Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
File: pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json)
Hash identifier: BFQjau7B9Zkq4vc+K3kX9mScsZ+tyGENwONyEiBwnVY=
Subject key identifier: F2:6B:65:1B:FA:72:F4:F3:C3:44:E7:E3:29:6B:1F:98:EE:1C:C8:7B
Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Certificate issuer: /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Certificate serial: 019D39AEF1B13C2BE1287BC1D23FB0530A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
Manifest number: 1824
Signing time: Sun 29 Mar 2026 13:00:59 +0000
Manifest this update: Sun 29 Mar 2026 13:00:59 +0000
Manifest next update: Mon 30 Mar 2026 13:00:59 +0000
Files and hashes: 1: EOVG1E-Fss-TCAZp6FvBla5puoE.roa (hash: QLZCSRXuXCEog/Ml5Xp9IxcczY5XpGCzAWi6jfDK03o=)
2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: as+6iIqBCC1ZLBUCb9bQHofgzHuEP4/Q0WBfQLjt4Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:f1:b1:3c:2b:e1:28:7b:c1:d2:3f:b0:53:0a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Validity
Not Before: Mar 29 13:00:59 2026 GMT
Not After : Mar 30 13:00:59 2026 GMT
Subject: CN=f26b651bfa72f4f3c344e7e3296b1f98ee1cc87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:96:d5:5c:a8:b9:04:1e:9a:14:f5:c7:24:
5d:dc:e1:8f:69:4b:d5:8f:da:6f:ba:ab:3a:0a:d8:
1e:e2:ae:8f:d1:27:0b:f9:25:07:6d:92:ad:de:0f:
cd:64:94:0d:e9:83:97:42:9b:9f:5a:cd:3c:f2:5c:
f0:a0:91:2a:d8:0b:02:49:dd:86:fc:ef:e8:65:52:
cf:50:98:84:d2:0a:18:c4:ce:5b:d1:76:d1:be:54:
e7:92:b6:cb:ea:b9:0e:d7:9e:c6:73:2b:aa:ea:47:
f5:ba:8f:1f:75:c9:ae:07:47:9c:cd:5c:0c:c6:b9:
9d:da:d4:aa:16:0b:18:9a:f8:2d:57:4f:2e:cc:f7:
f0:26:91:9a:95:74:ba:e0:2d:60:5c:7a:88:71:84:
30:d2:5e:cd:31:95:29:e3:dd:1a:45:45:24:a1:5f:
b2:f4:ae:95:af:8c:c0:5c:0e:28:98:b2:6a:50:4b:
9e:81:43:99:73:91:90:31:96:b8:d9:14:e6:e0:12:
cf:78:74:a2:81:b3:bf:3d:76:e6:84:0a:2c:1d:26:
da:7f:27:eb:64:64:9d:d8:c8:a4:bc:14:21:c0:3f:
63:6a:c5:c3:20:9e:1b:80:6a:11:ba:af:3d:6a:21:
19:d1:97:4a:8e:78:25:28:2d:a0:ce:0c:2c:44:46:
a3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6B:65:1B:FA:72:F4:F3:C3:44:E7:E3:29:6B:1F:98:EE:1C:C8:7B
X509v3 Authority Key Identifier:
keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:84:be:1d:1a:6b:98:6b:bd:1d:1e:36:18:70:0c:2e:e9:ca:
b5:17:a0:23:6f:06:55:d1:36:ed:2e:21:86:6d:8f:24:02:b1:
cb:79:f9:d1:5b:ca:9a:c1:af:64:45:20:99:87:e0:a0:2f:10:
be:af:4d:f6:45:ad:a3:4c:bc:05:ea:91:67:03:89:b0:dd:7e:
b0:ec:01:40:55:85:f2:79:1c:d8:5d:81:28:f3:76:57:c7:04:
0b:4c:ca:43:92:41:77:a6:fa:38:b8:c8:b8:c6:4d:ce:3c:f5:
3c:c6:f6:01:0f:92:a4:2d:3b:f7:d4:ff:9c:6a:1c:3b:24:2f:
7f:e4:6b:7c:8b:dd:2f:4d:4b:9a:eb:8d:86:61:1c:bd:42:b3:
eb:6c:ea:7f:de:54:24:f5:b0:c6:ec:b8:e4:a2:eb:05:db:d7:
32:3f:8d:ae:87:9a:8f:d0:c1:80:a6:0f:52:fb:4c:44:f1:bc:
72:5c:49:c6:f5:7a:d2:6a:a8:98:17:aa:a3:73:37:eb:43:1e:
b4:2e:f2:4d:02:33:d9:7b:c4:ba:b9:b5:a8:b1:95:78:0e:f8:
10:cf:f2:21:6c:44:c7:c1:99:7f:65:f1:3f:de:4e:d6:dc:0d:
cf:1e:99:47:3f:10:b2:b4:c8:31:39:07:6c:9b:46:2d:e7:c8:
41:d1:02:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rvGxPCvhKHvB0j+wUwpzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDBiODVmMGY3YmE2Mzg1Y2Q0ZmVlOGEwZWMwNGU4MTg0
MTU0MmMwHhcNMjYwMzI5MTMwMDU5WhcNMjYwMzMwMTMwMDU5WjAzMTEwLwYDVQQD
EyhmMjZiNjUxYmZhNzJmNGYzYzM0NGU3ZTMyOTZiMWY5OGVlMWNjODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQGW1VyouQQemhT1xyRd3OGPaUvV
j9pvuqs6Ctge4q6P0ScL+SUHbZKt3g/NZJQN6YOXQpufWs088lzwoJEq2AsCSd2G
/O/oZVLPUJiE0goYxM5b0XbRvlTnkrbL6rkO157Gcyuq6kf1uo8fdcmuB0eczVwM
xrmd2tSqFgsYmvgtV08uzPfwJpGalXS64C1gXHqIcYQw0l7NMZUp490aRUUkoV+y
9K6Vr4zAXA4omLJqUEuegUOZc5GQMZa42RTm4BLPeHSigbO/PXbmhAosHSbafyfr
ZGSd2MikvBQhwD9jasXDIJ4bgGoRuq89aiEZ0ZdKjnglKC2gzgwsREajEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJrZRv6cvTzw0Tn4ylrH5juHMh7MB8GA1UdIwQY
MBaAFKRAuF8Pe6Y4XNT+6KDsBOgYQVQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDkt
ZGRjZmUzNmY0MzNiLzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDktZGRjZmUzNmY0MzNi
LzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYS+HRpr
mGu9HR42GHAMLunKtRegI28GVdE27S4hhm2PJAKxy3n50VvKmsGvZEUgmYfgoC8Q
vq9N9kWto0y8BeqRZwOJsN1+sOwBQFWF8nkc2F2BKPN2V8cEC0zKQ5JBd6b6OLjI
uMZNzjz1PMb2AQ+SpC0799T/nGocOyQvf+RrfIvdL01LmuuNhmEcvUKz62zqf95U
JPWwxuy45KLrBdvXMj+Nroeaj9DBgKYPUvtMRPG8clxJxvV60mqomBeqo3M360Me
tC7yTQIz2XvEurm1qLGVeA74EM/yIWxEx8GZf2XxP95O1twNzx6ZRz8QsrTIMTkH
bJtGLefIQdECxg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:36 2026 by rpki-client