Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier: 3pPwM5bOkg8MmlSDtKZ7CE4dnQJobgnp6jGs44ttFc8=
Subject key identifier: EB:B0:6B:C5:80:0F:CE:A1:02:A1:04:67:D0:DB:73:C4:F6:A2:DB:16
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 019D28841C7BC2EAAD1C0B63F03B98BB5CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 05:00:39 +0000
Manifest this update: Thu 26 Mar 2026 05:00:39 +0000
Manifest next update: Fri 27 Mar 2026 05:00:39 +0000
Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: TFWZ5yYfJDv6BSQ1ldKQ3VoQCuCkGcjO+BlzDWtBV3w=)
2: HyHzV1MU9ElmfLFYo26pHGiN3IQ.roa (hash: FAwtBrWvr9mjLRzQVdNQzXl4BGzCudYJ6kq3X7cDbdU=)
3: xc2N92zCzE8dOyiUB1DKEECW9u0.roa (hash: zdTFoZAtDppROLcUt1HO+ZMDOiFUGUnqXWfKYmpZP6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:1c:7b:c2:ea:ad:1c:0b:63:f0:3b:98:bb:5c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Mar 26 05:00:39 2026 GMT
Not After : Mar 27 05:00:39 2026 GMT
Subject: CN=ebb06bc5800fcea102a10467d0db73c4f6a2db16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:35:82:44:bf:15:d6:c2:b1:e9:1c:da:ed:
56:af:80:68:58:4a:4d:b1:09:ae:df:16:a5:d8:15:
ea:30:20:09:73:72:f4:e6:8e:95:6d:33:b7:5e:af:
4a:80:fd:ee:4b:64:77:86:b5:00:8c:73:00:ad:c5:
a6:a1:c8:ec:cc:dd:db:87:55:01:3a:b7:b5:45:18:
41:5f:dc:e5:bf:c0:35:ae:9c:7e:43:8d:04:1d:bb:
2b:62:95:05:a5:a8:58:76:a9:24:06:2a:54:1d:b9:
8f:61:68:c7:2f:e1:20:6a:83:21:8e:0e:8c:dc:ea:
55:df:ed:09:f7:85:02:42:08:32:d9:69:ff:13:35:
85:cb:5b:46:a9:66:f9:f0:a7:50:49:98:98:33:98:
7e:a4:22:20:5c:9e:ef:be:9a:1b:be:ab:6e:49:f2:
4d:06:93:4c:d0:d0:94:12:cd:3d:c9:e0:e7:86:ac:
30:c4:94:d3:16:9f:8e:7b:6d:ca:4c:2a:8c:e3:1e:
39:d2:d4:3d:34:58:71:36:53:41:d7:67:16:63:81:
57:de:6f:77:fa:93:ab:c7:11:60:8e:b0:e1:a0:d5:
a2:c4:9a:60:9f:e8:b2:2a:73:46:71:db:99:53:f3:
9c:c5:78:3b:6b:b6:f1:fe:68:30:a6:6d:51:71:64:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B0:6B:C5:80:0F:CE:A1:02:A1:04:67:D0:DB:73:C4:F6:A2:DB:16
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3b:f3:1a:1f:c1:b3:6c:85:72:a6:af:81:fd:17:8e:fa:dc:
3b:13:7c:25:e3:92:94:90:84:90:9e:71:18:96:57:41:c2:97:
51:47:77:ad:af:1a:f2:3d:00:83:b2:5b:33:df:7a:53:b4:66:
32:cc:b7:b2:a1:e3:d8:6a:81:60:5d:ee:5f:c6:4b:02:df:6b:
a9:8b:f3:16:de:32:bf:b2:b9:aa:87:59:c7:d5:4a:61:1d:ad:
d8:96:4c:6c:ab:5d:e9:25:dd:2e:81:e2:42:5b:52:70:db:a5:
af:5e:42:1e:7d:34:e3:a7:65:d4:55:87:3d:b8:a7:7f:b3:f6:
b1:85:c9:4c:bc:79:7e:0e:8d:f7:4d:10:b9:f6:2f:d5:35:15:
5f:c7:93:64:dd:7e:4b:cb:87:e6:7c:90:63:02:b0:3a:b4:80:
7c:dd:54:82:6f:12:9a:c5:a7:d0:31:8e:11:ab:af:ee:62:33:
4e:f5:81:72:31:42:0d:5c:82:e4:17:f6:66:60:d9:89:12:48:
8b:79:dc:4c:4b:4d:92:da:3c:3f:19:a7:fb:9b:7d:41:0c:e8:
9f:c6:8c:d9:60:0e:b1:fb:2e:e4:55:3d:81:1a:2c:d7:28:47:
54:32:b9:4f:dd:4f:a2:d1:63:5e:16:6c:14:08:01:bd:bf:31:
86:3b:65:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohBx7wuqtHAtj8DuYu1zKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZjkyMTI5ZGY3YWFhNzE1N2UxNTk3M2MyNDc1M2UxMThj
OTA1N2QwHhcNMjYwMzI2MDUwMDM5WhcNMjYwMzI3MDUwMDM5WjAzMTEwLwYDVQQD
EyhlYmIwNmJjNTgwMGZjZWExMDJhMTA0NjdkMGRiNzNjNGY2YTJkYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu81gkS/FdbCsekc2u1Wr4BoWEpN
sQmu3xal2BXqMCAJc3L05o6VbTO3Xq9KgP3uS2R3hrUAjHMArcWmocjszN3bh1UB
Ore1RRhBX9zlv8A1rpx+Q40EHbsrYpUFpahYdqkkBipUHbmPYWjHL+EgaoMhjg6M
3OpV3+0J94UCQggy2Wn/EzWFy1tGqWb58KdQSZiYM5h+pCIgXJ7vvpobvqtuSfJN
BpNM0NCUEs09yeDnhqwwxJTTFp+Oe23KTCqM4x450tQ9NFhxNlNB12cWY4FX3m93
+pOrxxFgjrDhoNWixJpgn+iyKnNGcduZU/OcxXg7a7bx/mgwpm1RcWT+OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuwa8WAD86hAqEEZ9Dbc8T2otsWMB8GA1UdIwQY
MBaAFNT5ISnfeqpxV+FZc8JHU+EYyQV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUt
OWYzOGM4YjhhOTI4LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUtOWYzOGM4YjhhOTI4
LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTvzGh/B
s2yFcqavgf0XjvrcOxN8JeOSlJCEkJ5xGJZXQcKXUUd3ra8a8j0Ag7JbM996U7Rm
Msy3sqHj2GqBYF3uX8ZLAt9rqYvzFt4yv7K5qodZx9VKYR2t2JZMbKtd6SXdLoHi
QltScNulr15CHn0046dl1FWHPbinf7P2sYXJTLx5fg6N900QufYv1TUVX8eTZN1+
S8uH5nyQYwKwOrSAfN1Ugm8SmsWn0DGOEauv7mIzTvWBcjFCDVyC5Bf2ZmDZiRJI
i3ncTEtNkto8Pxmn+5t9QQzon8aM2WAOsfsu5FU9gRos1yhHVDK5T91PotFjXhZs
FAgBvb8xhjtlkg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:57 2026 by rpki-client