Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: mcW40a9ACQuk2NdnWB8J4v9gMN5h6glEG2Wgfkg5LFQ=
Subject key identifier: 3B:D8:11:04:90:CD:03:EE:50:26:C6:E6:E2:C6:1A:98:55:B4:A3:5A
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 01A0D1C8FEC074D6A2B216707FA426FDAA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 05:00:05 +0000
Manifest this update: Thu 24 Sep 2026 05:00:05 +0000
Manifest next update: Fri 25 Sep 2026 05:00:05 +0000
Files and hashes: 1: D6JN_SUanY3VCPcy8MM0wRyWpFg.asa (hash: GO31s3wbPJQu1T3Grsa85oI8sAVmrZULl2h6J3A4Dcw=)
2: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: U1B0MZ24FdmE5Os3s+3q5EBsTdi2NN3kYuQemn7226E=)
3: iVwLg--4UDbLvJn4dxkRR2fxInw.roa (hash: wrzc6nRtbm4MeWrVh43cUfhaLyz6R8Fbv5xm23WJS0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c8:fe:c0:74:d6:a2:b2:16:70:7f:a4:26:fd:aa:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Sep 24 05:00:05 2026 GMT
Not After : Sep 25 05:00:05 2026 GMT
Subject: CN=3bd8110490cd03ee5026c6e6e2c61a9855b4a35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:83:c2:11:4d:a3:a7:20:34:73:62:c8:ff:
6a:c6:0c:43:40:1e:d1:c0:49:68:f0:b6:f0:16:db:
55:d0:50:b8:59:f0:00:43:89:0c:3f:12:d8:a3:4f:
df:72:42:51:d1:cf:44:13:ce:da:f1:29:50:2e:ec:
bb:84:8f:12:14:e4:a8:78:7a:92:d4:b4:e5:f3:8e:
0e:7a:83:6e:0d:26:f7:f3:10:c5:d9:72:5d:fd:46:
59:6a:d8:06:48:9e:d8:15:d8:04:3c:16:52:51:c3:
5e:3a:4a:e8:f3:a1:fd:e5:ce:58:de:86:20:da:cc:
3d:d5:1c:97:38:2c:24:c1:2b:92:e3:0b:05:d0:a1:
bb:e6:71:d9:5c:d3:f4:38:f3:a6:9b:23:f4:5c:c6:
ba:3a:71:70:0f:c3:dc:5c:5c:06:cf:b0:41:94:45:
00:6d:1f:e6:09:95:e0:fa:5b:51:a8:30:8f:37:2c:
cd:11:5a:dc:26:59:23:ed:2d:a5:8f:4f:d4:52:f9:
d4:8c:b0:a9:fd:54:e3:8e:e7:b7:ad:94:a2:74:60:
ae:d5:5a:51:37:57:5b:ce:42:f6:13:73:c6:f4:9d:
0e:83:1e:f1:d3:81:1a:8f:3e:ed:3b:c9:0a:a5:28:
7e:0f:2e:3f:5f:22:23:f7:61:e6:eb:42:f0:94:1d:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D8:11:04:90:CD:03:EE:50:26:C6:E6:E2:C6:1A:98:55:B4:A3:5A
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:23:30:af:4f:38:9d:a7:84:85:8e:28:7a:e2:aa:b6:cb:55:
78:4e:39:b4:6a:6c:e9:40:0c:d1:b3:91:5a:13:d5:af:5f:cc:
9b:44:7a:cb:82:6c:5f:ee:31:cc:c7:dc:51:a3:b7:0b:1d:f7:
6d:f0:62:94:8a:47:e5:c5:7e:73:06:86:9b:60:7a:07:56:93:
3c:3c:26:7f:21:5e:e1:4f:54:e3:a8:4a:ad:0b:00:ff:68:24:
26:ff:bd:af:72:3e:af:46:f3:23:02:a3:43:82:b5:f1:89:47:
18:09:a0:bb:3d:5c:52:ba:58:19:df:db:5a:b0:28:ed:5e:d9:
2e:19:25:fe:c3:df:c1:80:7d:52:d9:99:be:37:54:7a:74:49:
72:14:63:d5:ad:c4:9e:e8:05:46:48:78:6e:7f:d0:c5:07:2f:
e2:80:7d:b9:66:b4:9e:87:c3:ca:9b:f3:21:5e:90:76:41:6e:
74:e7:e3:39:8c:db:76:48:e9:4d:6f:62:ef:50:c4:9f:ba:4c:
cc:b4:32:7b:f0:7b:73:c1:8c:d3:da:85:95:e3:37:a0:3e:71:
60:0d:f3:09:da:40:39:20:a7:f1:ab:3f:d4:4e:29:08:d9:49:
4d:a3:0a:21:e7:a6:48:eb:7d:69:04:bb:1b:8b:0b:48:d2:80:
45:de:74:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRyP7AdNaishZwf6Qm/apXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGNmODgxNzc0NDJhNTRmMzIxYjhmYTgwYjZjZjVkZjQw
NGNmZjYwHhcNMjYwOTI0MDUwMDA1WhcNMjYwOTI1MDUwMDA1WjAzMTEwLwYDVQQD
EygzYmQ4MTEwNDkwY2QwM2VlNTAyNmM2ZTZlMmM2MWE5ODU1YjRhMzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KGDwhFNo6cgNHNiyP9qxgxDQB7R
wElo8LbwFttV0FC4WfAAQ4kMPxLYo0/fckJR0c9EE87a8SlQLuy7hI8SFOSoeHqS
1LTl844OeoNuDSb38xDF2XJd/UZZatgGSJ7YFdgEPBZSUcNeOkro86H95c5Y3oYg
2sw91RyXOCwkwSuS4wsF0KG75nHZXNP0OPOmmyP0XMa6OnFwD8PcXFwGz7BBlEUA
bR/mCZXg+ltRqDCPNyzNEVrcJlkj7S2lj0/UUvnUjLCp/VTjjue3rZSidGCu1VpR
N1dbzkL2E3PG9J0Ogx7x04Eajz7tO8kKpSh+Dy4/XyIj92Hm60LwlB2z/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvYEQSQzQPuUCbG5uLGGphVtKNaMB8GA1UdIwQY
MBaAFDxM+IF3RCpU8yG4+oC2z130BM/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTkt
NzAwZTMwMjdmNjIzLzEvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTktNzAwZTMwMjdmNjIz
LzEvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyMwr084
naeEhY4oeuKqtstVeE45tGps6UAM0bORWhPVr1/Mm0R6y4JsX+4xzMfcUaO3Cx33
bfBilIpH5cV+cwaGm2B6B1aTPDwmfyFe4U9U46hKrQsA/2gkJv+9r3I+r0bzIwKj
Q4K18YlHGAmguz1cUrpYGd/bWrAo7V7ZLhkl/sPfwYB9UtmZvjdUenRJchRj1a3E
nugFRkh4bn/QxQcv4oB9uWa0nofDypvzIV6QdkFudOfjOYzbdkjpTW9i71DEn7pM
zLQye/B7c8GM09qFleM3oD5xYA3zCdpAOSCn8as/1E4pCNlJTaMKIeemSOt9aQS7
G4sLSNKARd50UQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:27:00 2026 by rpki-client