Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
File: PBtlq7jKPpDpdlehqTHkZGneuaA.mft (raw, json)
Hash identifier: pjHbrUaYwOEcb70U3vdMOIk6AvkoqhqFgkZ6cgyI8wc=
Subject key identifier: DE:41:34:A3:18:68:01:D2:A9:1E:B8:37:8C:C8:A6:5E:EA:10:0C:9F
Authority key identifier: 3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
Certificate issuer: /CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Certificate serial: 01A0CF3602F9EB851D14115D3CED7B994C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
Manifest number: 01FF
Signing time: Wed 23 Sep 2026 17:00:18 +0000
Manifest this update: Wed 23 Sep 2026 17:00:18 +0000
Manifest next update: Thu 24 Sep 2026 17:00:18 +0000
Files and hashes: 1: PBtlq7jKPpDpdlehqTHkZGneuaA.crl (hash: 3pU+u2z310u4l9n6Km/o7aavirK4gza3pwBBzqbfEmg=)
2: gMCIz449uqD5WX8VFOvlE05m9FM.asa (hash: piapX0oug4b2n4Ly7SK9SEYjbmdeHD72ighx3Ds0YaQ=)
3: ufhzE0W5SH0Js0oKYXP2RX7vpvA.roa (hash: L+5eFfEh2iKkPrG9ir0RuhaK5ClvADkNCI+XRwX6vSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:02:f9:eb:85:1d:14:11:5d:3c:ed:7b:99:4c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Validity
Not Before: Sep 23 17:00:18 2026 GMT
Not After : Sep 24 17:00:18 2026 GMT
Subject: CN=de4134a3186801d2a91eb8378cc8a65eea100c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d6:49:c7:c1:2f:cb:fd:3f:a9:91:9a:3b:84:
68:09:03:e5:da:38:15:2d:e5:04:c1:ee:35:53:a5:
a3:4e:db:cc:a4:72:18:fc:60:d9:b5:cc:d0:69:a3:
db:4a:61:b0:3d:0e:57:8f:d6:f1:40:36:5a:08:b8:
bd:04:2c:c3:6b:ae:8f:20:ab:b3:41:d6:ab:d8:12:
68:1d:f5:d0:50:fb:6b:34:0e:26:91:ca:3a:a2:57:
e5:fd:7e:79:8f:cd:fd:9b:d2:0a:01:90:6a:9c:5d:
be:7d:3b:45:41:b1:5a:02:af:dd:36:61:02:fe:6a:
c2:09:7e:c6:ef:90:72:86:e1:bf:92:7e:96:5e:b1:
8c:64:9c:6c:c1:7b:a2:22:98:5c:2a:73:98:db:da:
ca:c1:e9:b3:14:1f:ea:c4:1c:68:ec:96:0a:47:b5:
d0:41:c6:41:62:3c:77:a4:5a:05:04:0f:21:b8:68:
b2:12:58:77:bf:ba:44:8b:93:c2:a9:e0:19:a9:9b:
86:2e:54:99:63:20:4b:77:aa:3b:8b:60:7a:5e:60:
08:2e:34:ff:d1:73:2d:76:f5:1b:b8:da:cc:eb:80:
bf:3a:01:98:c7:75:50:b1:c8:d6:fe:56:63:a8:f3:
cd:27:25:e4:09:b7:25:4b:03:32:f4:b4:49:7d:a4:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:41:34:A3:18:68:01:D2:A9:1E:B8:37:8C:C8:A6:5E:EA:10:0C:9F
X509v3 Authority Key Identifier:
keyid:3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0d:3b:04:c9:cf:38:83:81:40:a5:35:08:02:6e:01:11:ec:
5f:2a:aa:30:d6:dd:e5:12:72:fe:9b:8f:bd:2a:5b:60:2c:fb:
ec:cd:84:21:00:f3:16:83:a1:22:4b:ee:f4:7e:82:05:36:2c:
93:13:ed:b4:6f:89:a8:ff:e4:ed:14:6c:d6:46:4c:29:a2:41:
48:c3:22:2f:30:96:e1:31:43:b5:ae:e3:98:e3:63:1e:d4:21:
04:89:ea:e3:03:17:e9:4d:5f:72:e3:fe:d2:49:01:36:e3:49:
1a:ef:03:7d:4a:d6:36:79:1f:72:bb:c8:37:d5:ed:b2:7c:ca:
7f:4e:99:00:76:47:66:5c:ca:f4:a0:da:85:cc:b1:39:4e:4b:
85:07:dd:7f:c5:00:ef:25:9f:69:c1:64:ae:7f:08:3b:7e:08:
cd:16:01:81:18:27:6a:11:1a:45:15:a8:09:0a:2e:4b:28:58:
ee:23:47:c3:d7:cc:be:4c:c2:3a:dc:ea:9d:b6:86:d7:42:64:
34:dc:6e:e8:33:f2:eb:90:78:9d:d5:93:20:60:5c:ab:0d:60:
21:dc:8d:a6:2b:66:68:fd:9b:22:18:0c:b5:90:55:51:b1:eb:
03:e6:b8:22:46:80:88:b2:1b:a8:5b:ea:0e:93:4a:39:71:3f:
7b:0e:90:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNgL564UdFBFdPO17mUyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMWI2NWFiYjhjYTNlOTBlOTc2NTdhMWE5MzFlNDY0Njlk
ZWI5YTAwHhcNMjYwOTIzMTcwMDE4WhcNMjYwOTI0MTcwMDE4WjAzMTEwLwYDVQQD
EyhkZTQxMzRhMzE4NjgwMWQyYTkxZWI4Mzc4Y2M4YTY1ZWVhMTAwYzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69ZJx8Evy/0/qZGaO4RoCQPl2jgV
LeUEwe41U6WjTtvMpHIY/GDZtczQaaPbSmGwPQ5Xj9bxQDZaCLi9BCzDa66PIKuz
Qdar2BJoHfXQUPtrNA4mkco6olfl/X55j839m9IKAZBqnF2+fTtFQbFaAq/dNmEC
/mrCCX7G75ByhuG/kn6WXrGMZJxswXuiIphcKnOY29rKwemzFB/qxBxo7JYKR7XQ
QcZBYjx3pFoFBA8huGiyElh3v7pEi5PCqeAZqZuGLlSZYyBLd6o7i2B6XmAILjT/
0XMtdvUbuNrM64C/OgGYx3VQscjW/lZjqPPNJyXkCbclSwMy9LRJfaSyIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5BNKMYaAHSqR64N4zIpl7qEAyfMB8GA1UdIwQY
MBaAFDwbZau4yj6Q6XZXoakx5GRp3rmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJ0bHE3aktQcERwZGxlaHFUSGtaR25ldWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xOTczMWYtYTY0Ni00NWI3LTliOGEt
OGRjNmVkYzcxYTAwLzEvUEJ0bHE3aktQcERwZGxlaHFUSGtaR25ldWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xOTczMWYtYTY0Ni00NWI3LTliOGEtOGRjNmVkYzcxYTAw
LzEvUEJ0bHE3aktQcERwZGxlaHFUSGtaR25ldWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASg07BMnP
OIOBQKU1CAJuARHsXyqqMNbd5RJy/puPvSpbYCz77M2EIQDzFoOhIkvu9H6CBTYs
kxPttG+JqP/k7RRs1kZMKaJBSMMiLzCW4TFDta7jmONjHtQhBInq4wMX6U1fcuP+
0kkBNuNJGu8DfUrWNnkfcrvIN9XtsnzKf06ZAHZHZlzK9KDahcyxOU5LhQfdf8UA
7yWfacFkrn8IO34IzRYBgRgnahEaRRWoCQouSyhY7iNHw9fMvkzCOtzqnbaG10Jk
NNxu6DPy65B4ndWTIGBcqw1gIdyNpitmaP2bIhgMtZBVUbHrA+a4IkaAiLIbqFvq
DpNKOXE/ew6QnQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:49:49 2026 by rpki-client