Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
File: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft (raw, json)
Hash identifier: DB8cKHx1pHGuFbW1OB+AaOEjJOpTYrVTL5O+6Rxtxnc=
Subject key identifier: BE:F7:BE:16:A2:03:5A:2B:A2:C5:80:EB:FD:1D:35:C2:BF:8C:35:10
Authority key identifier: 3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58
Certificate issuer: /CN=3edd1cf4370085b6d25714091436f6686028d558
Certificate serial: 019D386658D47C702B9EF2F221EDA7C3FE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 07:02:04 +0000
Manifest this update: Sun 29 Mar 2026 07:02:04 +0000
Manifest next update: Mon 30 Mar 2026 07:02:04 +0000
Files and hashes: 1: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl (hash: iVQAXzMF/16E5lK/OTWo1bxUh7yhlvYMboBVxw78uX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:58:d4:7c:70:2b:9e:f2:f2:21:ed:a7:c3:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edd1cf4370085b6d25714091436f6686028d558
Validity
Not Before: Mar 29 07:02:04 2026 GMT
Not After : Mar 30 07:02:04 2026 GMT
Subject: CN=bef7be16a2035a2ba2c580ebfd1d35c2bf8c3510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:2c:e2:14:92:52:09:e6:45:32:ad:79:41:
7d:3c:5f:b6:93:53:a7:5e:40:43:2b:4b:1d:91:14:
d0:a8:ba:af:96:c8:fd:37:4d:7a:71:02:2e:f6:b8:
e8:00:46:22:35:01:04:88:f3:3f:90:0d:a2:df:eb:
a8:09:c0:02:aa:b6:ef:bd:48:88:47:a0:2f:54:1f:
25:3b:94:f4:f9:96:ff:0f:29:f3:7a:ce:c0:45:a0:
bc:ab:20:bd:17:ad:7e:b9:91:f6:fe:6d:5a:b9:eb:
ef:10:29:37:91:e7:d6:84:69:43:6c:ab:aa:49:30:
20:51:6d:81:e6:99:ba:ee:81:ee:e9:c4:1b:22:02:
6f:0a:67:5f:d0:73:fe:cb:cd:81:2f:8d:5e:0c:de:
2d:ed:24:5f:1c:e7:bf:0f:8a:c2:1e:1a:3a:0e:b8:
78:33:d7:64:2b:3d:f9:47:a1:f9:d4:38:65:ce:aa:
7b:45:cf:86:7a:4d:40:6d:32:31:ae:db:14:1c:78:
bb:b7:90:20:a1:a0:f9:48:de:1a:0b:b4:32:6c:e8:
33:52:f1:e9:77:48:9a:65:0a:f0:0b:b9:19:0f:42:
ac:7c:16:ef:eb:11:9a:ef:e8:00:bd:28:97:c3:7a:
28:e0:fd:ce:21:84:8c:9a:97:56:6f:12:fc:52:3e:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F7:BE:16:A2:03:5A:2B:A2:C5:80:EB:FD:1D:35:C2:BF:8C:35:10
X509v3 Authority Key Identifier:
keyid:3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:37:17:9c:56:ab:a0:c4:06:35:37:53:79:17:3d:4b:24:83:
c3:50:95:b4:c8:83:68:1b:1a:c9:47:a8:e3:67:85:4f:96:67:
8f:3e:7e:ae:77:6a:4f:7e:0c:29:e2:7d:e1:d4:36:bd:11:7a:
9f:75:82:03:74:56:19:b1:b4:28:72:ca:0a:62:44:32:70:f8:
23:69:d7:7e:2d:78:85:bd:26:02:4d:d5:c7:e2:aa:ce:28:29:
42:b6:02:ed:29:60:2f:c2:4d:9d:d6:9d:d5:33:d2:1f:30:c9:
d4:cc:26:75:7b:b2:56:33:8e:c0:ca:1c:b5:0d:0f:26:d8:61:
47:b0:d1:b3:7c:db:32:a8:43:30:2c:4e:a3:ac:a8:d0:fc:46:
9d:3e:f9:c0:4b:a7:25:08:d2:28:2e:fb:86:30:55:17:4d:09:
df:b3:02:7b:f7:42:bd:57:25:d2:bd:d4:b5:31:d4:c8:ee:c9:
dd:e2:36:a0:d5:4e:25:84:c7:a0:fd:45:b2:02:99:ec:a0:bf:
16:97:06:b9:e0:1f:8c:52:d5:e5:c9:5d:07:d7:bc:f8:b8:55:
3a:31:d4:ae:92:d6:23:21:f5:be:e7:a7:1b:b3:6b:79:c3:b3:
d7:33:e8:a6:a7:fd:85:3b:ec:ac:b8:65:22:b6:88:17:2f:ba:
56:c2:fd:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZljUfHArnvLyIe2nw/6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZGQxY2Y0MzcwMDg1YjZkMjU3MTQwOTE0MzZmNjY4NjAy
OGQ1NTgwHhcNMjYwMzI5MDcwMjA0WhcNMjYwMzMwMDcwMjA0WjAzMTEwLwYDVQQD
EyhiZWY3YmUxNmEyMDM1YTJiYTJjNTgwZWJmZDFkMzVjMmJmOGMzNTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32ss4hSSUgnmRTKteUF9PF+2k1On
XkBDK0sdkRTQqLqvlsj9N016cQIu9rjoAEYiNQEEiPM/kA2i3+uoCcACqrbvvUiI
R6AvVB8lO5T0+Zb/Dynzes7ARaC8qyC9F61+uZH2/m1auevvECk3kefWhGlDbKuq
STAgUW2B5pm67oHu6cQbIgJvCmdf0HP+y82BL41eDN4t7SRfHOe/D4rCHho6Drh4
M9dkKz35R6H51Dhlzqp7Rc+Gek1AbTIxrtsUHHi7t5AgoaD5SN4aC7QybOgzUvHp
d0iaZQrwC7kZD0KsfBbv6xGa7+gAvSiXw3oo4P3OIYSMmpdWbxL8Uj7jhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL73vhaiA1orosWA6/0dNcK/jDUQMB8GA1UdIwQY
MBaAFD7dHPQ3AIW20lcUCRQ29mhgKNVYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHQwYzlEY0FoYmJTVnhRSkZEYjJhR0FvMVZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hMjU4YmYtNzlkZS00YzI4LThhMGYt
ZThlZDkyN2M1NWE0LzEvUHQwYzlEY0FoYmJTVnhRSkZEYjJhR0FvMVZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9hMjU4YmYtNzlkZS00YzI4LThhMGYtZThlZDkyN2M1NWE0
LzEvUHQwYzlEY0FoYmJTVnhRSkZEYjJhR0FvMVZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzcXnFar
oMQGNTdTeRc9SySDw1CVtMiDaBsayUeo42eFT5Znjz5+rndqT34MKeJ94dQ2vRF6
n3WCA3RWGbG0KHLKCmJEMnD4I2nXfi14hb0mAk3Vx+KqzigpQrYC7SlgL8JNndad
1TPSHzDJ1MwmdXuyVjOOwMoctQ0PJthhR7DRs3zbMqhDMCxOo6yo0PxGnT75wEun
JQjSKC77hjBVF00J37MCe/dCvVcl0r3UtTHUyO7J3eI2oNVOJYTHoP1FsgKZ7KC/
FpcGueAfjFLV5cldB9e8+LhVOjHUrpLWIyH1vuenG7NrecOz1zPopqf9hTvsrLhl
IraIFy+6VsL9ZA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:02 2026 by rpki-client