Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
File: PRf0av89iyHwD-6PY16uNKf0pNc.mft (raw, json)
Hash identifier: gbLAckAYjzfKwt7fZJCezSVaF2mRfezCqUrzY0854NU=
Subject key identifier: F7:1C:69:DF:6E:CD:92:42:88:4F:8A:8B:61:CB:09:EA:40:94:78:67
Authority key identifier: 3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7
Certificate issuer: /CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7
Certificate serial: 019D2704876F33FF6AD7330574EAC2F89069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
Manifest number: 0D74
Signing time: Wed 25 Mar 2026 22:01:41 +0000
Manifest this update: Wed 25 Mar 2026 22:01:41 +0000
Manifest next update: Thu 26 Mar 2026 22:01:41 +0000
Files and hashes: 1: PRf0av89iyHwD-6PY16uNKf0pNc.crl (hash: jqQRXnoNUFop1wjJPSgaYQfUMPkcP4DbxC3WUadcReU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:87:6f:33:ff:6a:d7:33:05:74:ea:c2:f8:90:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7
Validity
Not Before: Mar 25 22:01:41 2026 GMT
Not After : Mar 26 22:01:41 2026 GMT
Subject: CN=f71c69df6ecd9242884f8a8b61cb09ea40947867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:83:b8:1e:46:d3:a1:27:99:7c:47:b4:05:
a6:23:b2:4d:75:ec:c7:6f:49:45:3b:8d:00:37:a0:
75:dd:d9:bc:1e:1a:56:a8:3f:7d:5d:6c:78:13:df:
2c:a1:71:ba:59:66:10:37:f8:fb:2b:37:02:4f:eb:
ad:a6:65:e9:76:2f:38:2b:a7:d4:19:f7:c5:98:b3:
90:6e:1b:d4:9b:6d:c7:ba:1a:ef:20:83:e3:ef:ef:
6b:26:cc:3d:66:4a:99:50:83:11:f6:4a:da:98:c5:
33:f7:30:c8:ab:aa:2c:20:98:bf:6a:ae:a8:75:7a:
5f:0f:ba:a5:af:86:97:28:cd:ab:21:e0:7a:90:ab:
90:8d:14:e0:8a:a0:21:d3:6b:22:c3:2f:df:c9:f6:
f3:41:d1:6c:0a:43:0a:8c:80:90:98:f8:dc:f4:4f:
f0:bf:1d:36:e7:30:b5:9f:7e:61:e2:8a:6d:10:6c:
c0:06:0a:00:f2:f3:84:0e:f3:7a:30:fe:2e:c6:ac:
18:66:a7:73:b6:8b:83:28:44:19:9b:cb:ad:ee:c9:
56:e6:6b:b1:00:88:d5:fe:a6:7a:c4:c2:94:03:13:
b5:02:38:75:80:8b:9e:fe:7c:11:c6:66:69:c5:7c:
6c:ab:c0:6f:c6:01:4a:bf:1e:b7:83:af:a4:41:ba:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1C:69:DF:6E:CD:92:42:88:4F:8A:8B:61:CB:09:EA:40:94:78:67
X509v3 Authority Key Identifier:
keyid:3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cb:5d:cd:2f:56:9c:72:14:e1:5f:5e:c1:92:10:9d:b8:ec:
f4:10:18:35:5f:7c:f0:b4:4e:9f:eb:1d:b9:1c:de:04:f1:99:
aa:a8:df:95:88:df:86:95:97:fe:fd:33:17:a2:ff:aa:8b:c7:
bd:38:13:54:dd:97:cb:0d:e4:8c:71:82:a1:b8:0a:65:e6:83:
d6:a4:be:c2:25:e5:9f:b0:93:ad:fa:e1:c2:4c:81:c1:ee:ba:
25:9f:96:7c:d2:44:6e:9f:9a:be:c9:c6:d0:0d:26:db:1d:04:
4d:1d:79:2d:42:88:09:1b:1b:5b:46:7f:59:76:a9:f9:e2:96:
81:b0:f8:14:4b:f9:41:f4:0e:97:6d:c2:fd:f7:fd:3a:fb:c0:
e7:fb:91:89:f5:02:51:51:08:65:5a:af:26:d3:56:bb:87:a1:
48:6b:5a:48:0b:2d:dc:0f:3a:1e:d3:6d:b9:37:8a:c6:42:96:
53:55:8c:a3:b6:78:6d:89:4c:9e:6c:b4:4c:90:5b:e1:30:e6:
ed:a6:33:e2:c4:9c:3d:79:dd:08:b7:ec:b8:94:d0:ed:60:72:
1a:1a:06:d3:c7:6e:73:12:5e:3f:d0:a9:0a:1b:67:05:e2:5a:
0a:2c:01:c2:ea:a8:bc:ae:17:2b:4f:a1:c2:aa:e9:6d:75:5e:
a3:fa:fe:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBIdvM/9q1zMFdOrC+JBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTdmNDZhZmYzZDhiMjFmMDBmZWU4ZjYzNWVhZTM0YTdm
NGE0ZDcwHhcNMjYwMzI1MjIwMTQxWhcNMjYwMzI2MjIwMTQxWjAzMTEwLwYDVQQD
EyhmNzFjNjlkZjZlY2Q5MjQyODg0ZjhhOGI2MWNiMDllYTQwOTQ3ODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse2DuB5G06EnmXxHtAWmI7JNdezH
b0lFO40AN6B13dm8HhpWqD99XWx4E98soXG6WWYQN/j7KzcCT+utpmXpdi84K6fU
GffFmLOQbhvUm23HuhrvIIPj7+9rJsw9ZkqZUIMR9kramMUz9zDIq6osIJi/aq6o
dXpfD7qlr4aXKM2rIeB6kKuQjRTgiqAh02siwy/fyfbzQdFsCkMKjICQmPjc9E/w
vx025zC1n35h4optEGzABgoA8vOEDvN6MP4uxqwYZqdztouDKEQZm8ut7slW5mux
AIjV/qZ6xMKUAxO1Ajh1gIue/nwRxmZpxXxsq8BvxgFKvx63g6+kQbpG6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPccad9uzZJCiE+Ki2HLCepAlHhnMB8GA1UdIwQY
MBaAFD0X9Gr/PYsh8A/uj2NerjSn9KTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJmMGF2ODlpeUh3RC02UFkxNnVOS2YwcE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iMjgxYzctY2Q5YS00Mzc1LWI4NGEt
ODUxZWQ1MjlmMjIyLzEvUFJmMGF2ODlpeUh3RC02UFkxNnVOS2YwcE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iMjgxYzctY2Q5YS00Mzc1LWI4NGEtODUxZWQ1MjlmMjIy
LzEvUFJmMGF2ODlpeUh3RC02UFkxNnVOS2YwcE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPctdzS9W
nHIU4V9ewZIQnbjs9BAYNV988LROn+sduRzeBPGZqqjflYjfhpWX/v0zF6L/qovH
vTgTVN2Xyw3kjHGCobgKZeaD1qS+wiXln7CTrfrhwkyBwe66JZ+WfNJEbp+avsnG
0A0m2x0ETR15LUKICRsbW0Z/WXap+eKWgbD4FEv5QfQOl23C/ff9OvvA5/uRifUC
UVEIZVqvJtNWu4ehSGtaSAst3A86HtNtuTeKxkKWU1WMo7Z4bYlMnmy0TJBb4TDm
7aYz4sScPXndCLfsuJTQ7WByGhoG08ducxJeP9CpChtnBeJaCiwBwuqovK4XK0+h
wqrpbXVeo/r+eg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:04 2026 by rpki-client