Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier: y3RVdStotGBreX/Tr+J+KwtsRir8DqumhCP7ZssORDM=
Subject key identifier: FB:3D:34:CE:B7:11:F4:87:24:EB:E6:F8:8D:AE:97:A7:51:CE:76:AC
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 019D99CFF354F9A384B0AD929F0C2D949095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:00:35 +0000
Manifest this update: Fri 17 Apr 2026 05:00:35 +0000
Manifest next update: Sat 18 Apr 2026 05:00:35 +0000
Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: /xE3+VsVMZKviJ89EamUxd+bfD8r6b6pvYtVkzWdsuo=)
2: wXINTHM3KqkNQiOuyaFEznGq6_I.roa (hash: CBrAjvZnvJ+pznTkA8zKPHX79jqdqYinxbkP2/HU+Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f3:54:f9:a3:84:b0:ad:92:9f:0c:2d:94:90:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: Apr 17 05:00:35 2026 GMT
Not After : Apr 18 05:00:35 2026 GMT
Subject: CN=fb3d34ceb711f48724ebe6f88dae97a751ce76ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:4e:de:7d:4b:6f:c3:e3:8d:27:84:e2:6d:
c3:5c:fb:e6:3f:56:4a:a3:64:17:64:bc:7d:98:50:
ac:ab:fd:4f:78:8e:03:77:b6:12:bb:5d:65:2b:db:
ca:9c:dd:5a:39:93:a5:e5:15:2d:5e:e0:1a:34:de:
77:b4:13:67:d4:5e:c8:78:b1:f3:62:67:7b:84:05:
55:59:02:cf:ca:af:0b:a7:3b:e3:f6:9e:7f:d1:ad:
95:ae:0f:ca:00:c1:ec:23:af:3e:d3:96:8b:5e:92:
e6:44:50:e1:33:07:d7:65:14:f4:f5:ad:f2:0a:74:
6a:c4:0b:d6:5f:87:0d:1a:8e:08:b1:06:a7:2a:b4:
a1:34:0c:88:a6:83:2c:2f:61:e7:2f:16:29:b3:de:
24:96:29:26:d0:1e:ef:cf:cb:b2:b4:a4:02:36:76:
60:aa:2c:06:7d:7d:f4:73:9f:2a:bb:7d:d7:ab:83:
93:11:7a:15:f5:e0:3e:c2:9f:72:fc:a5:26:c7:91:
f7:95:08:5c:e1:48:28:ec:fc:17:8c:37:dd:d6:21:
57:f5:3f:ec:98:7f:ea:82:19:b9:ee:ac:d2:97:fe:
22:19:3a:4c:03:a5:ac:cd:ac:a5:38:b7:5f:cb:45:
96:60:a2:06:0b:c3:6b:42:e6:11:07:54:a0:ae:ff:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3D:34:CE:B7:11:F4:87:24:EB:E6:F8:8D:AE:97:A7:51:CE:76:AC
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6f:76:e6:8d:e4:8a:4f:45:4c:67:f6:92:f3:67:8a:f5:71:
8e:d0:d0:b0:81:a2:3f:d9:54:8b:a2:ad:40:ec:fb:9f:24:dd:
c0:65:52:5c:bd:70:40:5c:4f:99:f9:5a:92:5d:d1:09:fa:dd:
d3:1b:b1:56:51:4d:12:51:de:d8:76:62:8d:4a:8e:17:82:df:
4d:9a:d6:f0:c4:ed:78:98:f2:e9:68:7d:95:c8:e2:bf:10:70:
1b:13:d5:fc:aa:bf:a4:c5:66:e2:eb:b5:87:d0:7c:01:67:b8:
4a:98:b1:33:da:5a:2b:36:71:f4:90:6a:43:5e:ef:a1:a8:ed:
67:4e:63:46:cc:ed:9c:8e:d7:aa:06:d5:b3:6e:70:db:d8:3d:
d1:ce:fe:7e:f7:6d:bc:a9:fb:c9:b3:81:a3:5f:3f:d4:b3:71:
68:d5:2e:4b:c1:fd:a4:1e:0a:bf:bc:4c:69:33:18:dd:5c:45:
be:8e:dd:d6:8b:79:2c:46:65:c4:1a:a6:7c:9b:82:11:aa:9b:
b7:f1:df:d0:34:be:aa:58:95:1b:03:90:ef:99:9f:97:b4:36:
eb:1b:95:75:07:bc:db:54:d9:8a:83:fb:58:78:1e:eb:fb:2b:
f9:85:74:23:f4:1b:2c:b9:c5:51:ab:8d:6b:c3:56:b6:ec:c7:
53:7e:18:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz/NU+aOEsK2SnwwtlJCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZmYxZjJiMTE3NWYwNjA1ZDAyNWU1MTAxNzM2OWMxY2E4
YjFhNDYwHhcNMjYwNDE3MDUwMDM1WhcNMjYwNDE4MDUwMDM1WjAzMTEwLwYDVQQD
EyhmYjNkMzRjZWI3MTFmNDg3MjRlYmU2Zjg4ZGFlOTdhNzUxY2U3NmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokBO3n1Lb8PjjSeE4m3DXPvmP1ZK
o2QXZLx9mFCsq/1PeI4Dd7YSu11lK9vKnN1aOZOl5RUtXuAaNN53tBNn1F7IeLHz
Ymd7hAVVWQLPyq8Lpzvj9p5/0a2Vrg/KAMHsI68+05aLXpLmRFDhMwfXZRT09a3y
CnRqxAvWX4cNGo4IsQanKrShNAyIpoMsL2HnLxYps94klikm0B7vz8uytKQCNnZg
qiwGfX30c58qu33Xq4OTEXoV9eA+wp9y/KUmx5H3lQhc4Ugo7PwXjDfd1iFX9T/s
mH/qghm57qzSl/4iGTpMA6WszaylOLdfy0WWYKIGC8NrQuYRB1Sgrv+stQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPs9NM63EfSHJOvm+I2ul6dRznasMB8GA1UdIwQY
MBaAFDz/HysRdfBgXQJeUQFzacHKixpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFA4Zkt4RjE4R0JkQWw1UkFYTnB3Y3FMR2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYzc5NDktYTFjYS00N2Y0LWIzOTMt
MmJmMzRjNTI2MmU3LzEvUFA4Zkt4RjE4R0JkQWw1UkFYTnB3Y3FMR2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hYzc5NDktYTFjYS00N2Y0LWIzOTMtMmJmMzRjNTI2MmU3
LzEvUFA4Zkt4RjE4R0JkQWw1UkFYTnB3Y3FMR2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWG925o3k
ik9FTGf2kvNnivVxjtDQsIGiP9lUi6KtQOz7nyTdwGVSXL1wQFxPmflakl3RCfrd
0xuxVlFNElHe2HZijUqOF4LfTZrW8MTteJjy6Wh9lcjivxBwGxPV/Kq/pMVm4uu1
h9B8AWe4SpixM9paKzZx9JBqQ17voajtZ05jRsztnI7XqgbVs25w29g90c7+fvdt
vKn7ybOBo18/1LNxaNUuS8H9pB4Kv7xMaTMY3VxFvo7d1ot5LEZlxBqmfJuCEaqb
t/Hf0DS+qliVGwOQ75mfl7Q26xuVdQe821TZioP7WHge6/sr+YV0I/QbLLnFUauN
a8NWtuzHU34YqQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:58 2026 by rpki-client