Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
File: pTjytsVCHgpCkQBAxbhlCKiVuRY.mft (raw, json)
Hash identifier: BVLSWhUe+MxSZvE2BfvJhdzeq3KfW6GzNonNI9gdU0M=
Subject key identifier: F2:82:AC:E0:01:B7:80:D1:D0:26:4D:99:39:AF:BD:A0:A8:BF:9C:93
Authority key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
Certificate issuer: /CN=a538f2b6c5421e0a42910040c5b86508a895b916
Certificate serial: 019D288430C38F90D8E409A8EFF54EE7A0E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
Manifest number: 0716
Signing time: Thu 26 Mar 2026 05:00:45 +0000
Manifest this update: Thu 26 Mar 2026 05:00:45 +0000
Manifest next update: Fri 27 Mar 2026 05:00:45 +0000
Files and hashes: 1: pTjytsVCHgpCkQBAxbhlCKiVuRY.crl (hash: sF0vySiXY6ThkdMJX4pnRcW05g9bqJ46I75VOBMMbQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:30:c3:8f:90:d8:e4:09:a8:ef:f5:4e:e7:a0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538f2b6c5421e0a42910040c5b86508a895b916
Validity
Not Before: Mar 26 05:00:45 2026 GMT
Not After : Mar 27 05:00:45 2026 GMT
Subject: CN=f282ace001b780d1d0264d9939afbda0a8bf9c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:10:87:e7:f3:cc:12:85:2b:19:89:2a:c2:
1f:a6:c2:5a:06:86:ff:3e:ba:82:f4:50:e9:b1:7d:
3f:97:b0:6c:e3:68:02:c7:f0:4f:4b:6d:ae:55:98:
36:f2:b5:87:ab:7f:f4:c3:07:45:54:f3:3f:58:a2:
c2:f0:7e:ef:2e:05:69:03:d9:fd:39:7f:85:95:43:
a5:82:b1:86:82:ca:e5:09:34:04:16:70:19:83:c4:
2a:84:29:33:b6:16:3d:19:b3:95:df:03:be:7f:03:
9d:c7:70:0f:76:9c:08:bc:9b:ad:32:96:88:73:c4:
ef:f1:00:c6:89:34:8c:91:f2:fd:9a:24:f7:b6:06:
42:4f:df:da:58:31:8b:97:b8:58:6f:ae:b9:5b:8a:
2c:a3:ae:2b:4e:0c:f9:70:c6:33:15:fc:93:71:f5:
71:1d:36:bb:e0:36:5d:30:aa:8f:b0:00:ea:23:6d:
4a:9d:cd:c2:19:53:3c:6b:c5:75:fd:81:f5:de:e2:
53:45:23:00:7b:0a:09:1c:1b:48:38:7f:c2:22:65:
07:d8:66:3e:ea:7d:b4:51:5b:df:d0:41:e1:4e:86:
2d:d6:50:31:71:6a:91:a9:33:4f:ed:5b:f4:44:5c:
01:6d:d9:14:ee:00:02:66:37:f2:67:c9:06:5a:3b:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:82:AC:E0:01:B7:80:D1:D0:26:4D:99:39:AF:BD:A0:A8:BF:9C:93
X509v3 Authority Key Identifier:
keyid:A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f2:17:2a:05:8f:ef:ff:e4:7d:30:bc:fe:c7:a7:94:ae:26:
a2:15:f9:f9:21:35:cb:28:82:72:ee:d3:6d:e2:64:97:c7:55:
25:22:86:38:91:0c:c1:0a:e9:7d:17:71:81:3b:16:f6:e0:21:
12:f4:59:b4:5c:d6:30:a6:52:c6:1a:fb:bf:b0:d7:da:cd:81:
ae:e0:2f:3d:3c:06:1d:71:15:98:96:ce:fd:a9:13:a2:a6:b3:
aa:89:b5:eb:93:0b:4c:b9:73:13:69:56:5e:0e:e7:65:32:5a:
53:a9:4c:d4:cf:af:74:47:0e:22:d6:ba:26:bc:de:46:6b:6e:
7d:c4:dc:b2:9b:0c:20:73:20:13:01:37:39:ef:30:52:5b:70:
d9:f3:f4:86:0b:f5:c9:db:66:66:55:e5:8c:de:a1:0f:5a:c2:
1d:b8:03:80:2d:9a:c6:4b:bc:97:52:09:6b:7d:84:bc:2a:8f:
0a:e4:a6:1e:85:ec:b2:0a:03:40:77:c0:f9:26:5e:22:48:ae:
c6:11:fc:b7:51:cb:05:54:43:3c:7e:a3:40:60:a4:93:db:23:
86:e3:1c:53:82:26:56:bf:0b:a8:06:1b:17:cf:4f:e2:46:a9:
f4:78:c6:ac:26:4a:a1:2c:9c:98:d6:60:e7:d2:e2:f8:2d:22:
17:74:bd:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohDDDj5DY5Amo7/VO56DiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzhmMmI2YzU0MjFlMGE0MjkxMDA0MGM1Yjg2NTA4YTg5
NWI5MTYwHhcNMjYwMzI2MDUwMDQ1WhcNMjYwMzI3MDUwMDQ1WjAzMTEwLwYDVQQD
EyhmMjgyYWNlMDAxYjc4MGQxZDAyNjRkOTkzOWFmYmRhMGE4YmY5YzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH4Qh+fzzBKFKxmJKsIfpsJaBob/
PrqC9FDpsX0/l7Bs42gCx/BPS22uVZg28rWHq3/0wwdFVPM/WKLC8H7vLgVpA9n9
OX+FlUOlgrGGgsrlCTQEFnAZg8QqhCkzthY9GbOV3wO+fwOdx3APdpwIvJutMpaI
c8Tv8QDGiTSMkfL9miT3tgZCT9/aWDGLl7hYb665W4oso64rTgz5cMYzFfyTcfVx
HTa74DZdMKqPsADqI21Knc3CGVM8a8V1/YH13uJTRSMAewoJHBtIOH/CImUH2GY+
6n20UVvf0EHhToYt1lAxcWqRqTNP7Vv0RFwBbdkU7gACZjfyZ8kGWjtMWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKCrOABt4DR0CZNmTmvvaCov5yTMB8GA1UdIwQY
MBaAFKU48rbFQh4KQpEAQMW4ZQiolbkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRqeXRzVkNIZ3BDa1FCQXhiaGxDS2lWdVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81YWU5MzUtZjZlMC00MDczLTlmNzkt
ZWM2YzAxZjQ3MjRlLzEvcFRqeXRzVkNIZ3BDa1FCQXhiaGxDS2lWdVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81YWU5MzUtZjZlMC00MDczLTlmNzktZWM2YzAxZjQ3MjRl
LzEvcFRqeXRzVkNIZ3BDa1FCQXhiaGxDS2lWdVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfIXKgWP
7//kfTC8/senlK4mohX5+SE1yyiCcu7TbeJkl8dVJSKGOJEMwQrpfRdxgTsW9uAh
EvRZtFzWMKZSxhr7v7DX2s2BruAvPTwGHXEVmJbO/akToqazqom165MLTLlzE2lW
Xg7nZTJaU6lM1M+vdEcOIta6JrzeRmtufcTcspsMIHMgEwE3Oe8wUltw2fP0hgv1
ydtmZlXljN6hD1rCHbgDgC2axku8l1IJa32EvCqPCuSmHoXssgoDQHfA+SZeIkiu
xhH8t1HLBVRDPH6jQGCkk9sjhuMcU4ImVr8LqAYbF89P4kap9HjGrCZKoSycmNZg
59Li+C0iF3S9Cw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:54 2026 by rpki-client