Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
File: pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft (raw, json)
Hash identifier: 2ic7x285PTMsrAsJpuVFB1cmzLbmc2wZqL2itCMUHI8=
Subject key identifier: D0:02:FD:C4:6C:7A:1E:84:42:48:E0:B1:4E:E2:04:FA:41:0F:C0:2F
Authority key identifier: A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
Certificate issuer: /CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Certificate serial: 019D28F2B1A6179A900CF06591191B824FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 07:01:26 +0000
Manifest this update: Thu 26 Mar 2026 07:01:26 +0000
Manifest next update: Fri 27 Mar 2026 07:01:26 +0000
Files and hashes: 1: pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl (hash: o6JBg2rcjrZ0ltrqtg3WFXyfMAZ1llLhmHqGQtlCaLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:b1:a6:17:9a:90:0c:f0:65:91:19:1b:82:4f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Validity
Not Before: Mar 26 07:01:26 2026 GMT
Not After : Mar 27 07:01:26 2026 GMT
Subject: CN=d002fdc46c7a1e844248e0b14ee204fa410fc02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:7a:0c:d9:3c:bd:8b:62:4a:aa:85:c2:6b:
0f:22:08:74:43:87:e8:96:07:c3:88:d8:9c:10:e8:
7b:83:cd:19:5a:96:78:77:e1:cf:2c:f8:4e:70:4c:
c8:48:5c:78:0c:83:da:28:b7:96:94:b0:ea:16:45:
ae:9e:d1:c9:7f:e4:be:ab:d9:3c:f4:21:a2:54:9d:
02:41:ea:16:ee:af:0d:88:9e:3a:4b:a2:79:42:e6:
98:b6:8c:4e:7e:60:49:31:2e:95:0e:3e:d8:72:52:
35:eb:e8:d2:ee:1e:75:94:ae:de:ff:86:7c:b0:ea:
8e:f4:c1:f8:ea:26:19:4d:27:6e:bc:94:66:94:f3:
be:5b:64:14:48:53:73:a6:0c:68:fc:9a:0e:d5:15:
2d:d6:32:86:33:f2:1c:80:e4:13:d5:04:63:40:ec:
15:1c:59:11:34:2f:7a:dc:ab:bf:71:f9:df:aa:24:
9e:f0:84:29:66:3f:64:31:73:0d:02:a2:89:21:a0:
49:28:83:1d:d1:45:07:23:f0:31:37:08:5d:a1:75:
dd:71:73:5e:52:ea:f2:4f:a8:16:d6:94:10:83:5a:
45:83:35:c8:08:a5:b0:e3:00:37:db:b2:a0:6a:7e:
6b:ee:42:df:88:cb:8e:e1:54:64:0a:c8:0b:19:cf:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:02:FD:C4:6C:7A:1E:84:42:48:E0:B1:4E:E2:04:FA:41:0F:C0:2F
X509v3 Authority Key Identifier:
keyid:A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:25:c8:af:15:95:37:10:19:6c:ff:3f:be:d5:0a:a0:33:eb:
79:59:c3:c3:39:d5:b9:ba:a2:4f:5a:f2:7c:a3:5c:3e:22:2e:
e5:c3:43:7b:ec:eb:e7:6c:a8:ee:d0:61:59:e1:de:98:34:0b:
88:97:be:03:59:ea:99:8b:2e:40:88:98:3b:92:2c:09:8a:0b:
54:9b:0e:7f:01:a7:d0:7c:57:f8:d2:bb:a9:b2:14:fa:ca:42:
9a:dd:dd:c0:44:ca:d3:41:a0:d2:3b:40:c7:3d:86:d3:2a:05:
bc:ea:1e:79:7d:9e:e5:5d:06:d8:35:a2:3b:0f:92:d8:c8:70:
92:00:7c:7e:5a:8f:5d:23:eb:db:2c:f1:03:ca:f8:e9:66:b4:
92:ed:21:46:ea:ac:37:71:1e:7b:3f:a7:da:25:f3:31:62:1c:
88:f7:4e:74:83:66:fa:63:bb:78:2b:5c:bc:bd:45:53:91:52:
6c:8b:b1:40:d5:4d:ea:91:25:da:ac:ed:cf:59:a4:98:fe:69:
a7:70:03:e2:82:b7:2f:ff:30:44:a5:81:2d:4d:4b:94:b8:09:
ed:af:b1:1f:ec:87:bf:20:7a:ef:d3:12:bd:33:b3:33:a9:39:
85:71:d9:72:1c:54:e7:87:e0:a9:02:c1:fb:ea:8b:d2:64:27:
47:16:82:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8rGmF5qQDPBlkRkbgk+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MWUyZGJiZjAxOWQ4ZDM3NDdlNTczMDM5MjU1NGRmMTFm
NmVkOTMwHhcNMjYwMzI2MDcwMTI2WhcNMjYwMzI3MDcwMTI2WjAzMTEwLwYDVQQD
EyhkMDAyZmRjNDZjN2ExZTg0NDI0OGUwYjE0ZWUyMDRmYTQxMGZjMDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwZ6DNk8vYtiSqqFwmsPIgh0Q4fo
lgfDiNicEOh7g80ZWpZ4d+HPLPhOcEzISFx4DIPaKLeWlLDqFkWuntHJf+S+q9k8
9CGiVJ0CQeoW7q8NiJ46S6J5QuaYtoxOfmBJMS6VDj7YclI16+jS7h51lK7e/4Z8
sOqO9MH46iYZTSduvJRmlPO+W2QUSFNzpgxo/JoO1RUt1jKGM/IcgOQT1QRjQOwV
HFkRNC963Ku/cfnfqiSe8IQpZj9kMXMNAqKJIaBJKIMd0UUHI/AxNwhdoXXdcXNe
UuryT6gW1pQQg1pFgzXICKWw4wA327Kgan5r7kLfiMuO4VRkCsgLGc9bVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAC/cRseh6EQkjgsU7iBPpBD8AvMB8GA1UdIwQY
MBaAFKUeLbvwGdjTdH5XMDklVN8R9u2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFI0dHVfQVoyTk4wZmxjd09TVlUzeEgyN1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNWZjMDQtZmY4Ni00Y2VkLTkxYzIt
MGUzODZhM2RiZTZhLzEvcFI0dHVfQVoyTk4wZmxjd09TVlUzeEgyN1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iNWZjMDQtZmY4Ni00Y2VkLTkxYzItMGUzODZhM2RiZTZh
LzEvcFI0dHVfQVoyTk4wZmxjd09TVlUzeEgyN1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyXIrxWV
NxAZbP8/vtUKoDPreVnDwznVubqiT1ryfKNcPiIu5cNDe+zr52yo7tBhWeHemDQL
iJe+A1nqmYsuQIiYO5IsCYoLVJsOfwGn0HxX+NK7qbIU+spCmt3dwETK00Gg0jtA
xz2G0yoFvOoeeX2e5V0G2DWiOw+S2MhwkgB8flqPXSPr2yzxA8r46Wa0ku0hRuqs
N3Eeez+n2iXzMWIciPdOdINm+mO7eCtcvL1FU5FSbIuxQNVN6pEl2qztz1mkmP5p
p3AD4oK3L/8wRKWBLU1LlLgJ7a+xH+yHvyB679MSvTOzM6k5hXHZchxU54fgqQLB
++qL0mQnRxaCXg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:20:35 2026 by rpki-client