Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
File: P2LKnF7__TIKvS2Px-j4Nee70es.mft (raw, json)
Hash identifier: wsMAMSnTUuteOGfa7RcU8SJusaVmfKRECRVVo81OY3E=
Subject key identifier: 81:F4:41:C5:87:53:6B:9A:7F:74:95:4D:AD:89:59:B0:8E:EF:6E:9C
Authority key identifier: 3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
Certificate issuer: /CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Certificate serial: 019D382E65EA4E353B29CAED7524BC61A8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
Manifest number: 0C88
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: P2LKnF7__TIKvS2Px-j4Nee70es.crl (hash: g/UFenWWZs7l61eZkApCNyJ2OgjRDnUwVJ+kt+zcR/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:65:ea:4e:35:3b:29:ca:ed:75:24:bc:61:a8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=81f441c587536b9a7f74954dad8959b08eef6e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:fc:d4:b5:15:8c:86:67:b4:2a:7f:ca:69:
ff:b1:27:17:5d:e8:80:08:25:a6:0d:5f:43:31:62:
19:64:84:f6:d3:21:ab:95:98:c3:cb:a1:f1:26:94:
de:f9:f9:81:f3:b1:08:a6:2c:6d:77:50:db:92:0e:
5b:0d:9e:05:06:e1:d3:8a:b1:cb:3d:8c:01:49:91:
e7:c6:26:c6:b0:81:11:0d:b9:bc:4b:7a:aa:08:68:
67:3b:dd:9e:0e:74:8e:2c:ed:d0:1d:f8:a7:9e:06:
8e:78:cf:7b:a8:59:ef:1f:d0:2d:5b:47:d8:53:13:
9a:9a:e6:e4:72:6a:6b:43:81:b4:fd:7b:48:ae:c9:
1e:bf:4a:07:dc:a0:a7:7c:3d:d1:89:13:f7:f6:ac:
2e:c3:47:c9:93:5c:2d:d8:84:b4:7a:c9:00:74:4c:
0c:28:2e:dd:5d:6a:e8:54:12:8b:90:66:d0:ec:10:
29:b8:6f:2a:e4:c7:81:02:92:c9:c9:16:56:fe:35:
f5:ae:9a:c0:9b:31:6e:2b:51:e3:c1:ec:ee:eb:02:
ca:71:2a:35:f2:e2:22:c2:34:34:a3:45:d1:ac:04:
a6:d6:f3:b3:ae:b5:54:48:54:55:14:a0:65:ba:5c:
2a:09:74:94:b8:49:b4:5d:f9:14:51:1f:b9:30:5e:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F4:41:C5:87:53:6B:9A:7F:74:95:4D:AD:89:59:B0:8E:EF:6E:9C
X509v3 Authority Key Identifier:
keyid:3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:81:0f:4e:c3:9c:b1:5b:13:f7:89:5c:02:7d:1d:b3:76:81:
41:e6:45:92:28:2b:06:5a:00:6d:ea:02:10:68:09:12:a6:fc:
87:4c:8b:54:97:8d:dc:1e:8a:e2:a0:4f:1c:9e:27:bb:09:a9:
2f:f1:ba:3d:cd:ae:3d:e0:bf:ac:22:a2:68:30:25:82:44:25:
ec:34:2e:62:ba:86:02:4a:96:75:ef:7a:43:a4:dc:2d:8f:b8:
3d:fe:0d:2c:bd:e2:5c:51:ac:a2:33:ef:59:19:1c:70:ea:96:
9a:05:5f:be:8f:82:92:3f:4b:8a:03:7d:7a:f7:2e:9d:e2:e6:
8e:11:51:25:cd:f9:80:c7:9f:4e:0e:d9:ac:d6:b2:c3:fa:a0:
2c:13:65:37:61:b6:34:a2:ec:02:3f:08:2c:c3:7d:fc:4c:01:
e0:ae:d8:c4:44:29:f5:3e:d2:1c:8a:fa:bb:e0:de:8d:4c:b9:
6a:37:f4:43:58:ff:b1:f5:a7:1e:98:6b:58:3d:a7:60:a9:bf:
ee:49:f5:e4:c4:f1:98:63:fd:1e:91:e9:3a:cd:07:73:da:92:
4c:14:6b:38:de:31:22:1a:70:76:cc:bc:f6:c0:65:20:73:54:
02:c5:b3:6f:20:15:82:8c:c2:3c:76:03:d3:3f:c8:cb:7c:f9:
6a:6b:1a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LmXqTjU7KcrtdSS8Yai6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNjJjYTljNWVmZmZkMzIwYWJkMmQ4ZmM3ZThmODM1ZTdi
YmQxZWIwHhcNMjYwMzI5MDYwMDU3WhcNMjYwMzMwMDYwMDU3WjAzMTEwLwYDVQQD
Eyg4MWY0NDFjNTg3NTM2YjlhN2Y3NDk1NGRhZDg5NTliMDhlZWY2ZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29z81LUVjIZntCp/ymn/sScXXeiA
CCWmDV9DMWIZZIT20yGrlZjDy6HxJpTe+fmB87EIpixtd1Dbkg5bDZ4FBuHTirHL
PYwBSZHnxibGsIERDbm8S3qqCGhnO92eDnSOLO3QHfinngaOeM97qFnvH9AtW0fY
UxOamubkcmprQ4G0/XtIrskev0oH3KCnfD3RiRP39qwuw0fJk1wt2IS0eskAdEwM
KC7dXWroVBKLkGbQ7BApuG8q5MeBApLJyRZW/jX1rprAmzFuK1Hjwezu6wLKcSo1
8uIiwjQ0o0XRrASm1vOzrrVUSFRVFKBlulwqCXSUuEm0XfkUUR+5MF4BowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH0QcWHU2uaf3SVTa2JWbCO726cMB8GA1UdIwQY
MBaAFD9iypxe//0yCr0tj8fo+DXnu9HrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDJMS25GN19fVElLdlMyUHgtajROZWU3MGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMzYxY2ItZjhiZS00YjUwLTk4Njkt
MDA5MDgwZThkZmY1LzEvUDJMS25GN19fVElLdlMyUHgtajROZWU3MGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hMzYxY2ItZjhiZS00YjUwLTk4NjktMDA5MDgwZThkZmY1
LzEvUDJMS25GN19fVElLdlMyUHgtajROZWU3MGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIEPTsOc
sVsT94lcAn0ds3aBQeZFkigrBloAbeoCEGgJEqb8h0yLVJeN3B6K4qBPHJ4nuwmp
L/G6Pc2uPeC/rCKiaDAlgkQl7DQuYrqGAkqWde96Q6TcLY+4Pf4NLL3iXFGsojPv
WRkccOqWmgVfvo+Ckj9LigN9evcuneLmjhFRJc35gMefTg7ZrNayw/qgLBNlN2G2
NKLsAj8ILMN9/EwB4K7YxEQp9T7SHIr6u+DejUy5ajf0Q1j/sfWnHphrWD2nYKm/
7kn15MTxmGP9HpHpOs0Hc9qSTBRrON4xIhpwdsy89sBlIHNUAsWzbyAVgozCPHYD
0z/Iy3z5amsaZQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:59 2026 by rpki-client