Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json)
Hash identifier: CQP5xsu0X73n7s/NDrz0LfcpskDcAabPaMzRyD8Upp0=
Subject key identifier: 77:B8:5F:99:57:F6:C2:10:21:3B:F7:B7:60:E3:D4:5A:1B:B1:56:23
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 019D27A93E8B5C6BD2C41560CBDCB28605F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 01:01:36 +0000
Manifest this update: Thu 26 Mar 2026 01:01:36 +0000
Manifest next update: Fri 27 Mar 2026 01:01:36 +0000
Files and hashes: 1: TEyzbeE0RPVawr5UzZUBwB5xhtc.roa (hash: bkckZhvDpq39zxJxt09vjj1edwBpMlUWDqgAAFwbo24=)
2: Xdnvns2DRqazD189iM-2jNt4vZo.roa (hash: UAbhMlaae4Ik19w+3ZsFKwWR5TNpwZbcrBfdZMwkITk=)
3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: 6WNdKa0DmcQKWONeDVPt/GEdxuxw5QcxXWdPRNcinzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:3e:8b:5c:6b:d2:c4:15:60:cb:dc:b2:86:05:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Mar 26 01:01:36 2026 GMT
Not After : Mar 27 01:01:36 2026 GMT
Subject: CN=77b85f9957f6c210213bf7b760e3d45a1bb15623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fd:e9:7a:0e:e1:59:82:dc:05:e7:46:ff:2b:
d6:bd:53:e7:78:33:28:d4:be:62:5b:2d:43:f1:dd:
84:80:67:40:a2:7a:38:ed:b3:4f:b8:bd:2a:5f:8f:
0e:df:b1:d1:2a:22:6a:27:d5:3c:77:cd:9c:e5:3d:
43:43:69:df:cb:e2:38:41:5b:a0:9a:54:56:ba:70:
b7:cf:62:0f:ae:39:38:62:47:4d:d8:75:12:c2:0f:
f8:4a:fa:f5:1d:3e:5b:5e:b5:f5:b0:82:a0:d7:1e:
61:e2:61:ed:92:7b:2e:f3:c7:6b:85:c4:09:5c:a1:
47:e2:0f:a9:7c:17:da:3f:c2:e2:61:b5:9b:45:62:
5a:43:bb:f3:c8:6d:a4:c9:8f:fb:3b:bf:6a:7c:f0:
28:a8:62:ed:11:fe:3d:a4:d1:ff:4f:74:4b:43:d4:
56:66:ac:19:2e:c1:e4:d4:e7:fa:71:45:ca:28:56:
36:b5:fe:ca:13:5d:a4:68:95:3e:b5:1e:fb:5a:8c:
c3:dd:d2:3e:6e:f9:4e:a6:98:b8:6c:47:eb:57:5b:
aa:f4:3c:09:0a:75:03:27:16:90:8e:6b:e1:28:10:
83:f7:12:ad:61:cd:61:65:32:d5:eb:b2:53:3d:85:
34:6e:61:ae:30:e5:a6:9f:cf:53:99:00:da:3b:5d:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B8:5F:99:57:F6:C2:10:21:3B:F7:B7:60:E3:D4:5A:1B:B1:56:23
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:83:ca:60:a3:ed:36:2e:fd:a1:83:5e:32:80:65:00:6c:4f:
56:07:cd:59:df:32:9a:a9:74:4f:46:75:80:38:9d:fe:93:10:
42:dc:b5:7b:52:02:c2:0f:39:2b:82:fd:f1:55:ef:f7:7f:af:
b5:76:fd:f8:f3:d9:1a:90:8a:b9:03:7e:17:81:f9:ce:e3:6e:
d2:fa:0b:51:9d:24:cd:d7:3d:7a:1f:64:d5:6c:81:87:a4:8e:
87:ee:5d:0c:80:3d:a3:69:5c:32:8d:cf:c7:34:89:32:5e:bf:
60:3f:a4:af:d4:d5:dc:a6:fa:8f:48:73:47:d9:7a:6c:0a:d0:
55:89:9b:15:99:a4:c4:1f:8a:36:2c:5f:93:4f:52:62:d1:8c:
ea:45:0e:b5:76:b7:1a:81:e0:bd:b6:d9:aa:5d:59:1f:72:a6:
21:df:d2:bb:ae:7d:0a:7e:1c:49:ae:db:57:89:94:77:06:c6:
fc:2b:84:4e:62:4f:56:a2:8c:3b:09:97:44:da:a2:01:68:0e:
5d:51:79:62:c9:6e:06:d6:72:d8:77:78:cc:6f:b0:67:03:4c:
bb:36:81:d9:17:16:2f:ed:25:4d:d3:1e:51:3f:43:28:d2:e4:
55:78:e6:98:8b:17:12:6c:01:7e:18:26:6a:a9:d9:46:bf:4e:
7b:6d:4e:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqT6LXGvSxBVgy9yyhgXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDBjNzUxZWJmYjQ4MDdkODQ2MjJlODA2Y2IzZDBiOWRk
ODEwNjkwHhcNMjYwMzI2MDEwMTM2WhcNMjYwMzI3MDEwMTM2WjAzMTEwLwYDVQQD
Eyg3N2I4NWY5OTU3ZjZjMjEwMjEzYmY3Yjc2MGUzZDQ1YTFiYjE1NjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5P3peg7hWYLcBedG/yvWvVPneDMo
1L5iWy1D8d2EgGdAono47bNPuL0qX48O37HRKiJqJ9U8d82c5T1DQ2nfy+I4QVug
mlRWunC3z2IPrjk4YkdN2HUSwg/4Svr1HT5bXrX1sIKg1x5h4mHtknsu88drhcQJ
XKFH4g+pfBfaP8LiYbWbRWJaQ7vzyG2kyY/7O79qfPAoqGLtEf49pNH/T3RLQ9RW
ZqwZLsHk1Of6cUXKKFY2tf7KE12kaJU+tR77WozD3dI+bvlOppi4bEfrV1uq9DwJ
CnUDJxaQjmvhKBCD9xKtYc1hZTLV67JTPYU0bmGuMOWmn89TmQDaO10y6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHe4X5lX9sIQITv3t2Dj1FobsVYjMB8GA1UdIwQY
MBaAFKZAx1Hr+0gH2EYi6AbLPQud2BBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMt
MDI2YjhjZjY5MWJhLzEvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMtMDI2YjhjZjY5MWJh
LzEvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYPKYKPt
Ni79oYNeMoBlAGxPVgfNWd8ymql0T0Z1gDid/pMQQty1e1ICwg85K4L98VXv93+v
tXb9+PPZGpCKuQN+F4H5zuNu0voLUZ0kzdc9eh9k1WyBh6SOh+5dDIA9o2lcMo3P
xzSJMl6/YD+kr9TV3Kb6j0hzR9l6bArQVYmbFZmkxB+KNixfk09SYtGM6kUOtXa3
GoHgvbbZql1ZH3KmId/Su659Cn4cSa7bV4mUdwbG/CuETmJPVqKMOwmXRNqiAWgO
XVF5YsluBtZy2Hd4zG+wZwNMuzaB2RcWL+0lTdMeUT9DKNLkVXjmmIsXEmwBfhgm
aqnZRr9Oe21Ouw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:40 2026 by rpki-client