Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json)
Hash identifier: pocxAsrZO09XS1AI95TwMoo8cyGk5lfJwEFreIRp9zM=
Subject key identifier: EC:9A:AA:E7:86:40:67:6A:E7:51:1E:68:B0:B9:D8:75:55:46:5B:DF
Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Certificate serial: 019D38D2EA77BEF7E3723FF3D6195ACCE149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
Manifest number: 0351
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: G0P5WlNlZGFjbEhb_R1Zn2df2xs.roa (hash: CL8qT2kYIrJ9NwJgE0Acghs3urkbaGANrFWydwL2iRg=)
2: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: lONw4CJFtkiIJxnnn46BlXfXAGF9LB2hI/Im6hqWK3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ea:77:be:f7:e3:72:3f:f3:d6:19:5a:cc:e1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=ec9aaae78640676ae7511e68b0b9d87555465bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:6c:6c:79:f5:27:61:63:50:0b:a2:c1:60:
16:0a:9e:4b:5b:7f:18:3c:60:d4:60:1c:23:90:b0:
e8:26:b3:f9:f0:a8:98:4f:f1:12:bc:e8:c7:e4:2f:
88:c7:83:13:41:9b:54:d4:56:27:cf:50:fc:50:6f:
3f:7e:ea:41:c3:c8:3c:b1:45:a9:36:a0:81:b9:5f:
3f:02:26:f3:d9:43:40:f8:40:dd:10:14:d0:db:18:
62:7a:4c:ea:52:4b:99:dc:9a:58:7d:10:9b:3c:7d:
7e:3f:bf:e3:89:5f:29:14:3b:33:fe:fc:98:a0:a0:
da:1f:26:ea:bb:29:0d:b8:05:b4:ce:d9:0f:37:71:
81:69:57:cb:79:09:4f:41:be:d8:18:02:6b:bb:e4:
fd:99:18:71:47:1e:cc:3a:a8:2a:ab:f8:cd:d9:7d:
31:f3:91:22:b8:ad:23:e3:bb:9a:00:dd:17:28:80:
8d:84:9f:0c:df:f2:16:5b:24:98:9c:81:52:a4:b5:
1e:79:04:c3:0a:f9:c1:aa:50:39:47:a8:d0:41:50:
5b:a4:f3:a9:7a:f1:8f:82:2e:f7:0f:c9:63:7c:67:
ae:8d:55:5e:1e:c6:e1:bc:0a:d3:c4:00:be:53:10:
e5:fb:00:9d:65:89:ca:3c:73:91:da:66:c0:b1:80:
fd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9A:AA:E7:86:40:67:6A:E7:51:1E:68:B0:B9:D8:75:55:46:5B:DF
X509v3 Authority Key Identifier:
keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3b:50:2a:74:b9:c7:db:05:4b:d3:16:38:16:39:a3:64:49:
3d:81:e5:6f:7d:72:54:86:3d:88:76:28:e4:4c:ea:1d:41:c8:
80:ab:46:c8:43:c7:30:2b:f4:b8:1d:3b:10:7d:86:e6:55:84:
0c:bd:af:8a:40:5b:77:2a:62:37:9f:19:fd:6f:ff:3f:55:ce:
43:66:0e:c2:59:c3:19:14:fe:09:ba:83:c2:46:8d:66:c2:2a:
0f:3a:1e:03:bb:31:a2:b3:c0:b5:cc:0a:32:05:ac:8c:df:40:
18:b9:98:ce:f8:35:28:5a:38:61:ac:6a:81:87:68:61:40:34:
e7:20:fb:18:64:ae:72:c4:08:38:81:76:24:8f:c5:08:c4:67:
6a:2d:d1:d7:67:cc:fb:bf:7e:07:75:33:8f:51:4e:39:7a:dc:
47:fe:92:48:a1:23:93:9b:a1:bd:1d:66:03:35:5c:35:c9:34:
ed:20:27:b7:f2:2a:a5:09:4d:97:f7:01:f5:f7:22:56:e4:86:
48:73:62:64:f3:56:fd:36:52:25:35:1b:4c:a8:8e:0b:bb:fb:
d2:43:8a:6e:ff:ed:ea:8f:5d:1f:85:87:d0:0c:be:4d:cc:9d:
d0:8d:57:dc:2b:10:92:69:44:ae:92:11:25:61:63:41:15:dc:
ef:d2:80:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040up3vvfjcj/z1hlazOFJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MTY0YTQ2ODE2NWU5YzY5M2JkODE4NGMzY2E1NjZjYTcw
ZmQ1NjAwHhcNMjYwMzI5MDkwMDM5WhcNMjYwMzMwMDkwMDM5WjAzMTEwLwYDVQQD
EyhlYzlhYWFlNzg2NDA2NzZhZTc1MTFlNjhiMGI5ZDg3NTU1NDY1YmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbRsbHn1J2FjUAuiwWAWCp5LW38Y
PGDUYBwjkLDoJrP58KiYT/ESvOjH5C+Ix4MTQZtU1FYnz1D8UG8/fupBw8g8sUWp
NqCBuV8/Aibz2UNA+EDdEBTQ2xhiekzqUkuZ3JpYfRCbPH1+P7/jiV8pFDsz/vyY
oKDaHybquykNuAW0ztkPN3GBaVfLeQlPQb7YGAJru+T9mRhxRx7MOqgqq/jN2X0x
85EiuK0j47uaAN0XKICNhJ8M3/IWWySYnIFSpLUeeQTDCvnBqlA5R6jQQVBbpPOp
evGPgi73D8ljfGeujVVeHsbhvArTxAC+UxDl+wCdZYnKPHOR2mbAsYD9qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyaqueGQGdq51EeaLC52HVVRlvfMB8GA1UdIwQY
MBaAFKUWSkaBZenGk72BhMPKVmynD9VgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMt
OTQ1ODdkODMzMWY5LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMtOTQ1ODdkODMzMWY5
LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTtQKnS5
x9sFS9MWOBY5o2RJPYHlb31yVIY9iHYo5EzqHUHIgKtGyEPHMCv0uB07EH2G5lWE
DL2vikBbdypiN58Z/W//P1XOQ2YOwlnDGRT+CbqDwkaNZsIqDzoeA7sxorPAtcwK
MgWsjN9AGLmYzvg1KFo4YaxqgYdoYUA05yD7GGSucsQIOIF2JI/FCMRnai3R12fM
+79+B3Uzj1FOOXrcR/6SSKEjk5uhvR1mAzVcNck07SAnt/IqpQlNl/cB9fciVuSG
SHNiZPNW/TZSJTUbTKiOC7v70kOKbv/t6o9dH4WH0Ay+Tcyd0I1X3CsQkmlErpIR
JWFjQRXc79KApg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:34 2026 by rpki-client