Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File: pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier: uT+0IWwUnMwKbcEzfQTbv2sEj5PdiQuIDjvOFEvZYUo=
Subject key identifier: 22:76:BC:3C:95:E1:4C:DF:63:11:93:BF:AC:70:46:F5:B9:DC:F6:80
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 019D31F4D8FFBFFEE53A54B199256A46652F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number: 1348
Signing time: Sat 28 Mar 2026 01:00:23 +0000
Manifest this update: Sat 28 Mar 2026 01:00:23 +0000
Manifest next update: Sun 29 Mar 2026 01:00:23 +0000
Files and hashes: 1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=)
2: ExTCIeQK6Vb8OCwCNuc_-quqRmI.roa (hash: yAl2sJH2YaylYmZhqm6jDAUkF463bPlFn5SJl2V0nqk=)
3: JzElV8rMB35_r5yROjAIe1YSEGk.roa (hash: prxCAC9aS1jR/lGKgImoCaF1puXWY2FG75jnwkB+CC4=)
4: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=)
5: VXazB19Is6W_OKKCp0AvNqbD-rM.roa (hash: IwIknG6od+Fc8/mQwvVulKrK8qXdxe2y0/Y0Cy93yB0=)
6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: AvyniWCR8S9RRk53AI+xk7EgDcvGnDMma/vUfAE95lc=)
7: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=)
8: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f4:d8:ff:bf:fe:e5:3a:54:b1:99:25:6a:46:65:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Mar 28 01:00:23 2026 GMT
Not After : Mar 29 01:00:23 2026 GMT
Subject: CN=2276bc3c95e14cdf631193bfac7046f5b9dcf680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:a8:ef:b1:22:2d:9e:49:de:c4:4b:65:e7:
6b:7b:c7:d3:da:8b:ee:ee:91:56:45:d3:cf:c6:38:
70:55:fd:c1:ce:4a:a1:af:2b:2c:82:eb:3e:46:ac:
c2:c1:4b:44:1f:92:82:f9:11:81:a5:0f:f8:7a:c6:
66:4b:ac:20:10:f2:18:ec:c0:96:82:74:48:f1:ca:
3b:b4:83:ce:49:65:ef:00:d3:33:39:6f:6e:9c:ce:
b1:61:eb:c1:4d:a1:e4:4d:c0:83:41:21:04:b1:bd:
3a:83:69:cf:7d:25:4b:c9:cd:83:61:37:7c:34:e1:
3d:f8:b8:21:96:ac:74:6d:20:53:42:c9:3c:b3:09:
2c:75:1d:75:d9:6a:ec:3a:ad:b7:b4:32:77:b4:6e:
df:77:e8:48:46:9d:a5:5a:8c:71:fb:7a:ad:44:e1:
09:25:0b:87:a3:3f:01:15:c6:3a:25:59:f6:60:a1:
f8:1e:9e:81:18:92:50:18:50:8a:c5:e3:04:11:6b:
d7:a2:90:2f:ca:2a:6a:bf:7e:bf:ac:43:12:64:2f:
8e:88:dc:3d:b0:b4:44:cc:6c:f1:ef:89:f5:89:7b:
12:91:85:74:e3:cf:bc:1e:cb:1b:1c:cc:41:b0:e3:
bb:a7:82:53:9f:3e:f8:8e:2b:cd:0a:5e:4d:b8:7e:
2e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:76:BC:3C:95:E1:4C:DF:63:11:93:BF:AC:70:46:F5:B9:DC:F6:80
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:32:fa:54:d8:0a:9e:49:67:14:db:20:e4:cc:b2:d2:1f:ad:
71:18:01:d1:1a:44:c4:22:bf:63:f4:d3:22:48:90:b5:57:82:
cc:a6:4b:88:cc:b8:57:fb:c9:b4:3a:a9:7e:06:cf:e7:a7:a0:
b1:40:9d:54:49:1b:e8:ad:45:09:39:86:32:fd:f5:3f:e7:3b:
20:2c:a0:0f:89:a7:3d:32:86:16:df:9f:b5:c9:fc:64:0a:85:
16:bf:b7:35:a9:bf:7e:b9:14:2d:2c:dd:49:90:51:59:ba:46:
87:28:a0:7b:1e:f6:d5:5a:0f:4c:e3:ca:75:66:c6:38:5e:55:
dd:37:88:ff:c8:2d:5a:dc:87:d6:4a:09:54:b5:bd:12:3e:45:
e7:c9:3e:04:19:88:10:33:c4:5d:4b:b4:d6:20:85:3a:e8:c1:
2b:8f:33:f2:f5:59:b1:db:87:54:ea:62:8e:f0:a1:a9:f7:6d:
be:33:6a:a8:73:05:6c:34:81:95:74:d5:b6:bc:4d:e2:b8:b8:
7c:41:8f:5e:84:f6:4d:df:5c:c3:d7:86:1c:cb:f9:63:9c:ba:
ba:64:56:a8:c6:ad:11:58:b9:c3:b6:20:0f:ca:d4:2a:1e:81:
e9:ce:4a:63:a8:73:25:ee:ba:f3:c9:30:57:1f:59:95:31:77:
c3:a5:35:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:23:56 2026 by rpki-client