Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
File: PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft (raw, json)
Hash identifier: yoLuqMpp/V9xbn65P1PVeFfVZvlInklxLN9wgOSStUM=
Subject key identifier: D5:2F:F2:E2:6B:24:69:70:D1:6B:B5:5B:D4:73:F4:27:50:1D:51:73
Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
Certificate issuer: /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Certificate serial: 019D29618D8FAFC8806A69B763F34464EB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
Manifest number: 0E9A
Signing time: Thu 26 Mar 2026 09:02:32 +0000
Manifest this update: Thu 26 Mar 2026 09:02:32 +0000
Manifest next update: Fri 27 Mar 2026 09:02:32 +0000
Files and hashes: 1: 66CPSBvOBs6dFqzBnItMz4Q213g.roa (hash: b1rR7/NAs6w4yv3zdYzfmRYRTyFpzzr69EUW9oij5uE=)
2: PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl (hash: U6jmys4fnUVFAtmCx2BUZqS+RlYRrraY9/E2yi9T86c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:8d:8f:af:c8:80:6a:69:b7:63:f3:44:64:eb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Validity
Not Before: Mar 26 09:02:32 2026 GMT
Not After : Mar 27 09:02:32 2026 GMT
Subject: CN=d52ff2e26b246970d16bb55bd473f427501d5173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:fc:66:6a:ab:a4:97:37:e9:89:d4:82:22:
dc:20:0b:f3:9e:2c:33:72:56:2d:96:9e:8a:bf:61:
4b:6d:22:0b:11:62:d1:e9:74:62:71:88:80:ce:0f:
81:fc:de:29:c7:39:08:14:7c:88:75:93:73:5f:dd:
50:89:6d:b1:1f:ba:c4:db:a0:22:5a:fa:ef:4a:52:
e5:31:00:7e:40:13:bf:6c:74:fc:51:98:3a:b4:12:
14:92:9e:c4:03:3f:6e:41:91:c9:58:45:49:c4:99:
f5:b5:71:78:75:4b:e2:66:35:ff:f5:b3:e1:38:69:
e6:be:8e:9c:5b:8c:fa:5b:2d:f1:1e:63:1d:47:91:
f7:14:47:dd:f8:4a:aa:20:7c:66:96:4c:f3:c4:8a:
dc:8f:2d:23:cd:a6:53:7d:d1:3e:8d:f2:f6:d1:a2:
e0:8c:a7:a2:5d:83:81:57:0b:29:c2:d3:91:79:bd:
91:96:33:ab:47:b8:71:eb:54:05:f3:bb:8e:cd:f7:
34:85:9b:64:60:e7:a0:b1:51:90:12:a5:a4:0b:78:
79:d8:76:f7:fc:f1:c2:c8:fc:31:db:9b:88:0a:15:
f6:86:6b:bc:15:0c:e7:d2:3f:bd:93:51:2a:3d:d7:
61:f4:1c:ae:3b:f4:25:e4:d8:e5:02:82:ae:d0:19:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2F:F2:E2:6B:24:69:70:D1:6B:B5:5B:D4:73:F4:27:50:1D:51:73
X509v3 Authority Key Identifier:
keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e0:a3:dc:f9:e2:c7:5b:ea:d0:02:58:c3:da:9a:dc:43:78:
8d:3a:0a:69:32:9b:7b:ae:84:86:74:3a:3f:64:cc:75:fc:22:
b3:c0:6e:b5:13:79:05:ff:77:bc:ac:7b:8e:b8:37:8d:17:5e:
09:bb:d1:6b:9c:74:1b:0a:a5:9b:ef:39:43:55:6c:cf:5c:7d:
03:9f:d5:18:dd:16:22:e5:08:c4:02:31:5e:7d:0a:9d:e6:99:
c3:06:de:48:af:50:56:b1:2d:9f:c1:c2:33:af:91:29:9b:88:
fd:3f:3f:a1:fe:cc:9e:ce:02:28:da:74:d6:06:77:c1:a8:5d:
7b:ab:6f:fe:36:c6:70:77:1b:cc:62:c7:30:a8:7b:ac:5b:0c:
39:df:56:b3:8a:d2:a9:57:45:3f:ab:85:ce:55:0f:fa:68:de:
d0:c4:68:29:79:b8:63:1d:e3:e0:1a:d8:9d:e1:ad:34:4c:5f:
5a:5e:ef:34:16:9c:0e:67:5d:f0:6b:d3:19:74:5e:20:dd:a7:
f6:e6:b2:f9:66:51:f7:04:3c:7d:cc:9d:46:3b:f6:9d:ae:1b:
ce:98:60:f0:e1:37:97:6d:16:f7:93:70:9c:c9:ca:a9:4a:04:
90:a3:05:ff:ba:d9:e1:f8:a1:29:42:f1:46:a4:a1:05:d2:95:
ef:d4:84:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYY2Pr8iAamm3Y/NEZOtnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYWJlMDI4ZjNiZTdlZTA3Mjg4NWQwMmJiZDdiNjJhNjUy
NDI1ZWYwHhcNMjYwMzI2MDkwMjMyWhcNMjYwMzI3MDkwMjMyWjAzMTEwLwYDVQQD
EyhkNTJmZjJlMjZiMjQ2OTcwZDE2YmI1NWJkNDczZjQyNzUwMWQ1MTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTT8ZmqrpJc36YnUgiLcIAvzniwz
clYtlp6Kv2FLbSILEWLR6XRicYiAzg+B/N4pxzkIFHyIdZNzX91QiW2xH7rE26Ai
WvrvSlLlMQB+QBO/bHT8UZg6tBIUkp7EAz9uQZHJWEVJxJn1tXF4dUviZjX/9bPh
OGnmvo6cW4z6Wy3xHmMdR5H3FEfd+EqqIHxmlkzzxIrcjy0jzaZTfdE+jfL20aLg
jKeiXYOBVwspwtOReb2RljOrR7hx61QF87uOzfc0hZtkYOegsVGQEqWkC3h52Hb3
/PHCyPwx25uIChX2hmu8FQzn0j+9k1EqPddh9ByuO/Ql5NjlAoKu0BkZ3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUv8uJrJGlw0Wu1W9Rz9CdQHVFzMB8GA1UdIwQY
MBaAFD6r4Cjzvn7gcohdArvXtiplJCXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHF2Z0tQTy1mdUJ5aUYwQ3U5ZTJLbVVrSmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yYWQ0ZmEtYmQ3Yi00MDdlLWIyNWEt
ZGY3NDEwYjJkMjc1LzEvUHF2Z0tQTy1mdUJ5aUYwQ3U5ZTJLbVVrSmU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yYWQ0ZmEtYmQ3Yi00MDdlLWIyNWEtZGY3NDEwYjJkMjc1
LzEvUHF2Z0tQTy1mdUJ5aUYwQ3U5ZTJLbVVrSmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuCj3Pni
x1vq0AJYw9qa3EN4jToKaTKbe66EhnQ6P2TMdfwis8ButRN5Bf93vKx7jrg3jRde
CbvRa5x0Gwqlm+85Q1Vsz1x9A5/VGN0WIuUIxAIxXn0KneaZwwbeSK9QVrEtn8HC
M6+RKZuI/T8/of7Mns4CKNp01gZ3wahde6tv/jbGcHcbzGLHMKh7rFsMOd9Ws4rS
qVdFP6uFzlUP+mje0MRoKXm4Yx3j4BrYneGtNExfWl7vNBacDmdd8GvTGXReIN2n
9uay+WZR9wQ8fcydRjv2na4bzphg8OE3l20W95NwnMnKqUoEkKMF/7rZ4fihKULx
RqShBdKV79SEfg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:34 2026 by rpki-client