Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
File: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft (raw, json)
Hash identifier: 4Ucw9e/JNW53Sh1HfRnVLOx0PsQtuDiw7qtn8im4htM=
Subject key identifier: 8A:6D:6A:3B:5A:78:6C:C9:A9:C2:B9:E4:D0:BD:37:0E:02:B5:29:8A
Authority key identifier: 3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90
Certificate issuer: /CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
Certificate serial: 01A1DDCC44522EE0774B4F60201B08A6C818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
Manifest number: 03B9
Signing time: Sun 15 Nov 2026 06:01:53 +0000
Manifest this update: Sun 15 Nov 2026 06:01:53 +0000
Manifest next update: Mon 16 Nov 2026 06:01:53 +0000
Files and hashes: 1: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl (hash: J2FYVZYZdcwQJtlkem9sWnjufwguBKG/H1dynzDsRYw=)
2: wiCmzHMmJI0asghERNxqN-MynS0.roa (hash: bcmBxTUeR+yh0Zn1PK7SL7wVYZreCWWh7r4c30KwASE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:44:52:2e:e0:77:4b:4f:60:20:1b:08:a6:c8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
Validity
Not Before: Nov 15 06:01:53 2026 GMT
Not After : Nov 16 06:01:53 2026 GMT
Subject: CN=8a6d6a3b5a786cc9a9c2b9e4d0bd370e02b5298a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:c8:e3:80:17:7f:c2:61:c2:c1:3e:0f:9b:
39:73:bc:39:d8:c1:61:44:fd:99:a5:47:22:0f:0e:
1e:26:f5:0b:40:25:7c:51:47:87:3e:dd:7f:20:cb:
e1:81:36:92:49:52:1a:3c:a1:fa:98:ec:5a:e5:5e:
2e:0e:06:d1:3d:a0:fa:73:9d:5d:bd:7b:a6:27:74:
0e:cf:1f:43:f3:fc:42:15:83:55:13:e9:3d:2f:40:
7b:df:e8:bf:c9:28:52:ed:50:dd:32:8d:f3:ae:06:
5c:25:8b:d1:19:39:e9:34:93:48:5f:13:a0:e4:15:
0e:db:d3:2c:5f:33:58:ef:4c:f6:c8:8c:c7:af:17:
18:cb:1c:ae:07:c1:36:4d:8e:dd:5a:dd:e8:bd:eb:
ec:73:f1:7e:90:22:94:f5:20:f2:46:c2:ea:dd:b4:
db:c3:36:64:d0:e5:75:92:b7:29:10:78:d9:cb:e5:
8e:33:5c:8d:f2:61:3c:13:a8:e7:17:6f:d5:14:0e:
30:6f:ec:53:86:e4:aa:82:bf:88:c9:49:70:48:4c:
fa:77:56:b8:72:14:fe:bf:a1:5c:f5:76:fa:a3:f9:
05:9d:9c:6b:80:ec:21:c6:01:cd:55:82:05:18:28:
f5:1f:4b:f0:26:96:98:21:92:51:85:83:3b:19:09:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6D:6A:3B:5A:78:6C:C9:A9:C2:B9:E4:D0:BD:37:0E:02:B5:29:8A
X509v3 Authority Key Identifier:
keyid:3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:25:91:ec:85:32:d8:5c:ab:5e:fa:c4:47:52:68:53:45:5f:
85:86:67:cc:0f:85:dd:e6:84:05:75:9d:32:07:85:1e:1b:03:
71:c1:97:d8:d2:7a:76:1a:e1:e3:93:ea:c9:bc:a7:13:bc:ef:
7a:a2:70:b7:1e:16:a4:74:77:2e:b7:c6:ea:13:6a:e1:56:7b:
29:c5:4f:23:72:fe:0e:99:96:3d:d0:d2:03:ea:21:73:13:6c:
4d:12:0d:46:7d:69:bd:c5:3d:3e:09:14:89:be:a8:32:ee:6e:
d9:82:4d:43:79:bb:cf:03:bc:52:3b:05:d2:7f:db:01:24:e1:
95:bc:5b:d5:2f:1d:c5:53:15:c4:e3:e7:df:c0:0f:c7:d8:ce:
94:cd:80:d1:cc:3a:c0:eb:24:ce:7f:05:e3:61:45:9f:0a:5f:
7d:88:d0:89:e8:5b:4e:e0:81:25:57:95:16:ff:a6:7f:23:ff:
74:c7:72:a1:47:af:25:d8:61:8d:3b:a6:3d:eb:8f:8c:5c:15:
2c:31:f1:04:bd:b4:7c:33:6b:8a:a5:0d:b0:66:1b:a3:a4:e0:
be:49:a2:54:18:f3:57:aa:c1:fa:1b:fb:e7:cb:36:65:09:fb:
2e:81:e0:6f:29:a9:da:8b:3d:d5:e1:bb:47:76:55:ff:45:8f:
35:6d:5e:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdzERSLuB3S09gIBsIpsgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNGJmZTkyZGUxMGU2NjBkZGY0NWNjMmQxZjVmZmI2MzZl
ZjM1OTAwHhcNMjYxMTE1MDYwMTUzWhcNMjYxMTE2MDYwMTUzWjAzMTEwLwYDVQQD
Eyg4YTZkNmEzYjVhNzg2Y2M5YTljMmI5ZTRkMGJkMzcwZTAyYjUyOThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw7I44AXf8JhwsE+D5s5c7w52MFh
RP2ZpUciDw4eJvULQCV8UUeHPt1/IMvhgTaSSVIaPKH6mOxa5V4uDgbRPaD6c51d
vXumJ3QOzx9D8/xCFYNVE+k9L0B73+i/yShS7VDdMo3zrgZcJYvRGTnpNJNIXxOg
5BUO29MsXzNY70z2yIzHrxcYyxyuB8E2TY7dWt3ovevsc/F+kCKU9SDyRsLq3bTb
wzZk0OV1krcpEHjZy+WOM1yN8mE8E6jnF2/VFA4wb+xThuSqgr+IyUlwSEz6d1a4
chT+v6Fc9Xb6o/kFnZxrgOwhxgHNVYIFGCj1H0vwJpaYIZJRhYM7GQmeVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIptajtaeGzJqcK55NC9Nw4CtSmKMB8GA1UdIwQY
MBaAFD9L/pLeEOZg3fRcwtH1/7Y27zWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83ZWFjNGYtNzdkZC00MDc3LWFlM2Yt
Y2U2NDgyZDBmMWI2LzEvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC83ZWFjNGYtNzdkZC00MDc3LWFlM2YtY2U2NDgyZDBmMWI2
LzEvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSWR7IUy
2FyrXvrER1JoU0VfhYZnzA+F3eaEBXWdMgeFHhsDccGX2NJ6dhrh45PqybynE7zv
eqJwtx4WpHR3LrfG6hNq4VZ7KcVPI3L+DpmWPdDSA+ohcxNsTRINRn1pvcU9PgkU
ib6oMu5u2YJNQ3m7zwO8UjsF0n/bASThlbxb1S8dxVMVxOPn38APx9jOlM2A0cw6
wOskzn8F42FFnwpffYjQiehbTuCBJVeVFv+mfyP/dMdyoUevJdhhjTumPeuPjFwV
LDHxBL20fDNriqUNsGYbo6TgvkmiVBjzV6rB+hv758s2ZQn7LoHgbymp2os91eG7
R3ZV/0WPNW1eQw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:31:53 2026 by rpki-client