Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json)
Hash identifier: ez+6JoJ8rcKiiKYdIcrE5Kny99C42rVGw8utjVzT5lo=
Subject key identifier: 1F:AC:43:91:D5:E7:E7:92:00:21:69:00:8F:0C:C4:79:9D:8C:A4:FF
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial: 01A1754BEA90EE22E415DCBECCD1B1295941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
Manifest number: 03FE
Signing time: Sun 25 Oct 2026 23:01:11 +0000
Manifest this update: Sun 25 Oct 2026 23:01:11 +0000
Manifest next update: Mon 26 Oct 2026 23:01:11 +0000
Files and hashes: 1: MpZ1sXXuBlUKYetLTsH1lXFBfh0.roa (hash: UdwaodYJR5euTkLYD/2982odDxspsab6MNbO+lo1mR8=)
2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: QAF2jIDFQESGGCrkiWW1CSMdKqZ5WA/5/c+DYgv1hdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:4b:ea:90:ee:22:e4:15:dc:be:cc:d1:b1:29:59:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Validity
Not Before: Oct 25 23:01:11 2026 GMT
Not After : Oct 26 23:01:11 2026 GMT
Subject: CN=1fac4391d5e7e792002169008f0cc4799d8ca4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:66:1d:99:48:91:8a:17:56:60:e9:70:dc:
28:f3:ba:bc:0f:2f:3e:f7:c0:03:b6:81:ee:2c:20:
b3:54:48:02:c5:81:37:fc:39:0e:81:76:53:4b:ec:
83:eb:f1:60:4a:8b:1f:d5:98:a2:c8:1d:04:05:cc:
c9:69:9b:af:5e:46:ce:db:9b:a7:41:69:da:84:0d:
08:e2:5d:2b:6e:65:84:8f:54:95:ee:06:c6:34:a4:
61:bb:51:e8:e4:7e:8f:ff:19:4a:1d:18:16:19:b9:
08:4d:7e:4d:73:65:a0:e1:3f:4f:85:f5:3b:9e:2b:
ca:8e:a6:c8:73:25:83:c0:80:29:e3:8e:31:49:0a:
4e:45:18:0d:d9:de:29:89:0e:6b:b9:b8:18:6d:ab:
d1:ec:ca:e1:24:f0:29:a3:8c:1c:38:ff:22:c6:22:
2f:c4:47:aa:43:61:50:31:d3:72:72:fb:db:75:e5:
c9:af:f2:dd:d4:56:8e:35:ba:66:97:aa:3d:a7:46:
1a:f5:7a:b9:aa:22:94:a5:ff:04:0e:9f:26:c1:34:
49:9c:e7:2e:bf:ee:fe:49:c1:9f:6c:e5:ea:7d:2f:
65:f4:a0:aa:f6:75:b1:ab:cb:5c:a9:bf:34:b9:d0:
27:14:a7:a3:39:90:d8:dc:41:16:b8:2b:06:21:82:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AC:43:91:D5:E7:E7:92:00:21:69:00:8F:0C:C4:79:9D:8C:A4:FF
X509v3 Authority Key Identifier:
keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:19:6f:11:3e:a3:8b:57:8e:b6:2d:b7:1d:1c:fa:6d:39:0a:
0a:0a:6d:e9:f0:61:03:48:cc:4b:e8:56:53:a5:78:09:30:c2:
a9:22:78:5a:8e:18:b4:b0:5d:46:28:45:f0:5e:84:f2:52:57:
ef:10:d2:ec:c4:09:00:2e:d2:04:fa:39:5b:7e:6a:b4:ec:3b:
b5:e0:c7:7b:f2:f7:9d:04:e6:bf:83:09:5f:76:ea:ec:e0:10:
3d:73:45:3c:88:a9:c3:7d:48:8b:83:af:2a:20:04:30:ee:46:
d4:c9:5a:ae:09:45:f5:4e:60:c0:75:fa:28:7f:cf:df:76:68:
21:10:c4:8a:8c:42:b2:3f:11:9d:d9:03:6d:8d:a5:8d:03:77:
5a:e4:80:a9:4c:7b:55:33:c8:71:03:52:a8:8a:b3:c8:41:75:
93:2c:37:9d:52:e6:15:d5:2e:66:5c:1e:99:1c:57:4c:61:f4:
6b:86:9b:1b:93:5c:c2:7a:06:15:2a:1e:f1:ff:a1:ba:36:a8:
a2:2c:52:b2:66:aa:09:43:91:3d:5d:d5:09:8f:2b:7e:45:04:
e1:d0:c2:a7:f2:e6:e5:9c:9b:af:23:f0:dc:45:5d:28:a1:85:
4e:e0:05:3a:3f:1a:92:15:ef:1d:c6:40:f7:e0:28:d3:60:a6:
a8:3c:6c:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF1S+qQ7iLkFdy+zNGxKVlBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOGEwNDk4ZWMzYjRlYjQ0ZjRkZjI1NDFhZTM5MTgwYWJi
NjVmNDQwHhcNMjYxMDI1MjMwMTExWhcNMjYxMDI2MjMwMTExWjAzMTEwLwYDVQQD
EygxZmFjNDM5MWQ1ZTdlNzkyMDAyMTY5MDA4ZjBjYzQ3OTlkOGNhNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrJmHZlIkYoXVmDpcNwo87q8Dy8+
98ADtoHuLCCzVEgCxYE3/DkOgXZTS+yD6/FgSosf1ZiiyB0EBczJaZuvXkbO25un
QWnahA0I4l0rbmWEj1SV7gbGNKRhu1Ho5H6P/xlKHRgWGbkITX5Nc2Wg4T9PhfU7
nivKjqbIcyWDwIAp444xSQpORRgN2d4piQ5rubgYbavR7MrhJPApo4wcOP8ixiIv
xEeqQ2FQMdNycvvbdeXJr/Ld1FaONbpml6o9p0Ya9Xq5qiKUpf8EDp8mwTRJnOcu
v+7+ScGfbOXqfS9l9KCq9nWxq8tcqb80udAnFKejOZDY3EEWuCsGIYJ8iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+sQ5HV5+eSACFpAI8MxHmdjKT/MB8GA1UdIwQY
MBaAFDyKBJjsO060T03yVBrjkYCrtl9EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wMmY2M2UtNGVhMi00M2FjLWFiZDUt
MGRhYjIzMTI5MDJhLzEvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wMmY2M2UtNGVhMi00M2FjLWFiZDUtMGRhYjIzMTI5MDJh
LzEvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhlvET6j
i1eOti23HRz6bTkKCgpt6fBhA0jMS+hWU6V4CTDCqSJ4Wo4YtLBdRihF8F6E8lJX
7xDS7MQJAC7SBPo5W35qtOw7teDHe/L3nQTmv4MJX3bq7OAQPXNFPIipw31Ii4Ov
KiAEMO5G1MlarglF9U5gwHX6KH/P33ZoIRDEioxCsj8RndkDbY2ljQN3WuSAqUx7
VTPIcQNSqIqzyEF1kyw3nVLmFdUuZlwemRxXTGH0a4abG5NcwnoGFSoe8f+hujao
oixSsmaqCUORPV3VCY8rfkUE4dDCp/Lm5ZybryPw3EVdKKGFTuAFOj8akhXvHcZA
9+Ao02CmqDxsCQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:55:58 2026 by rpki-client