Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
File: P1KMlfYICrE8sEl4PpJE0z2cSzI.mft (raw, json)
Hash identifier: /NjUyBwzWPMVhZPMuC7FhuL2dnH+Fh2nmyZoMKrJ8gk=
Subject key identifier: A1:78:9D:41:82:3E:3E:0E:F2:E0:E7:48:5C:77:1B:AF:47:6A:89:7D
Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
Certificate issuer: /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Certificate serial: 019D2772A650D994A09C6213BA8797904313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
Manifest number: 1799
Signing time: Thu 26 Mar 2026 00:01:57 +0000
Manifest this update: Thu 26 Mar 2026 00:01:57 +0000
Manifest next update: Fri 27 Mar 2026 00:01:57 +0000
Files and hashes: 1: KDUP0PXVl9D07OvoTzwN-8-72ew.roa (hash: T2WlXoHTDqACvTk8Ydhf12NbDhvdjynMl0xLzY+ru0M=)
2: P1KMlfYICrE8sEl4PpJE0z2cSzI.crl (hash: S7oUlGfNO4rq6U9b0yDvD/WpjqlOCSAvRhwkkNAycwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a6:50:d9:94:a0:9c:62:13:ba:87:97:90:43:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Validity
Not Before: Mar 26 00:01:57 2026 GMT
Not After : Mar 27 00:01:57 2026 GMT
Subject: CN=a1789d41823e3e0ef2e0e7485c771baf476a897d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:77:a7:4c:2c:1c:62:11:3d:06:5e:34:17:
46:83:78:29:e6:92:27:e5:2b:ae:30:34:43:ab:b5:
86:51:dd:26:6b:c2:a0:3b:13:b3:4e:78:11:24:96:
3c:d4:d1:fc:df:89:bc:e6:35:44:b3:1c:47:99:c5:
32:4f:5d:de:e1:10:e3:a9:db:26:64:7c:73:7f:78:
13:ef:f6:65:4e:c6:63:42:f7:f5:69:cc:90:9c:72:
7b:ed:4f:4a:94:73:d9:fd:48:da:fc:da:75:20:a6:
87:2a:2f:c0:a9:5e:23:f3:40:de:2c:e5:85:ed:8d:
28:e0:16:0a:66:c5:13:88:f8:e6:2c:93:92:fb:95:
fd:59:42:08:87:cb:e3:37:ba:8b:c9:3e:85:da:72:
f9:1b:5e:d8:d7:fa:0a:32:3b:c2:72:f5:9f:13:5f:
83:3f:43:07:20:1d:3e:08:52:fd:d8:62:4d:60:bc:
2b:e1:28:cb:a6:5f:aa:0a:8c:cb:0f:b9:78:42:52:
6c:46:bc:55:c9:4d:7c:18:70:bc:4e:4e:80:ad:10:
a7:6b:26:c1:a9:00:e4:8b:30:a3:e8:23:41:73:8f:
cb:65:d5:db:55:b5:6f:04:d7:1a:4d:17:5d:95:db:
1f:70:90:e2:e6:85:7e:d9:c5:e0:cc:43:77:4b:59:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:78:9D:41:82:3E:3E:0E:F2:E0:E7:48:5C:77:1B:AF:47:6A:89:7D
X509v3 Authority Key Identifier:
keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b6:f4:bf:ed:c1:ac:98:a6:91:98:9b:9a:e4:df:81:26:ab:
ad:90:d7:e8:76:8c:e4:f7:6f:ac:9a:e5:d4:6f:e4:22:42:16:
9b:20:04:3e:5b:37:64:ca:49:b2:b4:33:84:e6:4d:0e:4e:2e:
bf:09:42:90:77:48:72:12:77:41:b1:20:7d:57:3e:02:c3:59:
58:f8:0b:cb:d7:ff:67:a5:40:29:16:3c:38:d7:c4:64:6d:34:
6a:d8:77:46:00:be:05:10:fb:c0:94:3f:ab:fb:be:97:d2:34:
51:ec:6e:8f:07:df:66:56:46:32:0d:82:b2:cf:90:b8:01:5c:
70:70:9f:be:7f:27:08:b9:23:6c:63:c6:79:6b:87:9a:7c:b6:
84:06:62:65:97:09:54:55:ef:32:6c:20:08:a8:52:9c:a6:2a:
c1:0f:3c:70:76:60:7f:cf:96:ac:e1:ed:56:af:2e:bd:d0:fd:
63:12:d4:dc:c0:ac:5f:1b:3e:93:23:dc:38:ed:b6:a8:e4:c4:
6a:20:f1:f6:49:53:fc:75:76:83:1a:cc:ed:5a:96:f6:52:7a:
fb:30:3c:93:78:90:df:3d:80:2c:04:fe:08:63:dd:b1:85:9d:
97:fa:a0:e5:50:9b:56:7c:d6:06:73:49:5c:98:7f:fa:00:ad:
d8:d2:17:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncqZQ2ZSgnGITuoeXkEMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNTI4Yzk1ZjYwODBhYjEzY2IwNDk3ODNlOTI0NGQzM2Q5
YzRiMzIwHhcNMjYwMzI2MDAwMTU3WhcNMjYwMzI3MDAwMTU3WjAzMTEwLwYDVQQD
EyhhMTc4OWQ0MTgyM2UzZTBlZjJlMGU3NDg1Yzc3MWJhZjQ3NmE4OTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJh3p0wsHGIRPQZeNBdGg3gp5pIn
5SuuMDRDq7WGUd0ma8KgOxOzTngRJJY81NH834m85jVEsxxHmcUyT13e4RDjqdsm
ZHxzf3gT7/ZlTsZjQvf1acyQnHJ77U9KlHPZ/Uja/Np1IKaHKi/AqV4j80DeLOWF
7Y0o4BYKZsUTiPjmLJOS+5X9WUIIh8vjN7qLyT6F2nL5G17Y1/oKMjvCcvWfE1+D
P0MHIB0+CFL92GJNYLwr4SjLpl+qCozLD7l4QlJsRrxVyU18GHC8Tk6ArRCnaybB
qQDkizCj6CNBc4/LZdXbVbVvBNcaTRddldsfcJDi5oV+2cXgzEN3S1lP2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKF4nUGCPj4O8uDnSFx3G69Haol9MB8GA1UdIwQY
MBaAFD9SjJX2CAqxPLBJeD6SRNM9nEsyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jMmZkZjItMmEwYS00NDNmLWI3ZTAt
YTViZGJiMTQ1YTc4LzEvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9jMmZkZjItMmEwYS00NDNmLWI3ZTAtYTViZGJiMTQ1YTc4
LzEvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7b0v+3B
rJimkZibmuTfgSarrZDX6HaM5PdvrJrl1G/kIkIWmyAEPls3ZMpJsrQzhOZNDk4u
vwlCkHdIchJ3QbEgfVc+AsNZWPgLy9f/Z6VAKRY8ONfEZG00ath3RgC+BRD7wJQ/
q/u+l9I0UexujwffZlZGMg2Css+QuAFccHCfvn8nCLkjbGPGeWuHmny2hAZiZZcJ
VFXvMmwgCKhSnKYqwQ88cHZgf8+WrOHtVq8uvdD9YxLU3MCsXxs+kyPcOO22qOTE
aiDx9klT/HV2gxrM7VqW9lJ6+zA8k3iQ3z2ALAT+CGPdsYWdl/qg5VCbVnzWBnNJ
XJh/+gCt2NIXJg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:36 2026 by rpki-client