Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
File: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json)
Hash identifier: EfUI+KVcVehafgMAckk/g4YEkD9emL0xP3nkJPLHY/Q=
Subject key identifier: 1D:AD:D4:F4:4A:B5:B6:91:DB:9B:F1:A7:22:D9:28:C0:2A:B8:75:54
Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Certificate serial: 019D273A9F8E3D4225461219742C714FEEAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
Manifest number: 0C32
Signing time: Wed 25 Mar 2026 23:00:46 +0000
Manifest this update: Wed 25 Mar 2026 23:00:46 +0000
Manifest next update: Thu 26 Mar 2026 23:00:46 +0000
Files and hashes: 1: 1RQLtNwsJfIFpRzUfnhxJpXZkyM.roa (hash: wMjp06WKn3OrqdyFTd7sBWSyRC6sXJcxycCDPSTxcI0=)
2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: qXYkLw8+uymvZn9h2JALjyTcJMYydTBsG4YBAJsLrJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9f:8e:3d:42:25:46:12:19:74:2c:71:4f:ee:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Validity
Not Before: Mar 25 23:00:46 2026 GMT
Not After : Mar 26 23:00:46 2026 GMT
Subject: CN=1dadd4f44ab5b691db9bf1a722d928c02ab87554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:af:2b:32:da:52:7d:4e:24:52:ac:66:74:00:
12:3c:37:fe:a9:67:f2:6a:fa:e3:a7:6b:9a:e8:7a:
6f:dd:16:e6:31:c8:45:c2:3d:a9:98:d4:ed:56:6c:
a2:b7:78:4c:1e:db:94:f4:08:82:f7:d4:37:aa:91:
9b:73:9b:4f:c3:35:a6:88:86:01:78:23:25:75:66:
99:07:0f:fe:f8:48:b3:38:a7:bf:cc:df:f5:27:b7:
b0:30:86:d6:c4:51:85:6f:48:32:c4:bd:c4:0c:50:
73:e9:43:3d:4d:4e:df:e0:29:6f:c5:73:f4:5b:09:
27:91:d3:ee:0a:b1:c4:91:36:ba:e4:65:83:3f:10:
5b:df:d3:58:3b:b0:dd:47:1e:4a:b5:1d:75:73:a0:
4a:2c:1f:66:b2:7b:67:5b:23:02:e6:00:8d:bb:6b:
93:c8:c8:d2:c6:12:12:1e:0f:b9:f6:59:c9:0b:ad:
4f:9d:21:74:03:4d:37:c0:eb:83:26:2d:d9:f7:e0:
07:03:b4:56:e9:87:14:71:14:34:98:69:36:6e:08:
cf:2f:dd:bb:af:74:96:fa:92:1f:3a:5e:fe:46:bf:
9b:6d:7e:42:40:b1:00:26:73:54:96:50:c3:19:2a:
85:6d:61:20:25:59:8b:dd:50:a5:13:46:be:17:86:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AD:D4:F4:4A:B5:B6:91:DB:9B:F1:A7:22:D9:28:C0:2A:B8:75:54
X509v3 Authority Key Identifier:
keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:75:06:09:15:11:ad:dc:5f:78:c3:bd:a0:4a:62:e8:d5:d7:
f1:09:5f:df:d6:58:c5:26:37:31:10:39:58:0c:49:70:d3:99:
ac:73:b7:3d:5d:86:3b:31:f6:d9:d9:c2:ad:bb:64:c8:74:0d:
aa:1d:cf:86:bb:f6:8d:ba:a3:34:7f:63:89:3e:6e:e3:da:5c:
1d:ba:d0:1a:e2:f2:04:57:50:9c:83:e1:4d:0a:b9:23:2e:12:
24:95:fb:1f:a1:93:cb:35:dd:5d:3b:4e:50:7d:2c:61:a1:5f:
ed:55:0c:fe:eb:ae:80:49:17:39:df:3d:9d:a5:c3:64:d1:a7:
bd:4f:ea:ae:10:79:2e:9d:c6:d6:d4:50:eb:63:e6:66:70:3e:
6a:f2:82:e3:ad:e2:1e:39:c9:42:11:58:27:8e:77:26:65:c6:
08:f0:70:91:dd:80:b2:33:a2:b0:b1:de:84:dd:88:f8:c1:e0:
29:68:7f:fe:f5:01:95:40:75:2e:b1:5c:17:44:fc:27:96:fd:
af:cb:f0:bc:3e:4f:52:82:9c:f1:08:b6:67:2a:4a:a6:03:a3:
d5:6b:d6:3f:a0:b6:a0:11:38:2f:68:3b:62:b1:05:0f:32:7c:
10:1d:1e:69:73:cb:76:eb:ab:f3:8a:00:18:1a:eb:79:8d:0b:
c1:7e:29:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOp+OPUIlRhIZdCxxT+6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYmQ1ZjhiYjVhNTk0ZDY3YjVjZTgwN2E4NGM1OWRkZTU2
OWE3NzUwHhcNMjYwMzI1MjMwMDQ2WhcNMjYwMzI2MjMwMDQ2WjAzMTEwLwYDVQQD
EygxZGFkZDRmNDRhYjViNjkxZGI5YmYxYTcyMmQ5MjhjMDJhYjg3NTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6a8rMtpSfU4kUqxmdAASPDf+qWfy
avrjp2ua6Hpv3RbmMchFwj2pmNTtVmyit3hMHtuU9AiC99Q3qpGbc5tPwzWmiIYB
eCMldWaZBw/++EizOKe/zN/1J7ewMIbWxFGFb0gyxL3EDFBz6UM9TU7f4ClvxXP0
WwknkdPuCrHEkTa65GWDPxBb39NYO7DdRx5KtR11c6BKLB9msntnWyMC5gCNu2uT
yMjSxhISHg+59lnJC61PnSF0A003wOuDJi3Z9+AHA7RW6YcUcRQ0mGk2bgjPL927
r3SW+pIfOl7+Rr+bbX5CQLEAJnNUllDDGSqFbWEgJVmL3VClE0a+F4YXnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2t1PRKtbaR25vxpyLZKMAquHVUMB8GA1UdIwQY
MBaAFD69X4u1pZTWe1zoB6hMWd3laad1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jZWE1Y2YtMDc4Mi00MGQxLTg5MTMt
OTI3MTJmOTVlMzM2LzEvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jZWE1Y2YtMDc4Mi00MGQxLTg5MTMtOTI3MTJmOTVlMzM2
LzEvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXUGCRUR
rdxfeMO9oEpi6NXX8Qlf39ZYxSY3MRA5WAxJcNOZrHO3PV2GOzH22dnCrbtkyHQN
qh3Phrv2jbqjNH9jiT5u49pcHbrQGuLyBFdQnIPhTQq5Iy4SJJX7H6GTyzXdXTtO
UH0sYaFf7VUM/uuugEkXOd89naXDZNGnvU/qrhB5Lp3G1tRQ62PmZnA+avKC463i
HjnJQhFYJ453JmXGCPBwkd2AsjOisLHehN2I+MHgKWh//vUBlUB1LrFcF0T8J5b9
r8vwvD5PUoKc8Qi2ZypKpgOj1WvWP6C2oBE4L2g7YrEFDzJ8EB0eaXPLduur84oA
GBrreY0LwX4pfA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:44 2026 by rpki-client