
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: SXh/Yfixg0aYylhOD55Tde/lUwm9I4PfuNlz1iGNZVI=
Subject key identifier: 96:2D:9E:F7:5A:3E:A2:9F:D0:1A:1A:F3:AA:E1:AB:46:FB:32:2F:C8
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 019D2AE0FC4431FDD62E6642705B5698FF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 075E
Signing time: Thu 26 Mar 2026 16:01:20 +0000
Manifest this update: Thu 26 Mar 2026 16:01:20 +0000
Manifest next update: Fri 27 Mar 2026 16:01:20 +0000
Files and hashes: 1: 1FR5ZpZwPSxvOqUqxpmnyVdoI2Y.roa (hash: Uc2np6So5kLYsA5QE2lGHUyNPrOYT/fABQqkzzDnXDo=)
2: Z48YcacIdaFOrbU7hl0nBrBdOnE.roa (hash: mNCCj8yHct24e5aYcSn4spJlToJ33LdwEpzI7Aa7J4o=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: Y/FE8zKmv6IG8l2IJoF6qRu06KWzbDxi3Zav+14Vte8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:fc:44:31:fd:d6:2e:66:42:70:5b:56:98:ff:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Mar 26 16:01:20 2026 GMT
Not After : Mar 27 16:01:20 2026 GMT
Subject: CN=962d9ef75a3ea29fd01a1af3aae1ab46fb322fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:bc:81:a3:eb:47:cd:21:cb:a4:25:39:a7:
10:b6:5c:45:a2:2b:bd:9b:60:03:9f:a8:05:a1:37:
22:f8:ac:1b:6f:a5:fa:82:16:fc:5b:a5:11:b0:89:
46:d6:8c:7d:cc:7f:67:80:ea:9d:45:52:11:e1:a5:
17:e3:6b:23:0b:18:4a:12:eb:e4:d1:57:75:81:02:
4f:2f:57:7f:b7:c9:ca:60:79:c7:46:5b:c1:f5:a5:
d8:d2:1a:15:c4:63:f7:ef:dc:4c:71:b2:f6:07:7c:
ee:f1:00:39:be:61:03:6a:0c:99:63:62:65:19:26:
0e:c3:f2:7c:29:21:34:a7:23:92:71:cb:78:98:fd:
a6:af:1f:5a:37:44:a1:df:eb:8e:17:6c:c7:50:a8:
a1:ae:6f:a9:61:78:0e:00:77:2d:10:7d:83:c3:0d:
da:00:73:49:05:a5:12:05:be:05:51:a6:2d:11:a0:
44:23:8a:af:20:45:fa:6c:2b:66:8d:cf:05:67:71:
8d:17:1c:45:84:4d:2b:13:55:27:cf:6d:2c:d3:a9:
d6:da:fa:e4:a7:aa:4e:77:35:8a:f8:63:a8:69:df:
b0:31:5f:99:ed:16:54:01:41:b6:1f:35:bf:e0:71:
ad:69:14:50:d1:ee:d6:13:37:5e:e1:30:5a:ae:16:
47:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2D:9E:F7:5A:3E:A2:9F:D0:1A:1A:F3:AA:E1:AB:46:FB:32:2F:C8
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0c:57:2c:56:f5:f4:e1:a3:96:4d:c2:8f:22:46:48:6b:84:
95:09:22:84:4a:1a:31:53:20:01:f3:17:9e:5b:d3:44:e6:80:
a9:44:fd:43:7e:4d:88:33:c3:cf:fe:a7:4a:35:13:fd:ab:f6:
8c:be:17:b4:46:ae:92:63:ee:fd:1f:7b:7d:0e:f0:d6:42:47:
b1:cd:5b:94:0c:79:7c:74:cb:5a:b8:75:72:d9:45:dd:67:8d:
16:96:55:dd:27:49:29:f5:20:5e:94:3d:cc:85:64:fd:67:9e:
ea:a7:8c:20:6c:fa:0c:52:ae:a6:e8:7f:ea:61:9a:ec:d9:04:
aa:80:c9:4d:80:5c:50:ae:e4:a1:d9:1f:15:7b:f9:5c:20:16:
81:d9:85:be:df:81:9f:08:68:89:56:a1:94:3d:87:70:86:20:
88:e1:b0:01:b7:eb:c0:1f:fc:c4:97:25:33:3a:c7:d8:04:ad:
74:8e:ec:37:f6:9c:b8:42:2b:d1:08:83:33:36:02:c5:bb:f0:
0c:10:42:7c:22:22:d9:07:bf:7b:17:54:ed:02:33:e6:79:96:
c4:ce:22:57:0a:86:b4:e2:e8:1c:53:b7:34:48:10:d5:6e:82:
30:d3:e4:9d:60:bd:e6:22:d4:bf:30:40:2b:df:cc:2e:60:39:
2b:97:ee:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4PxEMf3WLmZCcFtWmP8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MjExODY0MTNiYmRmZGUyMGU1OTJmYmU1NTUzZGU3Zjk0
ZTU5ODcwHhcNMjYwMzI2MTYwMTIwWhcNMjYwMzI3MTYwMTIwWjAzMTEwLwYDVQQD
Eyg5NjJkOWVmNzVhM2VhMjlmZDAxYTFhZjNhYWUxYWI0NmZiMzIyZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsS8gaPrR80hy6QlOacQtlxFoiu9
m2ADn6gFoTci+Kwbb6X6ghb8W6URsIlG1ox9zH9ngOqdRVIR4aUX42sjCxhKEuvk
0Vd1gQJPL1d/t8nKYHnHRlvB9aXY0hoVxGP379xMcbL2B3zu8QA5vmEDagyZY2Jl
GSYOw/J8KSE0pyOScct4mP2mrx9aN0Sh3+uOF2zHUKihrm+pYXgOAHctEH2Dww3a
AHNJBaUSBb4FUaYtEaBEI4qvIEX6bCtmjc8FZ3GNFxxFhE0rE1Unz20s06nW2vrk
p6pOdzWK+GOoad+wMV+Z7RZUAUG2HzW/4HGtaRRQ0e7WEzde4TBarhZH6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYtnvdaPqKf0Boa86rhq0b7Mi/IMB8GA1UdIwQY
MBaAFKYhGGQTu9/eIOWS++VVPef5TlmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMzk2YWQtZGRhNy00NjAwLThmNjYt
ZjU2Yzc3OWIxNDJmLzEvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wMzk2YWQtZGRhNy00NjAwLThmNjYtZjU2Yzc3OWIxNDJm
LzEvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAxXLFb1
9OGjlk3CjyJGSGuElQkihEoaMVMgAfMXnlvTROaAqUT9Q35NiDPDz/6nSjUT/av2
jL4XtEaukmPu/R97fQ7w1kJHsc1blAx5fHTLWrh1ctlF3WeNFpZV3SdJKfUgXpQ9
zIVk/Wee6qeMIGz6DFKupuh/6mGa7NkEqoDJTYBcUK7kodkfFXv5XCAWgdmFvt+B
nwhoiVahlD2HcIYgiOGwAbfrwB/8xJclMzrH2AStdI7sN/acuEIr0QiDMzYCxbvw
DBBCfCIi2Qe/exdU7QIz5nmWxM4iVwqGtOLoHFO3NEgQ1W6CMNPknWC95iLUvzBA
K9/MLmA5K5fu+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:32:18 2026 by rpki-client