Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: Uf/eg6s9117V+gU33bf3JggMeuEhRpRGsTgV0yuhY4k=
Subject key identifier: 84:F8:62:D3:D4:91:1E:3D:CB:40:97:CE:98:83:E2:8F:D2:41:27:87
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 019D2772E1520CDC748E6B6283005B247498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 0B09
Signing time: Thu 26 Mar 2026 00:02:13 +0000
Manifest this update: Thu 26 Mar 2026 00:02:13 +0000
Manifest next update: Fri 27 Mar 2026 00:02:13 +0000
Files and hashes: 1: 6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa (hash: wpsN0tsYTVD9eZ1wIkFPmbb5yPxiazJ0MhFoB9FJQW4=)
2: DR9MoQCYtXaLoml4Dm1_5qJwPs4.roa (hash: nXlN3VKxLNyqdBBXWDPV2SzM6R5K4D1KJpMD50qdg/A=)
3: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: g7EAzfiKzaeo7lU0zX9LjKhAaJeidOS87xddrNafjDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e1:52:0c:dc:74:8e:6b:62:83:00:5b:24:74:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Mar 26 00:02:13 2026 GMT
Not After : Mar 27 00:02:13 2026 GMT
Subject: CN=84f862d3d4911e3dcb4097ce9883e28fd2412787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:85:62:32:a4:8b:84:ac:ca:73:96:33:c8:
48:11:33:29:0e:91:ba:c9:7c:75:47:7f:fd:54:21:
ab:e6:f2:1c:a9:14:b4:50:ba:22:6b:74:e4:5b:dc:
ea:f4:bc:24:87:fd:5a:5b:c0:23:d7:dc:90:59:e1:
f7:8d:2f:20:6a:25:34:79:c9:46:69:f1:2a:b8:ce:
c6:f1:72:39:5a:1e:08:43:c5:cb:e2:2b:1d:b1:40:
a5:54:3a:0c:8f:5b:8d:a0:a4:0a:d8:70:1d:2e:32:
45:e8:01:51:85:10:c9:23:fe:3d:f4:45:4c:5e:9d:
4b:5c:0e:43:a9:33:a0:71:bf:77:8c:7a:af:7f:e3:
a5:8a:84:fe:ba:0b:11:b3:9f:c6:ed:3d:12:4e:02:
0e:d0:fb:01:cd:61:fa:70:cc:ca:c8:1d:70:be:1e:
b4:1b:23:51:ea:1e:d1:71:ea:3f:f4:d7:28:a5:10:
d8:c4:9c:f7:f6:82:c7:fc:d3:d3:18:81:da:5c:9b:
0c:19:11:31:55:96:4a:32:95:d6:e6:7d:80:20:69:
93:12:09:fa:9a:6e:4a:9d:50:20:e6:3d:3e:86:62:
62:e1:fb:b0:fc:2e:4e:7d:ca:d6:96:90:76:70:1d:
7f:ef:da:b0:97:f5:da:94:51:a0:4b:fa:54:a4:23:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F8:62:D3:D4:91:1E:3D:CB:40:97:CE:98:83:E2:8F:D2:41:27:87
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3d:c7:71:b2:6d:3f:d2:c8:4d:2d:ef:09:ad:a9:90:96:92:
9f:21:f7:c0:63:5e:01:ad:f0:03:5d:b1:d0:28:a8:19:62:ca:
21:fe:0e:6a:6f:72:28:d9:0a:8c:96:d6:30:32:b1:91:49:a0:
75:34:3e:95:6c:5c:2e:b2:c3:c9:4d:cf:a1:77:45:81:4d:49:
4b:43:45:04:bd:62:fb:38:6d:18:bf:c4:03:8a:ba:fa:15:2a:
c3:76:d9:32:eb:7f:93:2e:1d:ec:b6:4d:cb:d3:63:15:5d:d8:
94:71:23:4f:af:a8:d6:11:b3:2a:eb:85:32:cc:8f:2e:f2:ae:
f7:1e:64:09:57:03:de:e1:03:ff:2e:65:ed:23:b1:94:9c:6b:
38:27:55:57:10:7f:94:51:72:f7:05:7c:fe:4e:78:f1:22:fd:
5b:64:7b:5d:cb:16:eb:cd:20:9f:60:37:71:95:e8:7c:cb:40:
f4:16:c2:dd:9a:85:e1:8e:94:ee:d6:6f:c5:a6:02:52:2e:fd:
6a:ff:03:56:8e:5d:06:9d:44:f7:88:7a:53:e3:df:03:e6:50:
f0:e5:e4:fd:91:95:d0:23:15:9d:41:06:8c:ae:8b:31:6a:14:
f8:22:19:05:ef:ca:a0:f1:25:00:5c:32:b4:07:57:a9:12:8d:
f9:f7:35:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncuFSDNx0jmtigwBbJHSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZGUyNDcwYzg1NjM5NDk0ODdhM2U3ODc0M2M1NDRjOTll
YzhhNjQwHhcNMjYwMzI2MDAwMjEzWhcNMjYwMzI3MDAwMjEzWjAzMTEwLwYDVQQD
Eyg4NGY4NjJkM2Q0OTExZTNkY2I0MDk3Y2U5ODgzZTI4ZmQyNDEyNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNCFYjKki4SsynOWM8hIETMpDpG6
yXx1R3/9VCGr5vIcqRS0ULoia3TkW9zq9Lwkh/1aW8Aj19yQWeH3jS8gaiU0eclG
afEquM7G8XI5Wh4IQ8XL4isdsUClVDoMj1uNoKQK2HAdLjJF6AFRhRDJI/499EVM
Xp1LXA5DqTOgcb93jHqvf+OlioT+ugsRs5/G7T0STgIO0PsBzWH6cMzKyB1wvh60
GyNR6h7Rceo/9NcopRDYxJz39oLH/NPTGIHaXJsMGRExVZZKMpXW5n2AIGmTEgn6
mm5KnVAg5j0+hmJi4fuw/C5OfcrWlpB2cB1/79qwl/XalFGgS/pUpCOjawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIT4YtPUkR49y0CXzpiD4o/SQSeHMB8GA1UdIwQY
MBaAFDzeJHDIVjlJSHo+eHQ8VEyZ7IpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUt
NDQxNzFiMmY1OTllLzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUtNDQxNzFiMmY1OTll
LzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgj3HcbJt
P9LITS3vCa2pkJaSnyH3wGNeAa3wA12x0CioGWLKIf4Oam9yKNkKjJbWMDKxkUmg
dTQ+lWxcLrLDyU3PoXdFgU1JS0NFBL1i+zhtGL/EA4q6+hUqw3bZMut/ky4d7LZN
y9NjFV3YlHEjT6+o1hGzKuuFMsyPLvKu9x5kCVcD3uED/y5l7SOxlJxrOCdVVxB/
lFFy9wV8/k548SL9W2R7XcsW680gn2A3cZXofMtA9BbC3ZqF4Y6U7tZvxaYCUi79
av8DVo5dBp1E94h6U+PfA+ZQ8OXk/ZGV0CMVnUEGjK6LMWoU+CIZBe/KoPElAFwy
tAdXqRKN+fc13g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:55 2026 by rpki-client