F
X509v3 Authority Key Identifier:
keyid:3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:06:e7:01:93:b8:fe:dc:63:03:ca:d4:f4:99:ba:ff:a0:d6:
40:cb:c7:7c:d8:3d:69:15:ea:93:84:84:65:f8:bc:6f:37:d4:
99:76:2f:f8:14:b8:fd:20:37:cf:56:0f:19:0c:ad:ea:0d:4f:
fe:8c:e4:04:de:fd:6e:d4:31:68:3a:f4:a1:4c:79:af:fb:45:
b5:53:d6:b5:89:66:b8:36:d6:de:94:d0:66:83:27:8f:bc:4f:
93:71:55:3f:32:f2:cc:01:79:68:a2:12:2d:e3:ed:b4:41:88:
a0:88:16:40:a5:f5:be:d9:fa:c6:af:92:02:96:a9:e0:da:d6:
cb:09:5d:46:1e:c1:a1:ae:de:67:4c:52:d4:cf:97:85:f7:09:
f9:01:2f:f4:69:74:c4:04:4d:cb:04:a5:46:47:b8:14:06:50:
b2:b2:b0:60:4b:5e:1f:d1:02:16:0f:be:cf:dc:04:f5:5f:6a:
15:81:68:63:8d:13:fc:e4:19:be:92:d0:21:02:24:b3:01:e7:
f1:e1:17:81:af:8a:66:ae:a5:88:7e:a3:fa:77:7e:77:77:8f:
ab:c7:bf:5b:87:84:a6:27:a8:0d:93:1c:98:b6:bc:c3:77:3e:
51:1c:cd:40:0d:d1:b3:c9:f6:0b:b6:68:0d:50:23:b8:6b:af:
55:87:16:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz8lqMdAC7EEf/twyFAiHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNmJiOTkxNmQ5MGFhNDQ3NzcyZDAzZjA5ZWRmYmEyYmRj
ZjM3OTIwHhcNMjYwNDE3MDUwMDI0WhcNMjYwNDE4MDUwMDI0WjAzMTEwLwYDVQQD
EyhhMmJlMmYwZDQ0MTNlN2NjNjViZWE0NjNkZWIyY2E2OTAxMWQxYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEiJUTSzkucp1sAJGr3D9hcgHV+k
kDYgmswnWNIml4nYH3NtyqERBBoNgliJ01gj9d+uX4CqzzjHPKJssxLKwWuEQr4t
RZcjZpOFDu0Xthd0+WtCdCHsLPDgttskCpnSCsvF84pbWgLSjTh3n65xZHnt//7y
hAtw+GdX0loZTxZn83f10SVPNcjiB03CrNTp5pDWqqk4T5XrFm5Vhzn1/nIbdVjS
LcJv7a1+TVKjQGQRUaTn4Nql0VZw5+Bw7fN2br9XHmVuIOfbMP9rp9AO4sHMBBGN
oI0Txj7u2A4Y98WOmVMxLA0mFDea5cnO8pbr8B4BbNqY+kt8cBmszeW6ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKK+Lw1EE+fMZb6kY96yymkBHRxfMB8GA1UdIwQY
MBaAFDxruZFtkKpEd3LQPwnt+6K9zzeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEd1NWtXMlFxa1IzY3RBX0NlMzdvcjNQTjVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zY2Y5ZWUtODY3Zi00MjE0LWEzOTQt
Y2JlOTIwN2NmNTRlLzEvUEd1NWtXMlFxa1IzY3RBX0NlMzdvcjNQTjVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8zY2Y5ZWUtODY3Zi00MjE0LWEzOTQtY2JlOTIwN2NmNTRl
LzEvUEd1NWtXMlFxa1IzY3RBX0NlMzdvcjNQTjVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAbnAZO4
/txjA8rU9Jm6/6DWQMvHfNg9aRXqk4SEZfi8bzfUmXYv+BS4/SA3z1YPGQyt6g1P
/ozkBN79btQxaDr0oUx5r/tFtVPWtYlmuDbW3pTQZoMnj7xPk3FVPzLyzAF5aKIS
LePttEGIoIgWQKX1vtn6xq+SApap4NrWywldRh7Boa7eZ0xS1M+XhfcJ+QEv9Gl0
xARNywSlRke4FAZQsrKwYEteH9ECFg++z9wE9V9qFYFoY40T/OQZvpLQIQIkswHn
8eEXga+KZq6liH6j+nd+d3ePq8e/W4eEpieoDZMcmLa8w3c+URzNQA3Rs8n2C7Zo
DVAjuGuvVYcWxQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:06:02 2026 by rpki-client