Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
File: PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft (raw, json)
Hash identifier: PrboKviF6EDVs0M7++5Xw50x/OQgq3t6TIqrv15HCKg=
Subject key identifier: 3D:3A:E4:BE:53:1C:5E:99:95:93:5E:30:7D:82:F6:CB:6D:43:06:11
Authority key identifier: 3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73
Certificate issuer: /CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773
Certificate serial: 01A13559D10976D0AC17EC9452F8764D695F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
Manifest number: 0D67
Signing time: Tue 13 Oct 2026 13:00:40 +0000
Manifest this update: Tue 13 Oct 2026 13:00:40 +0000
Manifest next update: Wed 14 Oct 2026 13:00:40 +0000
Files and hashes: 1: 0kteYDEknBDxG9W3J3cL9QhFRvc.roa (hash: 1XWojZWd6G7wDLkk3o7HBTuYxtsrR+gEZcfWZE2ZhEU=)
2: PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl (hash: /3yfLpfUN1y15yk7r9E1RAbUD41q5PBAgEo1YEjqHjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:59:d1:09:76:d0:ac:17:ec:94:52:f8:76:4d:69:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773
Validity
Not Before: Oct 13 13:00:40 2026 GMT
Not After : Oct 14 13:00:40 2026 GMT
Subject: CN=3d3ae4be531c5e9995935e307d82f6cb6d430611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:e2:b6:49:63:f2:93:82:9f:34:b7:b9:03:
2f:6c:75:5a:42:d8:32:e7:6b:d9:00:03:d1:51:9b:
41:54:29:7a:bf:1d:1c:a3:7a:2a:f2:fa:ca:c6:24:
0e:3f:e1:cb:1a:df:93:b1:6d:65:7c:cf:12:b5:11:
2b:6a:1b:9b:58:bb:d2:b4:0c:0c:a9:d5:3a:47:20:
08:7b:a5:1e:59:4c:50:52:00:81:c0:ca:d2:c0:73:
b9:83:4a:b9:c7:e1:09:76:7b:2e:d7:7a:4c:ae:2a:
92:78:70:40:07:73:54:ac:20:b2:f8:d6:bc:9f:7f:
14:e9:2e:31:b9:db:e4:5b:57:e4:84:7d:7f:9d:75:
88:a3:5b:c9:75:92:a6:1f:e7:d1:90:ea:97:42:a7:
d7:58:71:5c:58:be:2a:c0:e3:20:c1:56:4d:25:69:
4d:ab:36:49:22:0f:ab:7e:0f:ad:25:30:af:e9:29:
08:aa:3f:e4:cb:a1:05:33:3f:2d:a6:9d:26:6f:b1:
b6:b0:71:68:8a:3a:2c:76:1d:b7:6c:68:33:96:2d:
b7:dc:35:ac:5c:2b:f0:e3:50:77:a9:d8:5c:38:89:
40:d0:9d:0b:dd:d0:bb:2c:b5:29:b6:58:85:46:2c:
9b:47:5c:ec:56:9d:e1:c9:41:4b:b0:b3:a4:07:3d:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3A:E4:BE:53:1C:5E:99:95:93:5E:30:7D:82:F6:CB:6D:43:06:11
X509v3 Authority Key Identifier:
keyid:3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ae:70:4c:45:39:c4:5e:14:fe:d8:96:c4:ca:3b:98:7c:b6:
41:42:a8:5d:79:97:06:ef:f3:78:b9:38:8e:08:2a:c9:51:ff:
a5:64:98:31:4f:c6:ee:96:63:9c:7e:83:10:15:a7:4f:68:2c:
c3:f3:57:bd:a9:95:87:a5:8d:cb:a5:a7:22:bf:2c:57:49:23:
b3:1d:8b:c7:9b:0b:f5:f4:da:1b:31:05:bb:fc:ce:f7:96:fa:
04:db:76:e0:b4:3f:0a:c9:ab:a0:b5:c6:2b:4a:52:a0:4e:d6:
ad:ee:d6:a6:00:8c:3d:64:f0:55:76:18:69:90:a7:24:8c:ae:
30:70:47:b9:a8:70:0d:0f:ce:74:cd:46:57:0e:f8:7f:e8:88:
1f:fb:1e:50:9f:4c:db:51:6f:14:d4:93:f7:f3:9d:b3:02:ec:
68:aa:16:29:d6:f8:ba:fa:02:0a:b5:59:b2:e1:4f:17:ba:e8:
4f:fe:e0:fc:3d:62:fe:ea:4c:1e:78:d0:16:38:aa:6f:d2:b7:
4b:cb:ff:c7:7d:6f:6a:d1:4a:fc:e6:4c:c2:d5:8f:f0:b7:bd:
a8:2c:5e:49:97:41:7a:5d:4d:3c:5d:60:a0:1e:7b:32:38:43:
71:bd:77:e6:0a:06:de:c9:af:75:4a:15:3f:55:ef:8b:f3:db:
85:2e:aa:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1WdEJdtCsF+yUUvh2TWlfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkODk3YmQ4YzZkZjFjYjcxNDEwZmUxOTRiZWQ3MzlhMmY4
YTY3NzMwHhcNMjYxMDEzMTMwMDQwWhcNMjYxMDE0MTMwMDQwWjAzMTEwLwYDVQQD
EygzZDNhZTRiZTUzMWM1ZTk5OTU5MzVlMzA3ZDgyZjZjYjZkNDMwNjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7Titklj8pOCnzS3uQMvbHVaQtgy
52vZAAPRUZtBVCl6vx0co3oq8vrKxiQOP+HLGt+TsW1lfM8StRErahubWLvStAwM
qdU6RyAIe6UeWUxQUgCBwMrSwHO5g0q5x+EJdnsu13pMriqSeHBAB3NUrCCy+Na8
n38U6S4xudvkW1fkhH1/nXWIo1vJdZKmH+fRkOqXQqfXWHFcWL4qwOMgwVZNJWlN
qzZJIg+rfg+tJTCv6SkIqj/ky6EFMz8tpp0mb7G2sHFoijosdh23bGgzli233DWs
XCvw41B3qdhcOIlA0J0L3dC7LLUptliFRiybR1zsVp3hyUFLsLOkBz1kvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD065L5THF6ZlZNeMH2C9sttQwYRMB8GA1UdIwQY
MBaAFD2Je9jG3xy3FBD+GUvtc5ovimdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlsNzJNYmZITGNVRVA0WlMtMXptaS1LWjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NDcxZjgtYzkzOC00MGNjLWIxMzkt
ZjlmOTIxNTBjZDM5LzEvUFlsNzJNYmZITGNVRVA0WlMtMXptaS1LWjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81NDcxZjgtYzkzOC00MGNjLWIxMzktZjlmOTIxNTBjZDM5
LzEvUFlsNzJNYmZITGNVRVA0WlMtMXptaS1LWjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMK5wTEU5
xF4U/tiWxMo7mHy2QUKoXXmXBu/zeLk4jggqyVH/pWSYMU/G7pZjnH6DEBWnT2gs
w/NXvamVh6WNy6WnIr8sV0kjsx2Lx5sL9fTaGzEFu/zO95b6BNt24LQ/CsmroLXG
K0pSoE7Wre7WpgCMPWTwVXYYaZCnJIyuMHBHuahwDQ/OdM1GVw74f+iIH/seUJ9M
21FvFNST9/OdswLsaKoWKdb4uvoCCrVZsuFPF7roT/7g/D1i/upMHnjQFjiqb9K3
S8v/x31vatFK/OZMwtWP8Le9qCxeSZdBel1NPF1goB57MjhDcb135goG3smvdUoV
P1Xvi/PbhS6qaw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:46:26 2026 by rpki-client