Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
File: p4wD9FkI30xFw_B9KkssQCRdUTI.mft (raw, json)
Hash identifier: K8j0pgkpxb+HHRNncasY/H7lk7osVCkJp3FKxtr+yHo=
Subject key identifier: 87:E3:0A:AF:92:94:4B:90:F3:E7:36:15:B8:BD:0D:A6:76:D9:77:D7
Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
Certificate issuer: /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Certificate serial: 019D39778E0271645C7C479053570183A074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 12:00:29 +0000
Manifest this update: Sun 29 Mar 2026 12:00:29 +0000
Manifest next update: Mon 30 Mar 2026 12:00:29 +0000
Files and hashes: 1: mNwkS1qi0XHbCO-C3fAjXeIuQSo.roa (hash: 76qYQmBj5fTGwqCZ0h8a/Bab0EeZxD7iG9TSaybvW9s=)
2: p4wD9FkI30xFw_B9KkssQCRdUTI.crl (hash: 4Cnc7PNHoWTInrOds/Hu3NDBRgsAZp7oWg5BxDKyTqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:8e:02:71:64:5c:7c:47:90:53:57:01:83:a0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Validity
Not Before: Mar 29 12:00:29 2026 GMT
Not After : Mar 30 12:00:29 2026 GMT
Subject: CN=87e30aaf92944b90f3e73615b8bd0da676d977d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:7e:3e:d7:11:a9:a1:89:f6:bc:3d:24:78:
ae:59:db:95:03:dc:89:6f:1e:68:21:80:d0:19:bc:
ed:19:af:16:ae:8c:81:4d:87:1b:9f:12:24:3e:62:
12:28:68:5c:db:5a:8f:84:f2:92:60:9f:e6:e1:a2:
f4:67:34:90:e0:49:90:c9:ae:db:60:f3:87:d2:86:
38:25:b0:1d:c2:3c:22:54:d8:e6:dc:0f:18:0a:98:
41:c3:e2:7a:a6:50:16:3b:c1:f7:bf:2a:ff:71:24:
32:01:96:f4:fd:a5:a4:cf:41:bb:6a:40:5d:5b:85:
87:ca:e8:df:de:75:66:23:c5:25:04:fa:9a:8c:d2:
97:fe:1e:a0:32:b0:98:d6:87:27:b5:14:f4:e1:f6:
08:db:9e:ff:56:fc:90:70:0c:d0:29:1c:f0:b9:9d:
77:08:6e:b0:f3:7d:3b:90:0f:b2:2d:12:27:46:0d:
76:27:6f:92:f7:11:84:47:fa:de:9c:28:bc:01:f1:
0d:b8:a8:a5:be:4c:97:90:a7:ab:17:df:2d:a0:7e:
6d:5c:3a:2c:f2:f2:9b:ff:27:c7:36:3e:f6:24:23:
6b:5c:55:bf:2b:b3:37:7c:eb:75:79:3d:7a:ca:f5:
39:12:8f:fe:3c:8c:63:88:a8:d0:c5:65:bc:53:66:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E3:0A:AF:92:94:4B:90:F3:E7:36:15:B8:BD:0D:A6:76:D9:77:D7
X509v3 Authority Key Identifier:
keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a1:8e:3c:74:ce:fb:b5:c3:e0:08:c9:c3:f0:2f:e0:2e:02:
02:4a:0a:9f:fc:aa:3b:fb:f5:ed:a7:9f:55:55:96:7d:cd:17:
16:73:cc:84:8a:bf:f5:1d:89:8f:32:da:57:e2:2f:8c:52:c5:
1c:c9:39:40:17:bc:f0:e3:39:3b:26:b4:22:64:6d:38:63:e3:
11:d1:a1:95:4c:6a:74:4a:04:20:54:11:0a:07:63:e8:eb:44:
f2:11:5c:55:c8:ae:52:0f:46:b6:67:97:d4:85:de:fe:ec:a4:
c3:fb:e7:41:c3:7d:c0:88:4d:eb:48:0f:3f:cb:21:0d:44:0a:
9b:d1:fe:1a:99:bd:3b:6c:aa:3c:2b:0b:6f:e6:52:cc:c3:af:
df:29:d0:d9:1a:da:c7:f4:6b:1a:67:99:d3:21:c7:de:4b:41:
c4:27:24:6b:da:72:c7:3a:ff:23:05:a1:ed:4a:4b:ed:e8:82:
04:53:81:55:5b:5b:d5:50:2d:44:af:d5:66:ab:47:e3:4e:f9:
6f:b7:f4:f0:7b:73:45:21:62:b4:b6:9a:84:f5:a7:98:82:5d:
73:e8:69:44:45:48:a3:5c:74:33:49:1d:5b:c9:9f:59:0d:2b:
a7:ba:cc:0f:38:77:94:dd:af:20:28:fa:b0:78:05:c9:46:ad:
e7:8f:40:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d44CcWRcfEeQU1cBg6B0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OGMwM2Y0NTkwOGRmNGM0NWMzZjA3ZDJhNGIyYzQwMjQ1
ZDUxMzIwHhcNMjYwMzI5MTIwMDI5WhcNMjYwMzMwMTIwMDI5WjAzMTEwLwYDVQQD
Eyg4N2UzMGFhZjkyOTQ0YjkwZjNlNzM2MTViOGJkMGRhNjc2ZDk3N2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqV+PtcRqaGJ9rw9JHiuWduVA9yJ
bx5oIYDQGbztGa8WroyBTYcbnxIkPmISKGhc21qPhPKSYJ/m4aL0ZzSQ4EmQya7b
YPOH0oY4JbAdwjwiVNjm3A8YCphBw+J6plAWO8H3vyr/cSQyAZb0/aWkz0G7akBd
W4WHyujf3nVmI8UlBPqajNKX/h6gMrCY1ocntRT04fYI257/VvyQcAzQKRzwuZ13
CG6w8307kA+yLRInRg12J2+S9xGER/renCi8AfENuKilvkyXkKerF98toH5tXDos
8vKb/yfHNj72JCNrXFW/K7M3fOt1eT16yvU5Eo/+PIxjiKjQxWW8U2byWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfjCq+SlEuQ8+c2Fbi9DaZ22XfXMB8GA1UdIwQY
MBaAFKeMA/RZCN9MRcPwfSpLLEAkXVEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lNWM2OTctY2M5My00ZDcxLWI5NDAt
OWJhODViZTNiZjA5LzEvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9lNWM2OTctY2M5My00ZDcxLWI5NDAtOWJhODViZTNiZjA5
LzEvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmaGOPHTO
+7XD4AjJw/Av4C4CAkoKn/yqO/v17aefVVWWfc0XFnPMhIq/9R2JjzLaV+IvjFLF
HMk5QBe88OM5Oya0ImRtOGPjEdGhlUxqdEoEIFQRCgdj6OtE8hFcVciuUg9GtmeX
1IXe/uykw/vnQcN9wIhN60gPP8shDUQKm9H+Gpm9O2yqPCsLb+ZSzMOv3ynQ2Rra
x/RrGmeZ0yHH3ktBxCcka9pyxzr/IwWh7UpL7eiCBFOBVVtb1VAtRK/VZqtH4075
b7f08HtzRSFitLaahPWnmIJdc+hpREVIo1x0M0kdW8mfWQ0rp7rMDzh3lN2vICj6
sHgFyUat549AMA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:49 2026 by rpki-client