Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: PVFRJvA863AmGH7wmal8tOJHjdDOMMduJy0Py2Gw4QY=
Subject key identifier: 6D:8C:38:68:6D:C9:9B:4F:D7:2F:D6:02:AB:04:8E:07:19:07:AC:36
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 019CE9DBFC9E9CE078385609C29B5FBD0A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 0965
Signing time: Sat 14 Mar 2026 01:00:34 +0000
Manifest this update: Sat 14 Mar 2026 01:00:34 +0000
Manifest next update: Sun 15 Mar 2026 01:00:34 +0000
Files and hashes: 1: Mr6edMVNczrnTD4fPbHhkJ_t0BI.roa (hash: B3H6ipVEXV+RUc2+4VXrDuLYCDQcw876zTiowv2ss50=)
2: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: OpEbUoGiLxUB/LRe948nl4ZLD6oGSjZfRBqFudobGR4=)
3: UZU-y9KjwHBRwAFBMLEzFqF8gQE.roa (hash: 8IesYOSWF04JS1YDSdciYf6tHgm62U6HhGDalYAE7s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e9:db:fc:9e:9c:e0:78:38:56:09:c2:9b:5f:bd:0a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Mar 14 01:00:34 2026 GMT
Not After : Mar 15 01:00:34 2026 GMT
Subject: CN=6d8c38686dc99b4fd72fd602ab048e071907ac36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:7a:c6:87:18:1b:bc:cf:81:84:a3:00:c1:
37:b4:f6:c8:19:53:c4:e7:e1:18:93:c4:8f:b2:de:
5f:84:1c:75:e1:14:4f:f5:0c:98:04:b1:46:3c:50:
7a:de:90:3c:4f:c5:ef:73:6e:79:4a:b7:71:64:a5:
94:48:dd:cb:f2:5c:ae:57:a6:7d:be:41:fb:42:14:
31:01:3e:e7:c6:ae:77:cf:9a:bf:36:98:e3:59:83:
a1:f5:ed:db:eb:2d:3f:b6:2f:0c:4a:de:19:54:48:
ce:7b:0e:cb:c6:e5:a2:2e:c6:65:dc:72:ab:ad:4c:
54:6a:02:f7:3a:da:a7:de:20:70:5d:4a:d4:b7:c9:
eb:72:37:1c:95:c9:9f:5e:81:36:52:3a:9a:5a:a0:
0e:24:95:98:a7:3e:90:60:e8:2a:ec:bb:06:9f:c8:
7b:ee:53:0f:44:c7:ee:d8:b2:bd:15:9a:b8:b9:ce:
9a:3a:af:7d:84:3a:da:87:36:0a:77:d6:bf:42:c3:
32:8b:11:b5:2f:3f:6f:71:79:4e:d0:a1:4a:d7:46:
e0:55:c6:7d:b4:ea:3e:e1:4b:b5:1c:51:69:dd:db:
82:b9:21:90:26:57:a8:55:3e:f9:1c:43:4b:a2:01:
f4:f3:87:52:9b:40:4f:b3:dc:1a:45:80:79:1d:30:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8C:38:68:6D:C9:9B:4F:D7:2F:D6:02:AB:04:8E:07:19:07:AC:36
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d2:09:e4:4f:77:e3:8c:d7:1e:1b:16:cb:b6:65:a1:93:ee:
55:c1:3e:11:95:52:d3:3e:bf:5e:8d:34:61:2e:22:11:93:1a:
b7:e1:da:f5:c1:f2:77:ef:eb:1a:f7:fd:81:a4:5b:13:b3:9f:
c9:47:69:35:0a:00:15:17:4f:4c:1e:77:06:0e:5a:63:13:00:
33:2c:a5:c9:d3:7e:85:43:f3:a2:59:9d:aa:41:f8:65:40:da:
8c:5c:98:c4:e0:f8:67:ec:f0:fc:f9:63:2d:02:75:40:25:7a:
80:36:c1:7b:8b:50:24:24:49:eb:1e:77:d6:33:bf:1f:73:47:
4d:0e:5f:8d:e2:68:6e:58:c9:69:46:4e:61:a9:8d:0d:72:21:
62:20:75:39:e1:59:ec:de:55:aa:a4:3c:ca:2e:5f:17:50:06:
d3:50:43:52:1d:d9:f6:00:5a:51:82:2f:4e:84:b8:21:2e:a9:
35:6d:3d:37:fd:b2:dd:ea:92:1b:ce:28:e4:b8:21:07:0d:0c:
5f:cc:e5:dc:a5:3b:85:73:e1:db:39:f2:f8:3f:7c:bb:b3:58:
e8:62:cf:3b:48:75:51:03:65:b2:4a:14:4a:f2:61:1e:e5:cb:
b7:47:28:fe:95:d4:80:e3:39:e3:53:39:cc:4f:9a:1d:56:be:
4f:a6:d5:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzp2/yenOB4OFYJwptfvQppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNWJjNDQwMTQyODViNmYzZTI4NzJhZWNmNWQ0ZjMzZTI2
OGNlOGIwHhcNMjYwMzE0MDEwMDM0WhcNMjYwMzE1MDEwMDM0WjAzMTEwLwYDVQQD
Eyg2ZDhjMzg2ODZkYzk5YjRmZDcyZmQ2MDJhYjA0OGUwNzE5MDdhYzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lB6xocYG7zPgYSjAME3tPbIGVPE
5+EYk8SPst5fhBx14RRP9QyYBLFGPFB63pA8T8Xvc255SrdxZKWUSN3L8lyuV6Z9
vkH7QhQxAT7nxq53z5q/NpjjWYOh9e3b6y0/ti8MSt4ZVEjOew7LxuWiLsZl3HKr
rUxUagL3Otqn3iBwXUrUt8nrcjcclcmfXoE2UjqaWqAOJJWYpz6QYOgq7LsGn8h7
7lMPRMfu2LK9FZq4uc6aOq99hDrahzYKd9a/QsMyixG1Lz9vcXlO0KFK10bgVcZ9
tOo+4Uu1HFFp3duCuSGQJleoVT75HENLogH084dSm0BPs9waRYB5HTDrpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2MOGhtyZtP1y/WAqsEjgcZB6w2MB8GA1UdIwQY
MBaAFD9bxEAUKFtvPihyrs9dTzPiaM6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDkt
MDI5NTNjZTYzODQzLzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDktMDI5NTNjZTYzODQz
LzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9IJ5E93
44zXHhsWy7ZloZPuVcE+EZVS0z6/Xo00YS4iEZMat+Ha9cHyd+/rGvf9gaRbE7Of
yUdpNQoAFRdPTB53Bg5aYxMAMyylydN+hUPzolmdqkH4ZUDajFyYxOD4Z+zw/Plj
LQJ1QCV6gDbBe4tQJCRJ6x531jO/H3NHTQ5fjeJobljJaUZOYamNDXIhYiB1OeFZ
7N5VqqQ8yi5fF1AG01BDUh3Z9gBaUYIvToS4IS6pNW09N/2y3eqSG84o5LghBw0M
X8zl3KU7hXPh2zny+D98u7NY6GLPO0h1UQNlskoUSvJhHuXLt0co/pXUgOM541M5
zE+aHVa+T6bVgw==
-----END CERTIFICATE-----
Generated at Sat Mar 14 10:29:22 2026 by rpki-client