Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
File: pMK1k9mMCS_TCmAepdJEqr08sU0.mft (raw, json)
Hash identifier: mtwL6Z2pmZIgR6DL6XRPXD3AhGhjLMtHE9TgGiQ1OXc=
Subject key identifier: 01:E9:35:DB:CD:0A:6A:9B:B3:C0:3D:69:AC:08:EB:4D:1F:6D:E8:1E
Authority key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
Certificate issuer: /CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Certificate serial: 019D28BB7738E16A6232C43FC4F20E278B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
Manifest number: 1282
Signing time: Thu 26 Mar 2026 06:01:07 +0000
Manifest this update: Thu 26 Mar 2026 06:01:07 +0000
Manifest next update: Fri 27 Mar 2026 06:01:07 +0000
Files and hashes: 1: TqluBkd6UQL59Ze0Zq97K0BmVTU.roa (hash: JviIbVzjJLsxCvwAUOWWxAWG+oSpM8WgOJkmQ0ir8uM=)
2: pMK1k9mMCS_TCmAepdJEqr08sU0.crl (hash: 9nmYwow0lFt5EenzjZDEf4fEwJ2yAKm4776McaGrNG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:77:38:e1:6a:62:32:c4:3f:c4:f2:0e:27:8b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Validity
Not Before: Mar 26 06:01:07 2026 GMT
Not After : Mar 27 06:01:07 2026 GMT
Subject: CN=01e935dbcd0a6a9bb3c03d69ac08eb4d1f6de81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:77:0a:1f:64:95:6c:61:87:3e:fb:db:9b:
85:f8:c9:28:a4:24:9f:cd:35:8e:c5:78:ea:82:fe:
cb:5a:13:9f:3d:18:9a:3a:fc:c9:0c:3b:c7:99:7b:
fe:b5:8f:50:ff:c6:0b:f3:5e:e6:b8:ca:4d:0c:be:
2a:2b:fb:d6:f5:62:57:fe:97:56:8d:a8:80:06:88:
d3:c0:7f:23:af:d9:dd:26:02:94:4e:5e:18:6b:7d:
07:e3:c8:a3:8b:83:7e:d2:bc:1c:43:0c:5a:1f:eb:
a2:07:f9:8e:28:2f:d0:a8:eb:6a:28:ea:5e:3d:56:
cb:7b:c0:df:4a:c3:ca:ce:ed:a4:11:0d:c4:1d:f2:
4e:f1:da:ab:87:f1:d1:42:89:b4:1c:bd:06:dd:69:
0a:75:66:03:b0:4f:f1:fe:90:5a:52:db:d7:84:a2:
1b:7f:b7:58:5f:00:5e:d1:e2:ea:84:37:a6:4a:b2:
73:7d:48:5e:02:ba:0b:18:db:2a:a7:93:e1:6f:35:
88:b1:11:ea:f4:ec:e5:0e:5f:f2:47:0b:0d:00:f6:
0d:b4:df:c8:bf:0c:61:48:60:54:87:3a:47:c5:38:
fe:ca:a9:01:ae:fc:e3:3c:3f:bf:a4:47:32:5d:1c:
76:5b:4c:07:b8:8b:32:35:84:41:70:1d:3e:b4:c7:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E9:35:DB:CD:0A:6A:9B:B3:C0:3D:69:AC:08:EB:4D:1F:6D:E8:1E
X509v3 Authority Key Identifier:
keyid:A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:52:99:5b:65:08:12:77:af:9f:95:7c:9b:d7:78:0e:34:7a:
7b:f9:8b:d3:59:98:32:36:60:77:03:1e:fc:37:9f:ea:81:96:
3e:96:cf:0f:e1:94:76:6d:a4:14:19:b8:d8:8b:dd:83:6f:09:
ab:c9:33:27:de:04:1c:ac:3f:f5:f0:b7:1c:8b:a8:7f:43:aa:
8d:bd:f8:37:76:c9:eb:c4:4b:d4:f1:ce:8e:7f:b5:be:8c:9c:
b4:dd:a6:b3:42:ec:f1:dd:b3:4d:62:fb:21:82:6e:61:3a:02:
53:0d:da:a3:3a:5f:55:21:5d:54:ad:10:6b:b7:65:60:22:29:
fb:f2:c2:ad:11:52:2f:48:18:7e:5a:f1:37:c8:68:48:53:2b:
c5:6f:a8:23:07:9c:13:83:f3:01:20:30:f7:c0:e0:e0:40:c1:
6c:2d:65:68:09:45:f6:55:e8:c3:72:be:4b:64:07:83:de:5e:
4f:70:e7:1f:7f:e6:d0:2b:a9:f6:68:2b:8f:c1:55:de:af:37:
fc:22:0e:e6:07:fb:36:7a:32:53:6c:5d:fb:79:a3:36:24:19:
5a:3a:0b:5c:cd:b9:8a:7c:5b:58:44:67:7e:cc:5b:9d:d5:20:
1b:aa:3e:f4:fc:c2:12:2d:f6:95:f1:79:02:d4:03:94:7c:ae:
ea:e5:c8:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou3c44WpiMsQ/xPIOJ4uNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YzJiNTkzZDk4YzA5MmZkMzBhNjAxZWE1ZDI0NGFhYmQz
Y2IxNGQwHhcNMjYwMzI2MDYwMTA3WhcNMjYwMzI3MDYwMTA3WjAzMTEwLwYDVQQD
EygwMWU5MzVkYmNkMGE2YTliYjNjMDNkNjlhYzA4ZWI0ZDFmNmRlODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyZ3Ch9klWxhhz7725uF+MkopCSf
zTWOxXjqgv7LWhOfPRiaOvzJDDvHmXv+tY9Q/8YL817muMpNDL4qK/vW9WJX/pdW
jaiABojTwH8jr9ndJgKUTl4Ya30H48iji4N+0rwcQwxaH+uiB/mOKC/QqOtqKOpe
PVbLe8DfSsPKzu2kEQ3EHfJO8dqrh/HRQom0HL0G3WkKdWYDsE/x/pBaUtvXhKIb
f7dYXwBe0eLqhDemSrJzfUheAroLGNsqp5PhbzWIsRHq9OzlDl/yRwsNAPYNtN/I
vwxhSGBUhzpHxTj+yqkBrvzjPD+/pEcyXRx2W0wHuIsyNYRBcB0+tMcUywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHpNdvNCmqbs8A9aawI600fbegeMB8GA1UdIwQY
MBaAFKTCtZPZjAkv0wpgHqXSRKq9PLFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE1LMWs5bU1DU19UQ21BZXBkSkVxcjA4c1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NDIyYjAtZGM3OS00YzcxLWJmZDgt
ZmNmOTk0NzBiOTg1LzEvcE1LMWs5bU1DU19UQ21BZXBkSkVxcjA4c1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85NDIyYjAtZGM3OS00YzcxLWJmZDgtZmNmOTk0NzBiOTg1
LzEvcE1LMWs5bU1DU19UQ21BZXBkSkVxcjA4c1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlKZW2UI
Enevn5V8m9d4DjR6e/mL01mYMjZgdwMe/Def6oGWPpbPD+GUdm2kFBm42Ivdg28J
q8kzJ94EHKw/9fC3HIuof0Oqjb34N3bJ68RL1PHOjn+1voyctN2ms0Ls8d2zTWL7
IYJuYToCUw3aozpfVSFdVK0Qa7dlYCIp+/LCrRFSL0gYflrxN8hoSFMrxW+oIwec
E4PzASAw98Dg4EDBbC1laAlF9lXow3K+S2QHg95eT3DnH3/m0Cup9mgrj8FV3q83
/CIO5gf7NnoyU2xd+3mjNiQZWjoLXM25inxbWERnfsxbndUgG6o+9PzCEi32lfF5
AtQDlHyu6uXIGw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:04 2026 by rpki-client