Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: 3vr5Lgvp+hyJN7RUO/cN48ggQpKoQ6hShk/NX5n4mz0=
Subject key identifier: 8D:83:E5:9D:11:97:0F:3A:A1:9B:C0:08:07:39:B7:43:3C:7F:0A:16
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 019D273AFFB4FD36F930CA2712E2BFAE414E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 082F
Signing time: Wed 25 Mar 2026 23:01:11 +0000
Manifest this update: Wed 25 Mar 2026 23:01:11 +0000
Manifest next update: Thu 26 Mar 2026 23:01:11 +0000
Files and hashes: 1: clGNCBZAUsZmUY2Yr9tTeA-xspg.roa (hash: 5vbfK5sSOuwTJdbsyPF/pmsdysNhxTsWqZlPG/oHPeQ=)
2: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: /7dQ84N+L+ofkVW8yy4yGg3GSjnMLtH/P/pI5rABR90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ff:b4:fd:36:f9:30:ca:27:12:e2:bf:ae:41:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Mar 25 23:01:11 2026 GMT
Not After : Mar 26 23:01:11 2026 GMT
Subject: CN=8d83e59d11970f3aa19bc0080739b7433c7f0a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:54:02:e1:0c:ef:3d:7a:7d:5b:37:da:02:
dc:99:5a:b3:5c:b8:80:fc:fa:cb:b4:42:ee:1e:04:
36:bd:79:41:2e:09:61:5d:ad:18:43:60:f1:d7:bd:
a5:cf:1d:ae:b9:ca:e1:b8:4b:fc:bf:18:08:d5:4d:
79:a8:b7:ef:89:76:fd:4c:75:af:29:ba:90:5e:37:
2c:3b:87:de:4f:fc:8e:46:06:9d:15:b0:53:4c:9a:
ae:a7:9c:e5:10:9c:de:59:66:b9:17:6e:be:f6:3b:
c1:93:d1:17:69:fa:8b:19:46:6d:dd:fe:94:67:fe:
e4:e6:21:34:01:eb:fe:48:d8:80:fb:f1:2f:f8:3a:
83:82:4a:69:8b:a1:14:a3:00:2e:d8:fb:de:a6:9e:
63:2b:60:b7:5d:c1:d6:10:8e:1a:16:30:8c:ef:bc:
d4:f8:b1:58:22:95:70:f3:33:e7:2d:00:0b:f2:88:
9a:cc:50:bd:19:fd:61:4d:9a:ac:36:39:71:b0:18:
23:6c:1c:e8:ba:50:31:67:59:64:c3:0f:1b:d0:77:
79:4c:75:27:e6:9a:8b:09:ca:c1:48:cd:d1:db:2f:
e5:6d:df:ca:24:00:05:27:c3:65:0a:74:f3:38:db:
d2:1c:44:c4:14:5b:70:98:9a:79:a9:cf:06:c0:ab:
18:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:83:E5:9D:11:97:0F:3A:A1:9B:C0:08:07:39:B7:43:3C:7F:0A:16
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:15:ec:41:f0:15:03:90:0f:29:e5:1d:cf:85:02:5b:41:f9:
97:55:4a:17:07:7a:35:0b:34:4c:86:ef:0f:54:5b:90:54:4e:
30:0c:c3:e2:8a:ae:8b:58:aa:8b:17:ee:fd:2c:53:c5:85:6e:
3e:f0:c7:c3:a2:95:dc:54:7d:a2:84:6a:97:cb:35:f4:07:2b:
d7:c4:6a:f3:f2:ed:25:ad:20:c4:d8:9e:d8:6e:85:d2:4f:fa:
77:60:d6:77:9f:d5:67:cd:e5:2e:a4:a7:c7:38:53:66:b5:b9:
18:9e:f8:6a:ee:3b:d8:ec:6e:95:50:ca:6f:79:78:99:b4:71:
8b:21:84:e1:2e:ba:c8:84:c6:d4:a7:36:6e:57:8b:a4:21:12:
b8:ce:20:39:25:5b:cd:de:c1:8a:85:a8:53:9c:4b:51:94:3c:
9d:3c:69:a1:83:ff:8d:c4:ba:51:74:84:9a:59:7f:eb:3e:c9:
a8:42:1c:85:ba:c2:21:c4:77:e5:fd:2c:a3:02:93:a3:77:1d:
da:69:cf:9a:d0:90:1d:55:b5:ba:30:24:8f:e0:1b:c8:60:1e:
fb:3c:7f:d8:f0:4b:16:a2:b4:23:00:83:ee:b5:5f:76:5e:77:
fb:f6:fe:3e:29:f1:6d:0e:14:e8:83:d1:ce:77:29:f1:49:54:
b0:31:ce:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOv+0/Tb5MMonEuK/rkFOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YTM3ODc4YzE0ZjIxNmMzMjY0OTgxOWVhNDI4YTU4MjI1
NTA0ZmIwHhcNMjYwMzI1MjMwMTExWhcNMjYwMzI2MjMwMTExWjAzMTEwLwYDVQQD
Eyg4ZDgzZTU5ZDExOTcwZjNhYTE5YmMwMDgwNzM5Yjc0MzNjN2YwYTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDhUAuEM7z16fVs32gLcmVqzXLiA
/PrLtELuHgQ2vXlBLglhXa0YQ2Dx172lzx2uucrhuEv8vxgI1U15qLfviXb9THWv
KbqQXjcsO4feT/yORgadFbBTTJqup5zlEJzeWWa5F26+9jvBk9EXafqLGUZt3f6U
Z/7k5iE0Aev+SNiA+/Ev+DqDgkppi6EUowAu2Pvepp5jK2C3XcHWEI4aFjCM77zU
+LFYIpVw8zPnLQAL8oiazFC9Gf1hTZqsNjlxsBgjbBzoulAxZ1lkww8b0Hd5THUn
5pqLCcrBSM3R2y/lbd/KJAAFJ8NlCnTzONvSHETEFFtwmJp5qc8GwKsYmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2D5Z0Rlw86oZvACAc5t0M8fwoWMB8GA1UdIwQY
MBaAFKSjeHjBTyFsMmSYGepCilgiVQT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAt
NGIwZTBhYzhkMjI5LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAtNGIwZTBhYzhkMjI5
LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxXsQfAV
A5APKeUdz4UCW0H5l1VKFwd6NQs0TIbvD1RbkFROMAzD4oqui1iqixfu/SxTxYVu
PvDHw6KV3FR9ooRql8s19Acr18Rq8/LtJa0gxNie2G6F0k/6d2DWd5/VZ83lLqSn
xzhTZrW5GJ74au472OxulVDKb3l4mbRxiyGE4S66yITG1Kc2bleLpCESuM4gOSVb
zd7BioWoU5xLUZQ8nTxpoYP/jcS6UXSEmll/6z7JqEIchbrCIcR35f0sowKTo3cd
2mnPmtCQHVW1ujAkj+AbyGAe+zx/2PBLFqK0IwCD7rVfdl53+/b+PinxbQ4U6IPR
zncp8UlUsDHOEg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:57 2026 by rpki-client