Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
File: pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft (raw, json)
Hash identifier: R4+13NQ2/tQiRVh0GzEsDkwUDzU3oRVlzEjzS1flmGA=
Subject key identifier: F0:0E:9F:0C:39:96:4D:09:6A:D1:24:62:12:30:2D:C3:81:66:0D:2C
Authority key identifier: A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
Certificate issuer: /CN=a5541609cd947bedfc99125840030108a3f141c1
Certificate serial: 019D27043A2CC0A1E54988189490BB632175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
Manifest number: 01FC
Signing time: Wed 25 Mar 2026 22:01:21 +0000
Manifest this update: Wed 25 Mar 2026 22:01:21 +0000
Manifest next update: Thu 26 Mar 2026 22:01:21 +0000
Files and hashes: 1: Jcx0b1zHDF9UJEjNraMW7Wkin54.roa (hash: OyMTt7xgc2x7/DsfiJtLeI1ThqbxPs1lS0m0QvvcPzI=)
2: Xf5rpKoBI7BsYh_voz1J6f7LZno.roa (hash: yCI1kMz5PIyVImE2jYrenMk6gjrCzrC62f+tybJ0tIQ=)
3: pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl (hash: PWvWSN0xmKVSNRNAHxamfLraxbUlmE/90cIIY8zrR80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:3a:2c:c0:a1:e5:49:88:18:94:90:bb:63:21:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5541609cd947bedfc99125840030108a3f141c1
Validity
Not Before: Mar 25 22:01:21 2026 GMT
Not After : Mar 26 22:01:21 2026 GMT
Subject: CN=f00e9f0c39964d096ad1246212302dc381660d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:35:17:c6:ea:89:78:e8:62:cc:33:50:0d:
d7:e3:02:7f:ca:ab:9f:e9:87:04:b9:e2:e4:da:3e:
0f:97:09:cc:2a:14:e7:03:c2:a1:66:06:1b:a4:a1:
e7:1d:5c:b4:10:b5:62:37:86:cb:22:ed:14:bf:25:
07:65:42:8b:cb:c1:dc:ff:f4:6c:d2:25:e3:01:b0:
e5:29:d7:08:72:66:a9:6a:fc:ae:0d:08:fb:be:75:
12:b8:92:81:5d:40:a2:a7:c5:26:0e:e7:a0:94:b2:
94:0b:1e:a9:ac:ea:2d:83:e0:6e:f8:ea:fd:6c:e0:
6c:a7:ca:ec:fd:da:7a:06:8b:fd:e4:94:fc:34:0c:
da:43:87:7e:98:a4:8c:eb:d2:cd:a0:98:bf:49:6c:
86:c7:04:95:ea:1c:85:ea:f2:3f:75:1c:ba:2a:61:
21:9e:1a:43:a1:aa:e9:cb:f7:21:4a:27:34:3e:1e:
d4:83:93:c0:58:3a:32:3f:ce:f7:39:31:44:f0:e1:
31:ed:70:fe:6e:e5:7f:7a:72:38:7a:6b:36:ca:9d:
43:d5:0c:f7:67:ad:c2:f3:d2:6e:e8:61:80:75:4a:
f9:0a:e3:bc:51:72:dd:0d:70:72:64:99:b0:03:cd:
df:34:27:92:6d:9c:b6:1b:3b:ec:06:22:f3:85:c1:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0E:9F:0C:39:96:4D:09:6A:D1:24:62:12:30:2D:C3:81:66:0D:2C
X509v3 Authority Key Identifier:
keyid:A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3e:d4:4b:01:58:b0:e5:f4:ee:81:51:da:ed:04:ee:e9:11:
fe:4c:62:11:d3:e9:90:0d:b1:81:9d:40:dd:3a:ca:55:0e:83:
e0:9f:57:85:16:d1:79:09:0b:03:0c:74:6b:5a:1b:55:24:a7:
b3:aa:8b:ae:db:e9:99:70:36:6b:d5:be:81:1f:ce:1c:fa:7f:
d9:bd:20:a7:ba:34:2f:77:53:49:c0:44:80:42:f8:51:64:95:
35:58:57:91:1b:cf:72:6c:61:62:75:3f:61:78:9a:ca:7e:79:
56:3a:fd:91:74:4e:4f:09:e1:92:2b:b8:37:90:32:e7:94:ed:
1a:1b:7d:ce:f3:db:20:ca:9d:8c:6e:06:3e:6e:7e:2d:d0:7a:
60:6d:e2:44:7c:a7:14:b1:6e:48:45:79:76:1b:f2:91:e4:86:
d3:21:d8:bc:d0:a2:61:a9:eb:47:b3:40:5b:ca:29:21:b3:99:
65:94:ce:86:72:3f:4b:86:94:8d:27:78:cd:92:6a:25:6c:1b:
9d:79:58:b3:bc:e4:a5:96:05:ce:d7:45:cf:64:89:5c:33:61:
79:ce:1f:c7:f6:83:8b:44:30:19:2c:b8:c3:92:76:0d:a6:82:
75:89:ed:3a:50:d7:d9:b7:a1:54:4b:0a:ab:a6:30:c3:9f:fa:
80:ae:1e:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBDoswKHlSYgYlJC7YyF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NTQxNjA5Y2Q5NDdiZWRmYzk5MTI1ODQwMDMwMTA4YTNm
MTQxYzEwHhcNMjYwMzI1MjIwMTIxWhcNMjYwMzI2MjIwMTIxWjAzMTEwLwYDVQQD
EyhmMDBlOWYwYzM5OTY0ZDA5NmFkMTI0NjIxMjMwMmRjMzgxNjYwZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPA1F8bqiXjoYswzUA3X4wJ/yquf
6YcEueLk2j4PlwnMKhTnA8KhZgYbpKHnHVy0ELViN4bLIu0UvyUHZUKLy8Hc//Rs
0iXjAbDlKdcIcmapavyuDQj7vnUSuJKBXUCip8UmDueglLKUCx6prOotg+Bu+Or9
bOBsp8rs/dp6Bov95JT8NAzaQ4d+mKSM69LNoJi/SWyGxwSV6hyF6vI/dRy6KmEh
nhpDoarpy/chSic0Ph7Ug5PAWDoyP873OTFE8OEx7XD+buV/enI4ems2yp1D1Qz3
Z63C89Ju6GGAdUr5CuO8UXLdDXByZJmwA83fNCeSbZy2GzvsBiLzhcFNMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAOnww5lk0JatEkYhIwLcOBZg0sMB8GA1UdIwQY
MBaAFKVUFgnNlHvt/JkSWEADAQij8UHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFZRV0NjMlVlLTM4bVJKWVFBTUJDS1B4UWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8wNGEzYzQtMGQ4OC00OGU3LTg0ZGUt
NTRjMmMwY2FiN2MzLzEvcFZRV0NjMlVlLTM4bVJKWVFBTUJDS1B4UWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8wNGEzYzQtMGQ4OC00OGU3LTg0ZGUtNTRjMmMwY2FiN2Mz
LzEvcFZRV0NjMlVlLTM4bVJKWVFBTUJDS1B4UWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMD7USwFY
sOX07oFR2u0E7ukR/kxiEdPpkA2xgZ1A3TrKVQ6D4J9XhRbReQkLAwx0a1obVSSn
s6qLrtvpmXA2a9W+gR/OHPp/2b0gp7o0L3dTScBEgEL4UWSVNVhXkRvPcmxhYnU/
YXiayn55Vjr9kXROTwnhkiu4N5Ay55TtGht9zvPbIMqdjG4GPm5+LdB6YG3iRHyn
FLFuSEV5dhvykeSG0yHYvNCiYanrR7NAW8opIbOZZZTOhnI/S4aUjSd4zZJqJWwb
nXlYs7zkpZYFztdFz2SJXDNhec4fx/aDi0QwGSy4w5J2DaaCdYntOlDX2behVEsK
q6Yww5/6gK4e+w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:41 2026 by rpki-client