Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
File: PxyTi7IGo4ltBkwIUvqYhf8s69k.mft (raw, json)
Hash identifier: 7I+uVcCTm6pGBocoRjPTUiGrk13ammM6fpydaGeau60=
Subject key identifier: 26:94:CF:70:AD:95:DA:F5:49:AB:F9:67:5C:0E:98:A7:0C:A5:7F:B5
Authority key identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
Certificate issuer: /CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Certificate serial: 019D2772B5D35B4B5568B20546D4CCF60D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
Manifest number: 05B6
Signing time: Thu 26 Mar 2026 00:02:02 +0000
Manifest this update: Thu 26 Mar 2026 00:02:02 +0000
Manifest next update: Fri 27 Mar 2026 00:02:02 +0000
Files and hashes: 1: PxyTi7IGo4ltBkwIUvqYhf8s69k.crl (hash: m3qpoRDQMlFH+60UFZcXIwP75AJdauLVaapfeCW4hN0=)
2: gJih9xv-CWYQaALlecQOJ_TACmo.roa (hash: 9e9Q4Zs2imMTV1ntB9s+yN3H0/1A7f9/M0HJ8dsTuhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b5:d3:5b:4b:55:68:b2:05:46:d4:cc:f6:0d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Validity
Not Before: Mar 26 00:02:02 2026 GMT
Not After : Mar 27 00:02:02 2026 GMT
Subject: CN=2694cf70ad95daf549abf9675c0e98a70ca57fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:ae:41:03:35:f7:b0:6c:e6:1c:81:17:e0:
60:c3:f2:6d:9a:2f:b0:89:13:49:f6:c8:b6:92:9c:
1e:be:27:69:9c:ea:f8:13:7f:99:20:cd:b3:f2:b9:
03:7c:4b:de:f3:30:ac:ad:45:ed:04:8c:d0:81:94:
10:cb:fc:53:10:13:e9:4e:b4:e0:bc:45:a4:3b:f2:
19:2d:2e:19:9c:40:e7:54:8a:fb:c8:d6:e7:5b:cf:
cb:49:0c:54:2b:99:b5:ce:c0:09:9b:c9:4a:92:0b:
56:24:c5:a4:63:2c:bb:b7:16:86:ba:04:c3:3f:b5:
3e:e3:00:9f:b9:5e:7a:4d:13:06:93:5c:ec:db:a4:
2b:3b:8a:76:a0:8c:ec:b1:26:88:2d:d8:50:d9:8f:
f5:65:ea:a1:a1:71:57:53:0a:bb:a8:60:a2:d8:87:
d1:9b:7e:bc:80:75:18:17:14:a2:27:6f:a9:4e:a8:
28:f3:d4:71:d5:64:a1:a0:59:03:12:24:18:d6:42:
b5:6a:d9:21:6d:aa:b7:9b:ff:aa:86:2e:05:fa:c7:
2c:be:6c:b3:0f:0d:94:37:36:7d:dd:2b:2f:68:86:
f0:5f:8a:bd:73:9e:ab:32:05:bd:08:5e:62:42:66:
08:c3:33:9f:d5:cb:d2:02:c5:82:0c:ff:b9:21:1c:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:94:CF:70:AD:95:DA:F5:49:AB:F9:67:5C:0E:98:A7:0C:A5:7F:B5
X509v3 Authority Key Identifier:
keyid:3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:98:03:13:22:dd:ca:b8:41:c9:df:c4:d6:db:d7:17:8d:83:
5a:00:c5:97:ad:f6:6a:62:b4:c3:77:83:09:fd:cc:d2:e2:ad:
d9:68:0a:ec:e0:8d:19:ae:bb:a0:cf:a3:b3:9c:85:8f:aa:54:
d1:6d:66:95:21:ae:d3:40:56:2f:a4:c8:cc:5d:d1:47:0e:b1:
7f:1e:d7:2b:d5:9f:d5:ed:e9:d4:3a:00:35:55:3d:bb:8b:a7:
d2:65:54:d0:62:f3:4a:6d:cf:57:84:94:da:45:28:e5:62:24:
5a:5c:f8:a6:00:7c:dc:7b:6c:22:99:20:f2:68:94:9b:85:48:
cd:b8:d4:69:68:fb:b1:13:1f:37:5c:c7:a6:f8:44:2f:2f:43:
26:e1:f2:79:fd:9f:b6:46:74:8b:7f:6f:91:5c:9c:2b:01:37:
3a:16:82:03:e0:d0:8c:62:cc:ac:f5:c1:9d:91:25:e4:85:88:
b0:a3:0a:68:7b:18:74:0e:99:f9:1b:db:00:8c:60:34:36:20:
9c:03:60:52:81:ab:be:ad:69:e0:2b:91:33:fb:20:25:db:d0:
68:f4:a4:0b:be:ba:bb:e7:71:75:f1:a3:80:f4:35:dd:b8:7f:
d5:e6:dc:6e:b1:b4:8e:30:8a:45:4c:78:6a:a1:cf:b4:9f:0d:
c2:bf:6b:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncrXTW0tVaLIFRtTM9g1kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMWM5MzhiYjIwNmEzODk2ZDA2NGMwODUyZmE5ODg1ZmYy
Y2ViZDkwHhcNMjYwMzI2MDAwMjAyWhcNMjYwMzI3MDAwMjAyWjAzMTEwLwYDVQQD
EygyNjk0Y2Y3MGFkOTVkYWY1NDlhYmY5Njc1YzBlOThhNzBjYTU3ZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujauQQM197Bs5hyBF+Bgw/Jtmi+w
iRNJ9si2kpwevidpnOr4E3+ZIM2z8rkDfEve8zCsrUXtBIzQgZQQy/xTEBPpTrTg
vEWkO/IZLS4ZnEDnVIr7yNbnW8/LSQxUK5m1zsAJm8lKkgtWJMWkYyy7txaGugTD
P7U+4wCfuV56TRMGk1zs26QrO4p2oIzssSaILdhQ2Y/1ZeqhoXFXUwq7qGCi2IfR
m368gHUYFxSiJ2+pTqgo89Rx1WShoFkDEiQY1kK1atkhbaq3m/+qhi4F+scsvmyz
Dw2UNzZ93SsvaIbwX4q9c56rMgW9CF5iQmYIwzOf1cvSAsWCDP+5IRxuVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaUz3Ctldr1Sav5Z1wOmKcMpX+1MB8GA1UdIwQY
MBaAFD8ck4uyBqOJbQZMCFL6mIX/LOvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zYjI0OWMtYjQwZS00ZmI5LThmZjQt
ZTA1MjYwMzNhNDg0LzEvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zYjI0OWMtYjQwZS00ZmI5LThmZjQtZTA1MjYwMzNhNDg0
LzEvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpgDEyLd
yrhByd/E1tvXF42DWgDFl632amK0w3eDCf3M0uKt2WgK7OCNGa67oM+js5yFj6pU
0W1mlSGu00BWL6TIzF3RRw6xfx7XK9Wf1e3p1DoANVU9u4un0mVU0GLzSm3PV4SU
2kUo5WIkWlz4pgB83HtsIpkg8miUm4VIzbjUaWj7sRMfN1zHpvhELy9DJuHyef2f
tkZ0i39vkVycKwE3OhaCA+DQjGLMrPXBnZEl5IWIsKMKaHsYdA6Z+RvbAIxgNDYg
nANgUoGrvq1p4CuRM/sgJdvQaPSkC766u+dxdfGjgPQ13bh/1ebcbrG0jjCKRUx4
aqHPtJ8Nwr9r9w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:27 2026 by rpki-client