Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
File: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft (raw, json)
Hash identifier: TcIzy1779TGH2TLlSMV7qigOdGnOaGpFh35vfS4LFdU=
Subject key identifier: 3F:A8:99:79:7D:E9:4A:7A:E7:5A:04:1A:AF:B1:73:6C:31:10:62:49
Authority key identifier: 3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90
Certificate issuer: /CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
Certificate serial: 01A0DB04AB0223EC6888B35015CC13C89540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
Manifest number: 0333
Signing time: Sat 26 Sep 2026 00:01:51 +0000
Manifest this update: Sat 26 Sep 2026 00:01:51 +0000
Manifest next update: Sun 27 Sep 2026 00:01:51 +0000
Files and hashes: 1: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl (hash: fScw+AMvBrkKXDEpZiNOAE7eudsBtN2o73ipBm5EVh0=)
2: wiCmzHMmJI0asghERNxqN-MynS0.roa (hash: bcmBxTUeR+yh0Zn1PK7SL7wVYZreCWWh7r4c30KwASE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:ab:02:23:ec:68:88:b3:50:15:cc:13:c8:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
Validity
Not Before: Sep 26 00:01:51 2026 GMT
Not After : Sep 27 00:01:51 2026 GMT
Subject: CN=3fa899797de94a7ae75a041aafb1736c31106249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:75:77:ba:50:65:3d:55:fc:05:be:4f:b2:
86:6e:e4:b9:f0:2d:28:49:f2:79:c6:0d:f1:11:3c:
e8:56:ca:4c:83:26:65:a8:9f:13:8a:37:5f:c7:d5:
fb:92:51:c5:a5:0e:aa:61:c1:0a:e9:4a:12:6e:f0:
c6:6e:5a:01:c1:02:bc:89:f1:3d:86:b1:83:42:dd:
95:ad:95:db:d2:ff:cb:d2:78:17:90:7a:33:d6:ae:
bd:ba:94:31:59:54:f2:fc:ae:2a:d1:08:b0:1b:a4:
2d:ad:51:2b:07:d4:7d:b9:56:9d:aa:5b:8b:1e:f2:
94:09:1d:44:42:fe:5e:6c:2e:bb:ad:9d:d6:e6:ef:
ac:39:c9:3d:ec:66:61:03:4f:78:af:79:b2:b5:41:
f8:2f:5c:c9:6e:42:b0:40:80:be:e7:35:9d:0a:b1:
bc:23:58:18:e9:7f:ff:78:ad:51:2b:d3:42:75:83:
f4:04:bb:be:e4:e5:0a:03:fc:02:ce:25:e0:53:72:
d3:9d:c7:e5:c5:18:57:20:37:2b:da:d2:9f:18:53:
58:b7:da:0e:14:31:06:c9:32:34:b0:56:3f:c5:2b:
d4:2d:ed:1e:f2:a9:81:7b:e9:d5:9d:27:ae:16:61:
f7:8b:31:8c:36:6f:23:33:09:e1:db:21:ff:93:b3:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A8:99:79:7D:E9:4A:7A:E7:5A:04:1A:AF:B1:73:6C:31:10:62:49
X509v3 Authority Key Identifier:
keyid:3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e4:81:d7:bd:43:c2:7f:b5:b4:d0:a9:70:4d:6c:b3:6c:1e:
eb:cd:35:27:41:9d:69:b9:0f:ed:88:b6:0c:94:8b:35:f1:96:
36:71:09:f7:78:39:b2:a6:d0:ae:9e:ac:b3:6c:f4:a2:f1:be:
17:7e:a5:6d:09:61:20:85:57:6a:1d:cb:94:c6:92:48:15:51:
e7:97:a4:f1:1b:fe:dc:f1:50:01:9b:60:2d:46:08:10:57:81:
3e:78:a7:dd:22:ae:f8:db:d9:0c:bb:26:9d:45:1e:24:de:10:
79:12:76:8f:10:a1:6b:86:a1:ea:b5:f9:ef:d9:a8:75:4c:d2:
39:08:61:8c:7f:3c:de:d0:df:fc:80:3e:67:0c:96:b8:e4:94:
a1:e2:ef:c7:e2:c9:43:9b:8b:6d:f5:61:de:13:96:33:b9:ce:
dd:4d:c3:50:11:a4:7d:45:46:dd:28:e2:61:b1:43:20:03:71:
85:65:af:51:9c:b4:d7:b8:8e:37:de:de:b7:c7:69:10:5d:e0:
18:40:e9:51:48:0c:7b:e1:88:4d:ff:fa:ad:96:b8:be:0b:22:
a1:ef:44:4f:4e:55:8a:7a:71:31:69:9d:12:c0:f0:c6:37:b8:
3d:ac:54:ad:a3:08:cb:36:d2:51:e3:e8:da:b4:5d:6e:d9:e6:
42:0d:00:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbBKsCI+xoiLNQFcwTyJVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNGJmZTkyZGUxMGU2NjBkZGY0NWNjMmQxZjVmZmI2MzZl
ZjM1OTAwHhcNMjYwOTI2MDAwMTUxWhcNMjYwOTI3MDAwMTUxWjAzMTEwLwYDVQQD
EygzZmE4OTk3OTdkZTk0YTdhZTc1YTA0MWFhZmIxNzM2YzMxMTA2MjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVB1d7pQZT1V/AW+T7KGbuS58C0o
SfJ5xg3xETzoVspMgyZlqJ8Tijdfx9X7klHFpQ6qYcEK6UoSbvDGbloBwQK8ifE9
hrGDQt2VrZXb0v/L0ngXkHoz1q69upQxWVTy/K4q0QiwG6QtrVErB9R9uVadqluL
HvKUCR1EQv5ebC67rZ3W5u+sOck97GZhA094r3mytUH4L1zJbkKwQIC+5zWdCrG8
I1gY6X//eK1RK9NCdYP0BLu+5OUKA/wCziXgU3LTncflxRhXIDcr2tKfGFNYt9oO
FDEGyTI0sFY/xSvULe0e8qmBe+nVnSeuFmH3izGMNm8jMwnh2yH/k7PEjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+omXl96Up651oEGq+xc2wxEGJJMB8GA1UdIwQY
MBaAFD9L/pLeEOZg3fRcwtH1/7Y27zWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83ZWFjNGYtNzdkZC00MDc3LWFlM2Yt
Y2U2NDgyZDBmMWI2LzEvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC83ZWFjNGYtNzdkZC00MDc3LWFlM2YtY2U2NDgyZDBmMWI2
LzEvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOSB171D
wn+1tNCpcE1ss2we6801J0GdabkP7Yi2DJSLNfGWNnEJ93g5sqbQrp6ss2z0ovG+
F36lbQlhIIVXah3LlMaSSBVR55ek8Rv+3PFQAZtgLUYIEFeBPnin3SKu+NvZDLsm
nUUeJN4QeRJ2jxCha4ah6rX579modUzSOQhhjH883tDf/IA+ZwyWuOSUoeLvx+LJ
Q5uLbfVh3hOWM7nO3U3DUBGkfUVG3SjiYbFDIANxhWWvUZy017iON97et8dpEF3g
GEDpUUgMe+GITf/6rZa4vgsioe9ET05VinpxMWmdEsDwxje4PaxUraMIyzbSUePo
2rRdbtnmQg0AUg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:17:12 2026 by rpki-client