Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/468e13-a3dc-4c7e-9eb3-832651e60c3b/1/PonHvJeq8NwDF2adR1GxMaqTK40.mft
File: PonHvJeq8NwDF2adR1GxMaqTK40.mft (raw, json)
Hash identifier: 8CdF/TbcUayk3E2RSg4Fk2808lie5vps5BN7nigz7I8=
Subject key identifier: 3A:D7:6F:B6:2E:10:24:8E:EB:F3:17:44:AC:F0:AD:E8:74:E5:AE:32
Authority key identifier: 3E:89:C7:BC:97:AA:F0:DC:03:17:66:9D:47:51:B1:31:AA:93:2B:8D
Certificate issuer: /CN=3e89c7bc97aaf0dc0317669d4751b131aa932b8d
Certificate serial: 019D284E35F8B8CD22F93FF31785F9DBDDE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PonHvJeq8NwDF2adR1GxMaqTK40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/468e13-a3dc-4c7e-9eb3-832651e60c3b/1/PonHvJeq8NwDF2adR1GxMaqTK40.mft
Manifest number: 018B
Signing time: Thu 26 Mar 2026 04:01:47 +0000
Manifest this update: Thu 26 Mar 2026 04:01:47 +0000
Manifest next update: Fri 27 Mar 2026 04:01:47 +0000
Files and hashes: 1: PonHvJeq8NwDF2adR1GxMaqTK40.crl (hash: JUvi96QpvTF10469GwwpM+79DSA3mUjpBre5lUH4S2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/468e13-a3dc-4c7e-9eb3-832651e60c3b/1/PonHvJeq8NwDF2adR1GxMaqTK40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/468e13-a3dc-4c7e-9eb3-832651e60c3b/1/PonHvJeq8NwDF2adR1GxMaqTK40.mft
rsync://rpki.ripe.net/repository/DEFAULT/PonHvJeq8NwDF2adR1GxMaqTK40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:35:f8:b8:cd:22:f9:3f:f3:17:85:f9:db:dd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e89c7bc97aaf0dc0317669d4751b131aa932b8d
Validity
Not Before: Mar 26 04:01:47 2026 GMT
Not After : Mar 27 04:01:47 2026 GMT
Subject: CN=3ad76fb62e10248eebf31744acf0ade874e5ae32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:7c:af:f2:67:21:9e:76:41:c8:dd:ac:11:
ee:b9:b8:0f:2a:b8:e4:85:41:54:b8:9a:d8:63:96:
a1:64:1f:65:c8:9a:33:be:75:03:2d:ab:42:8a:16:
de:c7:6e:77:50:e0:c3:30:67:30:ae:65:1c:75:d3:
2f:e2:d0:44:9b:4b:77:e4:48:72:ab:f6:2c:c3:a5:
5d:51:b5:1e:82:91:7d:87:15:21:4a:ad:9f:74:7a:
e7:54:1e:c1:22:0a:f8:56:5d:af:e9:6f:99:dd:03:
68:19:aa:a6:8f:0e:1c:5c:e3:e9:d6:8d:dc:de:56:
46:0a:f8:88:0a:82:23:16:95:32:3e:50:cc:aa:70:
d6:36:7e:61:11:f6:33:59:d9:64:5f:9d:62:5a:ed:
fe:00:67:83:5d:27:2f:ce:9f:08:e9:03:17:47:7d:
28:a5:ed:34:da:6f:97:e3:7c:b8:79:70:6d:74:3a:
7b:a8:34:b6:90:2d:06:3c:f4:d2:1b:01:5d:36:f3:
22:c5:3f:fc:67:05:ca:7e:c5:68:51:69:80:c2:55:
c0:77:1f:6d:7d:b3:d5:e9:0a:26:c6:79:5b:53:73:
ff:9a:b8:36:73:68:99:49:4b:8c:17:0c:2c:ea:aa:
1b:35:12:85:dc:ce:46:58:38:b0:fe:16:98:96:41:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D7:6F:B6:2E:10:24:8E:EB:F3:17:44:AC:F0:AD:E8:74:E5:AE:32
X509v3 Authority Key Identifier:
keyid:3E:89:C7:BC:97:AA:F0:DC:03:17:66:9D:47:51:B1:31:AA:93:2B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PonHvJeq8NwDF2adR1GxMaqTK40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/468e13-a3dc-4c7e-9eb3-832651e60c3b/1/PonHvJeq8NwDF2adR1GxMaqTK40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/468e13-a3dc-4c7e-9eb3-832651e60c3b/1/PonHvJeq8NwDF2adR1GxMaqTK40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b3:42:cc:3c:f0:3e:e5:95:f7:5b:f7:03:92:29:ef:85:f5:
f1:3d:58:cb:60:eb:49:46:4d:aa:c0:65:02:d1:4f:f2:58:af:
4c:13:7a:76:2c:83:46:36:fb:66:ca:fa:87:81:30:6e:83:4b:
fb:73:dd:06:4e:45:aa:0c:a2:82:e1:20:fd:81:2b:ff:76:6e:
92:72:b7:0f:7e:c9:3d:85:e6:a5:ed:ee:c0:f3:d7:c2:d4:d8:
56:55:7e:22:6e:98:fe:dc:f3:3a:6e:2c:af:a0:7c:24:da:fc:
39:b8:0c:47:f2:e5:cc:32:87:f6:65:b2:93:d4:10:95:ba:4e:
d0:ee:fc:6a:e7:c8:e6:a1:28:93:04:5d:3f:47:bf:ca:a3:11:
3f:9c:cc:9a:49:3c:c7:3a:ed:29:ce:55:9e:49:dc:66:59:57:
18:e4:d3:46:3f:7a:5b:f6:a2:35:1d:05:01:8b:56:82:c5:e7:
65:55:38:3d:5f:28:8f:43:dd:9f:65:04:f9:5a:a1:07:6c:b1:
bc:a9:04:19:2a:01:c6:a3:a7:14:eb:91:02:7b:a7:4a:ba:b3:
2a:02:8e:bf:e5:1a:84:0e:1d:0e:78:62:dc:e9:02:2d:08:93:
4e:85:6b:4a:3a:b9:15:5f:26:31:eb:1f:32:56:3c:d9:a0:9a:
ca:b4:b1:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTjX4uM0i+T/zF4X5293pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlODljN2JjOTdhYWYwZGMwMzE3NjY5ZDQ3NTFiMTMxYWE5
MzJiOGQwHhcNMjYwMzI2MDQwMTQ3WhcNMjYwMzI3MDQwMTQ3WjAzMTEwLwYDVQQD
EygzYWQ3NmZiNjJlMTAyNDhlZWJmMzE3NDRhY2YwYWRlODc0ZTVhZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8J8r/JnIZ52QcjdrBHuubgPKrjk
hUFUuJrYY5ahZB9lyJozvnUDLatCihbex253UODDMGcwrmUcddMv4tBEm0t35Ehy
q/Ysw6VdUbUegpF9hxUhSq2fdHrnVB7BIgr4Vl2v6W+Z3QNoGaqmjw4cXOPp1o3c
3lZGCviICoIjFpUyPlDMqnDWNn5hEfYzWdlkX51iWu3+AGeDXScvzp8I6QMXR30o
pe002m+X43y4eXBtdDp7qDS2kC0GPPTSGwFdNvMixT/8ZwXKfsVoUWmAwlXAdx9t
fbPV6QomxnlbU3P/mrg2c2iZSUuMFwws6qobNRKF3M5GWDiw/haYlkEe/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrXb7YuECSO6/MXRKzwreh05a4yMB8GA1UdIwQY
MBaAFD6Jx7yXqvDcAxdmnUdRsTGqkyuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG9uSHZKZXE4TndERjJhZFIxR3hNYXFUSzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80NjhlMTMtYTNkYy00YzdlLTllYjMt
ODMyNjUxZTYwYzNiLzEvUG9uSHZKZXE4TndERjJhZFIxR3hNYXFUSzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80NjhlMTMtYTNkYy00YzdlLTllYjMtODMyNjUxZTYwYzNi
LzEvUG9uSHZKZXE4TndERjJhZFIxR3hNYXFUSzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7NCzDzw
PuWV91v3A5Ip74X18T1Yy2DrSUZNqsBlAtFP8livTBN6diyDRjb7Zsr6h4EwboNL
+3PdBk5FqgyiguEg/YEr/3ZuknK3D37JPYXmpe3uwPPXwtTYVlV+Im6Y/tzzOm4s
r6B8JNr8ObgMR/LlzDKH9mWyk9QQlbpO0O78aufI5qEokwRdP0e/yqMRP5zMmkk8
xzrtKc5VnkncZllXGOTTRj96W/aiNR0FAYtWgsXnZVU4PV8oj0Pdn2UE+VqhB2yx
vKkEGSoBxqOnFOuRAnunSrqzKgKOv+UahA4dDnhi3OkCLQiTToVrSjq5FV8mMesf
MlY82aCayrSxpA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:35 2026 by rpki-client