Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json)
Hash identifier: c4C6TVCMRlScMu8p1K3+T3XarvEehZMX8TyB46/ogQU=
Subject key identifier: 9F:24:EC:81:9C:55:A4:BF:C6:12:62:D6:11:D5:44:28:AE:B2:8E:27
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial: 019D2772CA1A8B5A333305FCC8848F8D075F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
Manifest number: 051A
Signing time: Thu 26 Mar 2026 00:02:07 +0000
Manifest this update: Thu 26 Mar 2026 00:02:07 +0000
Manifest next update: Fri 27 Mar 2026 00:02:07 +0000
Files and hashes: 1: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: N7K5tOCNIo/MFyHF3qvIX06NFt6ytp9HAQEMYYRwJX0=)
2: t83QwmnsF94N1e2quVeWFqxv3Q4.roa (hash: S00r80MkvAcmYicBdHFKql/0j/7ix5B+Lwxl0Q6uMXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:ca:1a:8b:5a:33:33:05:fc:c8:84:8f:8d:07:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Validity
Not Before: Mar 26 00:02:07 2026 GMT
Not After : Mar 27 00:02:07 2026 GMT
Subject: CN=9f24ec819c55a4bfc61262d611d54428aeb28e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:eb:80:29:21:f6:b1:7e:7a:f6:d3:f0:eb:
94:7d:f3:09:99:ce:6b:8d:bc:71:39:77:b4:21:db:
cc:bb:89:be:93:d3:9e:12:91:18:db:73:0b:05:c2:
3f:6f:4c:4a:9e:5e:3c:c0:75:68:0f:d2:f2:b8:c1:
ac:75:3a:06:14:33:cc:88:a2:f8:40:a8:e1:f5:fb:
2d:17:98:ae:5f:32:83:23:5b:65:33:aa:3d:c7:92:
0e:a3:49:e4:3c:17:f6:38:f8:f2:ca:76:79:e6:eb:
0f:7f:b4:5e:20:f1:a8:21:2d:3d:ed:34:ab:28:2f:
1c:50:a8:67:6f:33:af:28:a1:cd:4d:e7:b3:fa:d9:
9c:ed:b6:82:9c:29:8d:82:8f:01:01:5c:05:dd:20:
60:2c:e1:c2:16:84:77:2e:dc:51:f9:9e:9a:44:31:
61:c5:bf:71:45:28:62:07:c5:f8:ea:8f:8d:f4:fb:
68:9a:24:a9:3b:bd:c2:22:6b:90:17:cb:e4:1d:89:
62:7f:88:0e:e2:c6:97:3c:7f:7e:c7:55:09:ad:47:
82:dd:d3:9d:ec:0f:39:30:b8:bb:fe:e1:d1:50:a5:
cf:14:43:3d:0b:fb:f8:85:0b:ea:b5:c8:79:d2:3d:
81:6d:56:6c:da:d4:2e:1f:90:fc:ab:a8:c2:f8:57:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:24:EC:81:9C:55:A4:BF:C6:12:62:D6:11:D5:44:28:AE:B2:8E:27
X509v3 Authority Key Identifier:
keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:50:2f:f3:0b:cf:b1:16:a5:76:ce:a6:5e:22:d9:9e:5a:df:
dc:04:b7:f1:90:b1:a1:04:77:c0:f8:00:2b:c9:fd:a1:1b:51:
ab:d0:6f:b3:d3:d5:da:72:92:42:de:7b:f2:2e:da:70:eb:59:
f0:b7:4d:17:3a:d0:46:69:96:b0:01:2a:93:fa:56:85:7e:66:
2d:d4:f6:36:b5:29:c1:5f:b5:40:95:1c:d5:01:02:f9:9e:9b:
94:23:ac:f0:fd:1e:98:74:3f:90:31:72:ef:2d:2b:80:eb:56:
5e:22:69:33:59:7e:62:ed:6d:25:24:c5:a8:ce:d3:b0:57:ac:
8a:27:62:4b:dd:b6:d7:e4:ea:90:2c:dd:ab:37:14:15:db:32:
b6:57:7c:43:ce:81:a1:68:11:e3:61:46:c3:12:8e:71:e5:18:
e5:4b:ca:ef:c1:24:54:c5:b3:db:e5:69:cd:62:85:08:8e:f0:
f0:12:e6:f1:19:ec:6a:32:d7:75:6e:ff:a3:2b:33:0a:49:00:
db:f7:e9:45:9e:b0:2e:02:20:cc:f3:e6:96:8c:60:da:cb:ed:
05:47:c1:b1:42:69:4a:91:85:d9:7e:21:ab:f9:04:ef:e8:1d:
07:59:f7:47:71:7f:49:d2:dd:84:04:98:86:23:e2:1b:d0:9b:
d2:82:28:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncsoai1ozMwX8yISPjQdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjU1MzNhNTI3YjI2NGNhMmU4MzczMjg1ZDc4MGQzM2Ey
YmQwYTEwHhcNMjYwMzI2MDAwMjA3WhcNMjYwMzI3MDAwMjA3WjAzMTEwLwYDVQQD
Eyg5ZjI0ZWM4MTljNTVhNGJmYzYxMjYyZDYxMWQ1NDQyOGFlYjI4ZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO7rgCkh9rF+evbT8OuUffMJmc5r
jbxxOXe0IdvMu4m+k9OeEpEY23MLBcI/b0xKnl48wHVoD9LyuMGsdToGFDPMiKL4
QKjh9fstF5iuXzKDI1tlM6o9x5IOo0nkPBf2OPjyynZ55usPf7ReIPGoIS097TSr
KC8cUKhnbzOvKKHNTeez+tmc7baCnCmNgo8BAVwF3SBgLOHCFoR3LtxR+Z6aRDFh
xb9xRShiB8X46o+N9PtomiSpO73CImuQF8vkHYlif4gO4saXPH9+x1UJrUeC3dOd
7A85MLi7/uHRUKXPFEM9C/v4hQvqtch50j2BbVZs2tQuH5D8q6jC+Fd4vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8k7IGcVaS/xhJi1hHVRCiuso4nMB8GA1UdIwQY
MBaAFKT1UzpSeyZMoug3MoXXgNM6K9ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBWVE9sSjdKa3lpNkRjeWhkZUEwem9yMEtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hZmMzYzgtZTk1Mi00MDcwLWE1NDYt
NDI0NDYyYmM5NDliLzEvcFBWVE9sSjdKa3lpNkRjeWhkZUEwem9yMEtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hZmMzYzgtZTk1Mi00MDcwLWE1NDYtNDI0NDYyYmM5NDli
LzEvcFBWVE9sSjdKa3lpNkRjeWhkZUEwem9yMEtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1Av8wvP
sRalds6mXiLZnlrf3AS38ZCxoQR3wPgAK8n9oRtRq9Bvs9PV2nKSQt578i7acOtZ
8LdNFzrQRmmWsAEqk/pWhX5mLdT2NrUpwV+1QJUc1QEC+Z6blCOs8P0emHQ/kDFy
7y0rgOtWXiJpM1l+Yu1tJSTFqM7TsFesiidiS9221+TqkCzdqzcUFdsytld8Q86B
oWgR42FGwxKOceUY5UvK78EkVMWz2+VpzWKFCI7w8BLm8RnsajLXdW7/oyszCkkA
2/fpRZ6wLgIgzPPmloxg2svtBUfBsUJpSpGF2X4hq/kE7+gdB1n3R3F/SdLdhASY
hiPiG9Cb0oIo2Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:39 2026 by rpki-client