Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
File: PowYl2JPV7404PdguX8RCtW12jo.mft (raw, json)
Hash identifier: uJjYYhzpUGYIuXZ0fifdA3d9UQzTOJAP/+LtHW3tVpQ=
Subject key identifier: CE:39:CF:BC:3F:8A:01:4A:56:FA:27:92:95:4A:E8:74:5B:E8:80:56
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial: 019D389BB19A54D0F4AC9A7DBD1A19B31A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 08:00:20 +0000
Manifest this update: Sun 29 Mar 2026 08:00:20 +0000
Manifest next update: Mon 30 Mar 2026 08:00:20 +0000
Files and hashes: 1: 2DMY4OZ-P0l7XFAVrcnoNtnZ_r8.roa (hash: 2FMBwvvINGY4tE8pGOzhgn9w8zBO7Q7KUVGJLpWK5M4=)
2: PowYl2JPV7404PdguX8RCtW12jo.crl (hash: ICX1lys7Nk/+YzMChS8RNrmgS6nusqH7gge4y0nsRVY=)
3: ztIzxf93QWsYAnlPRmW4J8mPKU8.roa (hash: 1lDUE3T/JTJqUXqe8vPaaGkCY1xNEzM3Qzz5NIUDqZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b1:9a:54:d0:f4:ac:9a:7d:bd:1a:19:b3:1a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Validity
Not Before: Mar 29 08:00:20 2026 GMT
Not After : Mar 30 08:00:20 2026 GMT
Subject: CN=ce39cfbc3f8a014a56fa2792954ae8745be88056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:14:42:3e:68:cd:17:52:97:c1:6e:42:e3:
e4:5d:f5:57:fa:30:27:52:5b:d5:ee:df:da:9c:f2:
fa:b4:4d:c2:d4:fe:e5:fa:be:7a:e5:76:25:64:bd:
e1:a0:4a:da:11:88:5b:13:fd:5a:27:d4:d0:89:d6:
eb:1f:c1:9e:b4:c6:2c:45:58:35:71:71:ea:ce:75:
9d:d3:5d:34:af:fb:ed:57:b4:a5:dc:24:29:ef:1f:
b0:73:fe:20:cc:9b:38:c3:8c:8e:55:51:b3:e8:35:
ea:1a:9e:ea:a5:6b:44:00:bc:f8:11:ad:b9:79:73:
20:d7:31:b8:62:a0:6a:19:c1:35:2b:87:3b:48:20:
32:03:61:05:38:f2:a9:be:4f:e7:a5:79:28:33:74:
db:22:70:b8:1d:90:dc:0e:55:06:87:12:8a:fb:d1:
4f:03:68:5e:fd:2f:12:56:64:fb:63:8f:a8:12:7a:
52:93:f1:4b:63:9f:17:18:54:b8:20:94:20:ce:72:
ef:09:f7:97:1c:03:c2:4d:c7:f1:f5:86:83:25:8e:
48:07:b0:d7:e9:93:48:36:7d:60:f4:a0:47:e9:85:
d2:23:b0:89:d4:c9:47:b1:74:5d:40:60:86:f3:7f:
a7:58:ad:0d:16:5d:55:ff:3f:3d:03:4d:fd:3c:7d:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:39:CF:BC:3F:8A:01:4A:56:FA:27:92:95:4A:E8:74:5B:E8:80:56
X509v3 Authority Key Identifier:
keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d1:c3:72:4c:4c:eb:09:bf:99:70:ea:e5:c9:06:5b:16:38:
bc:c6:14:ec:e6:58:77:17:cb:d8:01:fa:c0:3d:98:a8:cb:de:
fe:da:f5:4e:5e:1e:8e:d8:3b:6e:97:02:90:b6:b5:53:07:66:
f5:f9:fa:72:82:37:68:ea:f9:04:14:32:2b:c0:b0:0f:2f:fd:
e9:a8:04:8c:35:8a:71:1e:72:93:1b:45:a2:60:aa:2a:7f:1c:
65:a7:03:c1:4f:f9:de:f3:e1:db:84:ba:8e:0e:8e:f1:07:7a:
9d:c7:f7:fe:12:dc:08:26:bd:33:86:cb:70:31:e8:f3:98:b2:
5d:4a:1c:18:3e:c1:73:06:7a:4b:ff:bd:ff:f0:c3:16:4c:18:
fb:bb:9d:70:54:b2:61:8a:95:d8:0a:0e:00:fa:fb:f6:b4:c7:
f7:6d:7d:87:7a:5f:6c:ab:8f:96:51:42:43:9d:69:6d:29:99:
61:b8:a5:98:9c:de:d8:25:c2:f7:e5:6a:ab:17:6d:f2:a1:63:
12:6e:79:31:73:cc:66:0d:8f:32:ed:39:6c:eb:04:91:27:82:
6f:ff:83:44:e6:37:b2:c8:67:48:a6:8f:03:93:39:16:f9:0c:
2d:9c:a7:ba:c2:93:3a:07:c9:5c:44:e9:ca:38:95:84:f2:61:
45:96:4c:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m7GaVND0rJp9vRoZsxp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlOGMxODk3NjI0ZjU3YmUzNGUwZjc2MGI5N2YxMTBhZDVi
NWRhM2EwHhcNMjYwMzI5MDgwMDIwWhcNMjYwMzMwMDgwMDIwWjAzMTEwLwYDVQQD
EyhjZTM5Y2ZiYzNmOGEwMTRhNTZmYTI3OTI5NTRhZTg3NDViZTg4MDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwEUQj5ozRdSl8FuQuPkXfVX+jAn
UlvV7t/anPL6tE3C1P7l+r565XYlZL3hoEraEYhbE/1aJ9TQidbrH8GetMYsRVg1
cXHqznWd0100r/vtV7Sl3CQp7x+wc/4gzJs4w4yOVVGz6DXqGp7qpWtEALz4Ea25
eXMg1zG4YqBqGcE1K4c7SCAyA2EFOPKpvk/npXkoM3TbInC4HZDcDlUGhxKK+9FP
A2he/S8SVmT7Y4+oEnpSk/FLY58XGFS4IJQgznLvCfeXHAPCTcfx9YaDJY5IB7DX
6ZNINn1g9KBH6YXSI7CJ1MlHsXRdQGCG83+nWK0NFl1V/z89A039PH2/KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM45z7w/igFKVvonkpVK6HRb6IBWMB8GA1UdIwQY
MBaAFD6MGJdiT1e+NOD3YLl/EQrVtdo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81N2VhOGQtYzY4MC00MGE3LThhMjkt
ZjA3NmEwOGU2MDAzLzEvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy81N2VhOGQtYzY4MC00MGE3LThhMjktZjA3NmEwOGU2MDAz
LzEvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9HDckxM
6wm/mXDq5ckGWxY4vMYU7OZYdxfL2AH6wD2YqMve/tr1Tl4ejtg7bpcCkLa1Uwdm
9fn6coI3aOr5BBQyK8CwDy/96agEjDWKcR5ykxtFomCqKn8cZacDwU/53vPh24S6
jg6O8Qd6ncf3/hLcCCa9M4bLcDHo85iyXUocGD7BcwZ6S/+9//DDFkwY+7udcFSy
YYqV2AoOAPr79rTH9219h3pfbKuPllFCQ51pbSmZYbilmJze2CXC9+Vqqxdt8qFj
Em55MXPMZg2PMu05bOsEkSeCb/+DROY3sshnSKaPA5M5FvkMLZynusKTOgfJXETp
yjiVhPJhRZZMig==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:25 2026 by rpki-client