Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File: PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier: jdrgjXsNNIlHNZOWn0LLbiXOegOVWnDANgO/tqbZuwQ=
Subject key identifier: 92:F3:44:1A:86:BD:EC:D7:18:C4:E8:F5:AC:31:D6:FB:6E:71:0B:5B
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 019DD4D26B6D5EE4464C109058A9D2C48203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number: 1263
Signing time: Tue 28 Apr 2026 16:00:52 +0000
Manifest this update: Tue 28 Apr 2026 16:00:52 +0000
Manifest next update: Wed 29 Apr 2026 16:00:52 +0000
Files and hashes: 1: 03e_nKrMH4A4-r2jcWSKOro4hEs.roa (hash: DxycIoEklj35A1jvEiLRJ53FKAfEe2yJnQzuZq37gCQ=)
2: D4w1402cKEkHHCPC0Qrp-ROm6yo.roa (hash: EMcXFEgTqCUtUEK47llV6gmt5p0zphRz9x+4xZgTdwU=)
3: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: tU5/qv4Wy3yVFoKyO3ABuSx16YerQXNP34xLPSDJqW4=)
4: Um-gNomxfjSn0kkB0eNJZRkJRcg.roa (hash: CFaWLMSGhMHtWCv6dN79ys4llyYw9LrXF5/UbAwm7l8=)
5: VkvT6baU95xG8FSlVbrDxq01-m0.roa (hash: wuSqKSYOAMUCrbWLjcaG0f0YLG5d5+8uKukQepwPM10=)
6: abaPwP2Q_8OSCHTWIlI0CKnEXZM.roa (hash: dryzgauXbdm4FHRf2Q1oRz+2w9ySHDpr4lqY5orU7Z0=)
7: kXOd5jH86JLvfXHemqDhfdfDdlg.roa (hash: Y1aEFrTSyZUJC/4uUI51ki9mieJNB1Uh1UY/fpEVapk=)
8: l0yUF1IRmtUQWgAm0m-qwhJJad8.roa (hash: zejsAU9sJFQnGEhJNTn/fy3BN2ZirT1vXiw3WbJzNvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:d2:6b:6d:5e:e4:46:4c:10:90:58:a9:d2:c4:82:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Apr 28 16:00:52 2026 GMT
Not After : Apr 29 16:00:52 2026 GMT
Subject: CN=92f3441a86bdecd718c4e8f5ac31d6fb6e710b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4a:05:30:85:e2:50:63:1e:8b:99:10:dc:f3:
8b:fc:0a:03:32:a4:bc:e8:a9:9d:c1:b3:16:d9:cb:
4e:28:33:e2:9a:c2:03:47:75:aa:44:ff:59:66:b9:
64:ca:c1:67:c7:16:54:c9:8c:03:24:69:a7:7f:66:
c1:a1:fe:81:1b:d0:7a:22:c2:ce:22:fe:73:20:c2:
e7:c3:47:b9:1e:58:55:a0:56:a6:69:0f:7e:08:1a:
e4:a2:9d:2d:5f:98:72:8b:aa:67:4b:ed:55:f3:4e:
f5:ab:7b:b0:4f:ba:a2:8f:c9:df:94:57:9b:01:fd:
82:6f:f6:5c:82:e2:0a:65:f4:a5:ef:be:06:f9:fb:
e6:f0:76:f2:01:f9:9a:f0:a2:a8:58:82:d9:ab:e9:
a1:f3:9d:f2:2d:01:82:56:37:53:fa:12:d2:1e:6d:
58:aa:f8:56:15:2d:a4:ba:73:2d:50:bd:4b:fa:a8:
68:26:b9:8d:2e:10:e3:09:2a:bc:ee:52:fe:54:62:
5a:d6:32:8e:3f:15:44:dd:35:25:f8:89:c3:0a:12:
61:7c:04:c6:42:8a:99:81:ae:c3:13:2e:c2:0d:62:
e0:3c:b1:c8:89:4c:73:60:c2:b0:6a:29:64:37:38:
09:0a:2c:3f:84:7f:fd:ef:59:a7:8f:f2:15:c2:43:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F3:44:1A:86:BD:EC:D7:18:C4:E8:F5:AC:31:D6:FB:6E:71:0B:5B
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:61:ac:b2:4d:d9:4c:8a:74:09:65:60:5c:76:7d:9c:72:60:
10:2e:a4:19:a1:65:e7:b3:c4:82:05:e1:b5:5b:91:0d:dc:83:
2c:c0:53:4e:26:e3:c2:19:d5:a4:25:eb:b1:17:6d:e3:98:a1:
8d:63:e8:a8:94:8f:d5:c9:7b:77:05:8d:71:04:20:f3:d9:dd:
17:46:42:ad:e8:47:78:f9:45:d2:4d:ed:6a:12:43:50:13:5b:
5c:cb:58:9a:ac:8f:35:6d:3b:4d:32:5e:df:0d:64:6d:b1:09:
12:88:bf:fd:5d:cb:ff:6a:95:74:12:5c:b9:92:5d:bd:64:d4:
f8:84:7a:be:92:4f:52:ec:25:e2:d6:f0:3e:44:be:50:ee:3c:
e5:54:dc:57:39:db:f0:1f:6f:93:f2:2a:3c:89:70:85:f4:6c:
d9:21:ec:ae:37:94:c2:65:a8:61:58:30:3d:f0:c5:33:f5:57:
0a:bd:d9:56:bc:1a:9a:af:89:7d:16:3d:eb:6c:fc:29:0e:9f:
50:6b:92:4e:65:c8:5c:00:84:8a:91:8e:47:14:e9:18:fc:63:
00:66:40:9f:ef:57:b0:64:e9:46:a5:46:d0:41:87:e5:e7:f5:
c1:ac:e8:e5:d2:c8:88:49:41:11:bd:88:76:2e:ee:d4:91:6b:
8e:41:b5:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3U0mttXuRGTBCQWKnSxIIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5
Y2UzM2EwHhcNMjYwNDI4MTYwMDUyWhcNMjYwNDI5MTYwMDUyWjAzMTEwLwYDVQQD
Eyg5MmYzNDQxYTg2YmRlY2Q3MThjNGU4ZjVhYzMxZDZmYjZlNzEwYjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEoFMIXiUGMei5kQ3POL/AoDMqS8
6KmdwbMW2ctOKDPimsIDR3WqRP9ZZrlkysFnxxZUyYwDJGmnf2bBof6BG9B6IsLO
Iv5zIMLnw0e5HlhVoFamaQ9+CBrkop0tX5hyi6pnS+1V8071q3uwT7qij8nflFeb
Af2Cb/ZcguIKZfSl774G+fvm8HbyAfma8KKoWILZq+mh853yLQGCVjdT+hLSHm1Y
qvhWFS2kunMtUL1L+qhoJrmNLhDjCSq87lL+VGJa1jKOPxVE3TUl+InDChJhfATG
QoqZga7DEy7CDWLgPLHIiUxzYMKwailkNzgJCiw/hH/971mnj/IVwkMtawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLzRBqGvezXGMTo9awx1vtucQtbMB8GA1UdIwQY
MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt
NjJiZTUzNDI1Njc2LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2
LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamGssk3Z
TIp0CWVgXHZ9nHJgEC6kGaFl57PEggXhtVuRDdyDLMBTTibjwhnVpCXrsRdt45ih
jWPoqJSP1cl7dwWNcQQg89ndF0ZCrehHePlF0k3tahJDUBNbXMtYmqyPNW07TTJe
3w1kbbEJEoi//V3L/2qVdBJcuZJdvWTU+IR6vpJPUuwl4tbwPkS+UO485VTcVznb
8B9vk/IqPIlwhfRs2SHsrjeUwmWoYVgwPfDFM/VXCr3ZVrwamq+JfRY962z8KQ6f
UGuSTmXIXACEipGORxTpGPxjAGZAn+9XsGTpRqVG0EGH5ef1wazo5dLIiElBEb2I
di7u1JFrjkG1UQ==
-----END CERTIFICATE-----
Generated at Wed Apr 29 00:01:36 2026 by rpki-client