Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
File: pX1M_mD4owpND_lLlOut_IjJrBE.mft (raw, json)
Hash identifier: bH/QU7vkBGVQbA3diTHvpSvwMtn1Hhk6YikyDu1/OTk=
Subject key identifier: 2C:E9:3A:98:74:28:A1:F1:07:53:58:E9:34:7B:34:7D:92:21:73:0A
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 019D269643F1A2D54206BCB75C1495DEB882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
Manifest number: 0F57
Signing time: Wed 25 Mar 2026 20:01:15 +0000
Manifest this update: Wed 25 Mar 2026 20:01:15 +0000
Manifest next update: Thu 26 Mar 2026 20:01:15 +0000
Files and hashes: 1: 1y-vwZVrMYSQ5PEHPoi2QvehQzI.roa (hash: cYggAnbxJcT3dfayKBFM1pT3DCCSeOQKuJH//n4lQos=)
2: pX1M_mD4owpND_lLlOut_IjJrBE.crl (hash: b5afED8i4LAYkP+7IJDU96VS4wmeVEBGylYOjF3i/Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:43:f1:a2:d5:42:06:bc:b7:5c:14:95:de:b8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: Mar 25 20:01:15 2026 GMT
Not After : Mar 26 20:01:15 2026 GMT
Subject: CN=2ce93a987428a1f1075358e9347b347d9221730a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:6d:35:39:96:55:e6:19:29:67:aa:3b:6f:
58:f2:51:10:ac:1d:fe:63:e9:4f:a7:a1:b2:d5:f1:
df:2a:7d:57:a6:8a:c3:3b:8a:42:83:fa:c9:14:66:
cf:a8:7e:e1:d5:49:56:18:61:9b:f2:92:14:91:79:
df:9e:56:18:c0:eb:ce:0a:c9:01:8a:3f:ea:b9:53:
c6:5e:d2:66:38:b4:22:30:39:65:68:c3:50:81:68:
f5:1d:79:52:53:6a:88:50:a7:6f:f7:38:0c:e4:00:
1e:be:f8:ae:c0:ff:17:ec:93:34:53:e9:15:21:01:
a5:5e:9a:d3:c5:ca:73:45:90:c4:f9:83:99:c7:b0:
02:5d:9b:06:32:11:aa:c9:a6:a1:57:61:ef:1f:80:
a1:80:7a:52:d1:4e:47:56:19:ec:5a:bf:e6:ac:be:
38:71:51:77:ce:4b:41:d7:fa:49:a6:40:99:88:09:
cd:f8:9a:1a:e4:ee:5f:a1:e5:9c:db:68:18:c3:4c:
a9:1c:e5:f5:68:c9:4e:5d:5e:95:e8:e6:43:0c:5b:
9c:ed:61:71:07:49:e0:62:ba:c6:06:07:28:bb:f4:
92:44:f4:ce:12:08:4e:43:fa:84:c9:ae:91:92:78:
4e:f3:b8:28:31:dd:5e:da:0c:ab:5a:a0:6e:6a:40:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E9:3A:98:74:28:A1:F1:07:53:58:E9:34:7B:34:7D:92:21:73:0A
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:dc:c1:e8:da:e8:40:ce:3e:fb:b6:49:67:aa:88:c1:d0:62:
f6:81:98:94:e2:b5:3b:76:6c:28:ba:df:91:d8:3a:47:3e:a0:
e5:9e:e4:d6:c9:5a:c3:2d:0c:72:80:d6:e7:bc:9e:51:1b:29:
15:bf:68:4c:71:74:9d:8b:71:e7:bf:65:37:8a:46:fa:4d:87:
b5:9e:15:0b:2d:3a:b4:dd:59:f8:14:ca:5e:ec:e9:10:80:f6:
96:d3:3d:0c:25:a3:12:09:29:b8:14:2c:46:f9:41:eb:b4:83:
ea:9c:92:38:ef:aa:e5:d0:db:82:85:0a:56:97:22:64:e1:92:
c0:d4:53:e5:80:71:e8:c7:9b:e1:5f:e5:d7:36:21:8f:92:de:
27:dd:d9:7f:9c:da:fa:84:87:f9:73:c0:3a:ac:b4:f3:a3:10:
58:89:1d:6e:ba:53:6f:57:6f:7c:3a:c5:e3:a1:48:6a:bf:10:
69:91:d6:f4:a7:54:45:8e:17:09:b5:76:20:af:06:99:24:b7:
06:04:22:df:91:04:4f:e4:dd:eb:e1:95:91:a3:fb:e1:95:3f:
30:8a:5f:04:ec:d9:1a:3d:80:17:de:ea:bd:b5:b3:eb:3f:f5:
78:32:b0:1c:c3:14:b4:d2:41:5f:56:31:01:c2:11:9b:ed:5c:
93:b6:2b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlkPxotVCBry3XBSV3riCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2Q0Y2ZlNjBmOGEzMGE0ZDBmZjk0Yjk0ZWJhZGZjODhj
OWFjMTEwHhcNMjYwMzI1MjAwMTE1WhcNMjYwMzI2MjAwMTE1WjAzMTEwLwYDVQQD
EygyY2U5M2E5ODc0MjhhMWYxMDc1MzU4ZTkzNDdiMzQ3ZDkyMjE3MzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxttNTmWVeYZKWeqO29Y8lEQrB3+
Y+lPp6Gy1fHfKn1XporDO4pCg/rJFGbPqH7h1UlWGGGb8pIUkXnfnlYYwOvOCskB
ij/quVPGXtJmOLQiMDllaMNQgWj1HXlSU2qIUKdv9zgM5AAevviuwP8X7JM0U+kV
IQGlXprTxcpzRZDE+YOZx7ACXZsGMhGqyaahV2HvH4ChgHpS0U5HVhnsWr/mrL44
cVF3zktB1/pJpkCZiAnN+Joa5O5foeWc22gYw0ypHOX1aMlOXV6V6OZDDFuc7WFx
B0ngYrrGBgcou/SSRPTOEghOQ/qEya6RknhO87goMd1e2gyrWqBuakCE8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzpOph0KKHxB1NY6TR7NH2SIXMKMB8GA1UdIwQY
MBaAFKV9TP5g+KMKTQ/5S5TrrfyIyawRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80OGMwNzItMjJkZS00NGQ3LWJlZDgt
ZTgwZjMyMDczZjNkLzEvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80OGMwNzItMjJkZS00NGQ3LWJlZDgtZTgwZjMyMDczZjNk
LzEvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdzB6Nro
QM4++7ZJZ6qIwdBi9oGYlOK1O3ZsKLrfkdg6Rz6g5Z7k1slawy0McoDW57yeURsp
Fb9oTHF0nYtx579lN4pG+k2HtZ4VCy06tN1Z+BTKXuzpEID2ltM9DCWjEgkpuBQs
RvlB67SD6pySOO+q5dDbgoUKVpciZOGSwNRT5YBx6Meb4V/l1zYhj5LeJ93Zf5za
+oSH+XPAOqy086MQWIkdbrpTb1dvfDrF46FIar8QaZHW9KdURY4XCbV2IK8GmSS3
BgQi35EET+Td6+GVkaP74ZU/MIpfBOzZGj2AF97qvbWz6z/1eDKwHMMUtNJBX1Yx
AcIRm+1ck7YrMA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:39 2026 by rpki-client