Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
File: PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft (raw, json)
Hash identifier: qBFsIyCQzEKFJhblWg3FnOSSg4XXitDnd4jAGWV4810=
Subject key identifier: 2A:AE:23:8B:F5:7D:47:BE:86:E1:E8:E9:30:2A:05:4E:9F:46:A3:A1
Authority key identifier: 3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
Certificate issuer: /CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Certificate serial: 019D270395B3E0B59BDE695C5FAC9AFA88E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
Manifest number: 1574
Signing time: Wed 25 Mar 2026 22:00:39 +0000
Manifest this update: Wed 25 Mar 2026 22:00:39 +0000
Manifest next update: Thu 26 Mar 2026 22:00:39 +0000
Files and hashes: 1: PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl (hash: 0/HoFejxVrDmFvVrZWnz/dE9UMjNioJf94V7lCbcK1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:95:b3:e0:b5:9b:de:69:5c:5f:ac:9a:fa:88:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Validity
Not Before: Mar 25 22:00:39 2026 GMT
Not After : Mar 26 22:00:39 2026 GMT
Subject: CN=2aae238bf57d47be86e1e8e9302a054e9f46a3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:f5:88:5a:bc:3d:36:88:9a:99:a9:58:22:
5b:3d:cd:47:0f:9f:c0:81:f7:e8:ed:1b:45:44:39:
d0:ee:32:98:7e:ae:6c:b2:ed:27:86:c7:6b:fe:25:
f2:c7:02:98:8a:a6:e4:10:ae:90:11:4d:4b:9b:4a:
e2:fb:e8:b4:95:ed:33:3b:18:3c:d0:6d:18:f2:95:
2d:40:57:90:7d:46:c7:16:66:27:c8:e4:00:f0:9a:
72:57:e4:72:e5:08:40:c3:f2:17:18:66:00:0e:bf:
cf:07:01:1c:2d:04:44:7f:3f:0e:37:9e:ce:c8:dc:
67:c5:5f:31:6d:f1:a5:3e:05:32:65:4a:06:85:37:
fc:9e:cb:cf:50:4c:5f:92:80:2e:71:2c:90:3b:5d:
02:e3:93:02:1e:02:52:20:cc:c5:fc:b0:df:6f:0c:
4c:63:12:7c:db:ad:ef:e1:44:fe:39:0f:2d:be:8e:
33:0a:14:b2:be:80:2c:7b:da:b6:11:57:d0:05:54:
88:ac:10:d8:af:45:9c:dc:6c:59:68:4b:5e:ee:a7:
07:23:9f:bf:00:2b:9b:24:a0:90:81:20:a5:8d:42:
3d:32:1a:6e:97:c8:25:29:43:23:7b:30:a6:9e:81:
72:0d:6d:be:cb:8a:da:f2:99:f5:80:47:d9:4b:0f:
5d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AE:23:8B:F5:7D:47:BE:86:E1:E8:E9:30:2A:05:4E:9F:46:A3:A1
X509v3 Authority Key Identifier:
keyid:3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:34:34:dd:d5:c2:a0:37:5b:8d:77:54:58:5c:16:33:53:4e:
be:31:0d:cd:a2:3f:63:17:cb:79:d8:e9:e4:b1:f8:ea:a0:f3:
f9:9f:20:51:74:b9:2a:5e:30:26:0e:61:c4:98:62:ec:09:83:
19:8f:f5:97:41:82:cf:f6:b6:23:9d:36:4a:47:c4:f4:3b:84:
43:14:5f:08:30:85:e6:09:0f:9e:76:81:14:6f:e2:95:51:b7:
ab:3a:23:61:fb:66:3b:a3:87:18:11:4f:f6:ea:f4:de:e2:d3:
ed:83:22:dc:47:66:95:e7:c5:9c:3a:43:7c:e8:ff:75:63:7d:
6e:73:fa:b0:2c:07:ff:03:6d:51:aa:e0:95:76:cd:9d:f2:72:
41:d4:49:11:e4:3a:60:c2:d0:ad:01:05:b1:cf:bb:4c:75:a1:
71:ff:cd:9c:7c:2a:04:0c:a0:f6:52:00:97:3d:c5:8b:78:65:
7d:81:79:51:df:ee:48:41:25:18:fb:f7:75:a9:c2:1d:d6:3a:
a7:48:75:0f:8d:c1:ce:b1:f8:b0:a4:68:dd:e8:a4:3c:48:e4:
6a:77:2b:69:d3:a3:99:b5:5f:d3:f6:ae:14:5e:8d:75:1a:ff:
71:e6:f6:68:98:62:dd:dc:9b:9c:cc:f2:f0:f5:89:54:85:87:
2c:3d:b8:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA5Wz4LWb3mlcX6ya+ojoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjE3N2EzZTg2YzgzOWNmZDE5M2RiYjQ2ZWRhODA4N2Q4
MjE0MWEwHhcNMjYwMzI1MjIwMDM5WhcNMjYwMzI2MjIwMDM5WjAzMTEwLwYDVQQD
EygyYWFlMjM4YmY1N2Q0N2JlODZlMWU4ZTkzMDJhMDU0ZTlmNDZhM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGf1iFq8PTaImpmpWCJbPc1HD5/A
gffo7RtFRDnQ7jKYfq5ssu0nhsdr/iXyxwKYiqbkEK6QEU1Lm0ri++i0le0zOxg8
0G0Y8pUtQFeQfUbHFmYnyOQA8JpyV+Ry5QhAw/IXGGYADr/PBwEcLQREfz8ON57O
yNxnxV8xbfGlPgUyZUoGhTf8nsvPUExfkoAucSyQO10C45MCHgJSIMzF/LDfbwxM
YxJ8263v4UT+OQ8tvo4zChSyvoAse9q2EVfQBVSIrBDYr0Wc3GxZaEte7qcHI5+/
ACubJKCQgSCljUI9Mhpul8glKUMjezCmnoFyDW2+y4ra8pn1gEfZSw9dkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCquI4v1fUe+huHo6TAqBU6fRqOhMB8GA1UdIwQY
MBaAFD8hd6PobIOc/Rk9u0btqAh9ghQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yY2Y5MjYtODEwZS00MTFlLWJkNWIt
MTYxZTUxM2ViZGMyLzEvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yY2Y5MjYtODEwZS00MTFlLWJkNWItMTYxZTUxM2ViZGMy
LzEvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzQ03dXC
oDdbjXdUWFwWM1NOvjENzaI/YxfLedjp5LH46qDz+Z8gUXS5Kl4wJg5hxJhi7AmD
GY/1l0GCz/a2I502SkfE9DuEQxRfCDCF5gkPnnaBFG/ilVG3qzojYftmO6OHGBFP
9ur03uLT7YMi3EdmlefFnDpDfOj/dWN9bnP6sCwH/wNtUarglXbNnfJyQdRJEeQ6
YMLQrQEFsc+7THWhcf/NnHwqBAyg9lIAlz3Fi3hlfYF5Ud/uSEElGPv3danCHdY6
p0h1D43BzrH4sKRo3eikPEjkancradOjmbVf0/auFF6NdRr/ceb2aJhi3dybnMzy
8PWJVIWHLD24Qw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:38:38 2026 by rpki-client