Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
File: P5oSEPUJkiOdOn8uXoATtatJH_8.mft (raw, json)
Hash identifier: c6KXs3LMjUwuxHMashtJ7N19ACB5KAZjzkeC+9/ynxY=
Subject key identifier: 4F:C0:23:5C:9E:8E:B5:80:E1:74:80:76:1E:2C:83:62:79:89:59:01
Authority key identifier: 3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
Certificate issuer: /CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Certificate serial: 019D284D8C2CD04D4B747DC8EF183BCF7864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
Manifest number: 1455
Signing time: Thu 26 Mar 2026 04:01:03 +0000
Manifest this update: Thu 26 Mar 2026 04:01:03 +0000
Manifest next update: Fri 27 Mar 2026 04:01:03 +0000
Files and hashes: 1: P5oSEPUJkiOdOn8uXoATtatJH_8.crl (hash: ykXwDv1J4wT5jxFAe9TOdHJrxk1RFmNT7lOebtL27tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:8c:2c:d0:4d:4b:74:7d:c8:ef:18:3b:cf:78:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Validity
Not Before: Mar 26 04:01:03 2026 GMT
Not After : Mar 27 04:01:03 2026 GMT
Subject: CN=4fc0235c9e8eb580e17480761e2c836279895901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:cf:56:d2:9f:8c:13:de:7c:d1:4a:e9:6f:
99:e0:f8:a0:e8:75:3b:7c:28:c3:00:51:38:99:91:
78:6b:8c:24:19:90:fb:a8:14:a3:f3:22:3c:d5:a2:
86:3e:48:1c:59:e3:e8:61:e3:91:89:82:7d:05:f4:
89:bd:80:e0:23:28:7a:50:8d:e9:5d:29:95:f3:1e:
62:93:ae:e5:7e:97:36:0f:9c:f1:87:5d:30:75:c7:
31:82:02:74:ad:8e:48:cc:3c:7b:86:9b:56:f0:9f:
bc:75:11:83:81:f8:da:b8:36:9a:a5:86:ad:f2:a9:
06:89:cd:38:32:d7:01:41:6d:f6:16:2e:a5:36:e2:
b5:12:af:58:8b:72:21:35:8b:82:e7:97:9c:27:35:
ea:f6:90:c7:89:e3:72:f9:56:b4:59:52:25:84:fe:
7e:49:9a:02:d7:3b:80:0d:91:d1:29:d2:1c:fa:5b:
77:ca:63:5d:69:cd:79:81:1a:15:55:93:2a:ce:57:
0d:a0:54:cc:20:d5:ae:87:fe:d9:3e:e3:9c:72:55:
19:49:ae:b2:0d:76:1c:1b:8f:e6:52:88:ee:d5:b4:
4f:ff:95:2f:0f:17:25:6b:66:72:ac:8e:cd:da:27:
54:51:8a:78:f8:64:83:98:81:b2:07:94:43:21:97:
9b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C0:23:5C:9E:8E:B5:80:E1:74:80:76:1E:2C:83:62:79:89:59:01
X509v3 Authority Key Identifier:
keyid:3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:97:c7:8f:4d:3c:d9:78:42:37:11:6b:e8:44:cb:93:0a:3f:
42:bb:83:da:21:01:38:09:c5:04:c2:c7:b4:b2:d2:82:45:00:
da:81:8b:03:76:c1:04:7d:fd:28:0d:f0:3f:d9:78:a4:18:e1:
9f:f3:4d:ef:7b:26:03:d3:ee:01:cd:81:e0:5f:cd:d6:5d:2c:
53:08:8c:78:59:ab:ed:8d:34:4e:f9:8b:9b:73:09:b3:e1:02:
2a:7b:40:48:c1:77:99:8c:92:7d:aa:66:26:f4:64:a1:ec:1a:
fb:d5:fe:1c:ce:25:d7:0e:3b:ec:55:41:f1:d0:ee:72:d1:da:
41:5d:4e:9a:c9:1e:45:56:5a:64:a9:37:87:13:08:e7:69:a8:
07:a4:85:f7:41:c8:ab:9c:c4:00:d4:87:a5:20:9d:0a:37:72:
21:c5:6b:a3:2c:e8:d6:d3:08:3d:74:f5:94:01:de:86:91:90:
f1:22:f9:fb:05:77:ec:6a:5a:c9:cf:d9:73:55:37:c5:2e:44:
83:c6:4e:4a:01:77:2e:16:54:66:1f:7c:3a:76:07:95:ae:aa:
ce:ce:72:fc:35:9e:95:a0:77:1c:4f:31:cf:4f:e1:a0:22:b5:
c1:b8:43:a4:1f:5c:bf:16:b6:0d:6b:9e:18:ec:d8:21:3a:ed:
da:82:13:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTYws0E1LdH3I7xg7z3hkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOWExMjEwZjUwOTkyMjM5ZDNhN2YyZTVlODAxM2I1YWI0
OTFmZmYwHhcNMjYwMzI2MDQwMTAzWhcNMjYwMzI3MDQwMTAzWjAzMTEwLwYDVQQD
Eyg0ZmMwMjM1YzllOGViNTgwZTE3NDgwNzYxZTJjODM2Mjc5ODk1OTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/PPVtKfjBPefNFK6W+Z4Pig6HU7
fCjDAFE4mZF4a4wkGZD7qBSj8yI81aKGPkgcWePoYeORiYJ9BfSJvYDgIyh6UI3p
XSmV8x5ik67lfpc2D5zxh10wdccxggJ0rY5IzDx7hptW8J+8dRGDgfjauDaapYat
8qkGic04MtcBQW32Fi6lNuK1Eq9Yi3IhNYuC55ecJzXq9pDHieNy+Va0WVIlhP5+
SZoC1zuADZHRKdIc+lt3ymNdac15gRoVVZMqzlcNoFTMINWuh/7ZPuOcclUZSa6y
DXYcG4/mUoju1bRP/5UvDxcla2ZyrI7N2idUUYp4+GSDmIGyB5RDIZeb9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/AI1yejrWA4XSAdh4sg2J5iVkBMB8GA1UdIwQY
MBaAFD+aEhD1CZIjnTp/Ll6AE7WrSR//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNGE1ZTgtZjNiZi00MmY5LWEyODUt
YTg3MzRmNzAzYjk4LzEvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNGE1ZTgtZjNiZi00MmY5LWEyODUtYTg3MzRmNzAzYjk4
LzEvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZfHj008
2XhCNxFr6ETLkwo/QruD2iEBOAnFBMLHtLLSgkUA2oGLA3bBBH39KA3wP9l4pBjh
n/NN73smA9PuAc2B4F/N1l0sUwiMeFmr7Y00TvmLm3MJs+ECKntASMF3mYySfapm
JvRkoewa+9X+HM4l1w477FVB8dDuctHaQV1OmskeRVZaZKk3hxMI52moB6SF90HI
q5zEANSHpSCdCjdyIcVroyzo1tMIPXT1lAHehpGQ8SL5+wV37Gpayc/Zc1U3xS5E
g8ZOSgF3LhZUZh98OnYHla6qzs5y/DWelaB3HE8xz0/hoCK1wbhDpB9cvxa2DWue
GOzYITrt2oITqQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:53 2026 by rpki-client