Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
File: PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json)
Hash identifier: 4BQEOcdpW8EC1vTG2opOxD4B6X+4lAV2L5Dtki+y1u0=
Subject key identifier: AD:76:BA:E1:AC:DF:13:74:A0:E4:18:20:29:5F:9F:F4:BA:3E:B0:CE
Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b
Certificate serial: 019D371B77BA6F185318C95BD2BB3F6D0A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 01:00:40 +0000
Manifest this update: Sun 29 Mar 2026 01:00:40 +0000
Manifest next update: Mon 30 Mar 2026 01:00:40 +0000
Files and hashes: 1: 0ko9UBY3qaWw4RiEppaPRG8PLpg.roa (hash: A/2dJRQ4DKhZbhuSe8F7VZVq5LLcY4OTIT5i7IA9sYI=)
2: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: f7/14jnIMPSmInIYM03geLSWz3kDzyDDp5b6JxluKzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:77:ba:6f:18:53:18:c9:5b:d2:bb:3f:6d:0a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b
Validity
Not Before: Mar 29 01:00:40 2026 GMT
Not After : Mar 30 01:00:40 2026 GMT
Subject: CN=ad76bae1acdf1374a0e41820295f9ff4ba3eb0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:50:e5:65:df:26:58:57:4b:e5:33:1b:5b:
fe:52:aa:a4:29:03:9c:33:43:9c:80:1c:3c:c3:e7:
ea:52:c6:f2:7e:d1:27:d4:33:3b:92:8a:3c:93:6c:
d2:35:32:8e:9a:11:f8:1b:1e:61:bc:de:44:3f:38:
13:54:0d:f5:45:58:de:6d:af:fa:3d:7a:c7:1a:84:
fd:7e:4d:3c:39:7d:40:24:0a:53:b2:ac:1c:bf:4e:
10:b4:a1:ec:50:64:21:5a:a1:8e:1f:e0:ea:a0:ce:
a2:8f:92:0d:de:de:b0:54:c4:c7:17:92:c5:f2:49:
8a:d5:90:ad:12:e8:7f:ce:a1:a0:9b:8d:61:29:92:
87:80:d9:c1:c7:a4:b7:7e:c0:6c:a8:2f:2f:db:79:
0d:09:16:ba:8d:28:6c:df:a7:c8:fd:c6:4f:22:4c:
f0:3d:43:77:1b:0b:57:c7:10:9c:b4:fd:3e:cb:b2:
e0:9b:d6:ac:f3:a5:00:62:2a:aa:20:cd:13:1e:e1:
eb:a5:f4:e3:c6:b0:04:5d:6e:b5:41:d7:ea:26:4b:
1e:30:c9:3e:a4:5c:3e:cc:99:51:7b:31:e3:f5:55:
f1:9e:21:e0:1c:05:0f:27:cd:00:03:0c:d0:bb:c7:
63:aa:4d:6a:61:0f:ee:f5:33:48:b0:c4:04:71:75:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:76:BA:E1:AC:DF:13:74:A0:E4:18:20:29:5F:9F:F4:BA:3E:B0:CE
X509v3 Authority Key Identifier:
keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:48:92:b9:10:2a:c4:b9:ff:8b:bf:a5:81:61:6a:a5:25:e1:
ed:cd:ef:17:c4:27:ad:d9:03:70:70:ad:b0:1f:68:f4:9d:2b:
55:7e:00:27:b4:97:8f:4e:5a:b6:9b:fd:a3:49:ad:19:18:80:
7b:cf:f1:dd:a5:f8:2b:76:24:14:68:69:19:49:66:c8:1a:74:
76:0d:7b:c0:be:c1:3f:3b:1c:6a:84:6d:ca:8e:aa:88:4c:bd:
e8:6e:03:9f:d1:3c:46:af:ef:5c:8d:1b:60:49:c0:83:ba:1d:
be:f8:7c:ff:f3:eb:8f:e4:bd:e9:0c:a2:48:ed:e3:71:a8:ef:
18:b8:7e:26:90:f4:52:d1:07:7c:89:11:ee:da:1e:94:32:ad:
24:f8:d2:2a:ac:15:a3:c2:9b:25:27:5f:b8:9b:41:b5:c4:8b:
00:6d:cd:a4:13:89:0d:4c:16:29:61:4a:5c:8b:79:9e:c7:2d:
b1:9d:4d:80:55:58:20:b6:08:36:25:5c:e4:11:14:05:d7:7a:
21:4a:df:2c:f4:f5:5a:7d:de:83:72:49:36:ed:44:a5:40:3a:
42:cd:c7:e2:53:b6:bd:ef:5d:cc:ad:25:81:d5:75:59:f0:c5:
b3:5c:f1:0d:45:49:70:06:d0:f4:30:ee:68:28:a1:41:43:d9:
b4:a3:84:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G3e6bxhTGMlb0rs/bQoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMmEyNjdkY2UwNzIyMzhlOWMwNDUxNWU2N2ViOTkyNjcy
ZTM1MWIwHhcNMjYwMzI5MDEwMDQwWhcNMjYwMzMwMDEwMDQwWjAzMTEwLwYDVQQD
EyhhZDc2YmFlMWFjZGYxMzc0YTBlNDE4MjAyOTVmOWZmNGJhM2ViMGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJpQ5WXfJlhXS+UzG1v+UqqkKQOc
M0OcgBw8w+fqUsbyftEn1DM7koo8k2zSNTKOmhH4Gx5hvN5EPzgTVA31RVjeba/6
PXrHGoT9fk08OX1AJApTsqwcv04QtKHsUGQhWqGOH+DqoM6ij5IN3t6wVMTHF5LF
8kmK1ZCtEuh/zqGgm41hKZKHgNnBx6S3fsBsqC8v23kNCRa6jShs36fI/cZPIkzw
PUN3GwtXxxCctP0+y7Lgm9as86UAYiqqIM0THuHrpfTjxrAEXW61QdfqJkseMMk+
pFw+zJlRezHj9VXxniHgHAUPJ80AAwzQu8djqk1qYQ/u9TNIsMQEcXXE3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK12uuGs3xN0oOQYIClfn/S6PrDOMB8GA1UdIwQY
MBaAFDwqJn3OByI46cBFFeZ+uZJnLjUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jZDZhN2ItMTU4MC00MTAyLTlhYTYt
YTRiNmUzZDBkODMwLzEvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jZDZhN2ItMTU4MC00MTAyLTlhYTYtYTRiNmUzZDBkODMw
LzEvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0iSuRAq
xLn/i7+lgWFqpSXh7c3vF8QnrdkDcHCtsB9o9J0rVX4AJ7SXj05atpv9o0mtGRiA
e8/x3aX4K3YkFGhpGUlmyBp0dg17wL7BPzscaoRtyo6qiEy96G4Dn9E8Rq/vXI0b
YEnAg7odvvh8//Prj+S96QyiSO3jcajvGLh+JpD0UtEHfIkR7toelDKtJPjSKqwV
o8KbJSdfuJtBtcSLAG3NpBOJDUwWKWFKXIt5nsctsZ1NgFVYILYINiVc5BEUBdd6
IUrfLPT1Wn3eg3JJNu1EpUA6Qs3H4lO2ve9dzK0lgdV1WfDFs1zxDUVJcAbQ9DDu
aCihQUPZtKOEZg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:40 2026 by rpki-client