Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft
File: pRJgm-HwV0eSjF8HvRl-YxQ132I.mft (raw, json)
Hash identifier: oh+eLJmtxLhdZeBMc0NVhdgZ1qNIdI5mva1GxZvMpZg=
Subject key identifier: E5:12:A0:BF:BA:D3:4C:3C:FC:D7:D9:90:6C:EB:DB:27:83:F8:1A:C4
Authority key identifier: A5:12:60:9B:E1:F0:57:47:92:8C:5F:07:BD:19:7E:63:14:35:DF:62
Certificate issuer: /CN=a512609be1f05747928c5f07bd197e631435df62
Certificate serial: 019D37F76CD8A46C6290EF2C6370BFC38F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRJgm-HwV0eSjF8HvRl-YxQ132I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft
Manifest number: 0148
Signing time: Sun 29 Mar 2026 05:00:55 +0000
Manifest this update: Sun 29 Mar 2026 05:00:55 +0000
Manifest next update: Mon 30 Mar 2026 05:00:55 +0000
Files and hashes: 1: pRJgm-HwV0eSjF8HvRl-YxQ132I.crl (hash: 2LPcF0RuflLwRcc/DiAv88PdN1TxqID8S7Bxk97j+RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRJgm-HwV0eSjF8HvRl-YxQ132I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6c:d8:a4:6c:62:90:ef:2c:63:70:bf:c3:8f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a512609be1f05747928c5f07bd197e631435df62
Validity
Not Before: Mar 29 05:00:55 2026 GMT
Not After : Mar 30 05:00:55 2026 GMT
Subject: CN=e512a0bfbad34c3cfcd7d9906cebdb2783f81ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:d1:f5:fa:a2:73:1e:95:f9:ea:df:73:e5:
31:61:a7:f4:04:79:22:b4:0c:b9:bb:70:b3:e4:09:
39:c6:41:bc:80:31:e5:e7:59:b7:4b:2c:fc:b5:a4:
58:15:61:c5:20:73:a2:0f:e5:d7:52:7d:8a:b2:f7:
ee:90:16:9c:de:2f:1e:0e:07:26:4f:b8:dd:8f:e8:
5a:ea:8a:01:44:82:5d:a2:cf:75:a7:aa:01:4b:e5:
59:d4:5a:a7:a7:a1:09:22:93:e4:37:a0:ba:e0:84:
7c:d6:7d:28:37:2e:db:e3:fe:03:b2:54:88:1e:32:
09:86:50:a5:45:ad:8f:be:b5:18:be:55:dc:c5:b5:
8a:18:d7:d3:3b:9b:91:22:50:bc:83:57:32:98:9b:
2c:14:02:40:fe:23:8b:5c:d8:6f:6e:82:63:55:e8:
b1:87:de:da:9b:61:10:b4:3d:f6:fc:ab:49:f8:eb:
cc:27:54:ee:c8:f0:7a:2a:6e:66:e1:9e:94:06:7e:
bd:b2:16:17:cd:98:11:08:39:2f:cc:20:94:8a:5b:
66:85:b6:47:4f:25:f1:6d:14:15:6b:68:6e:0d:2f:
b3:38:8e:a9:73:19:d3:c2:19:91:9a:50:71:1d:6b:
32:4d:80:e7:d8:ea:5f:4d:5e:cf:e7:da:20:c4:9e:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:12:A0:BF:BA:D3:4C:3C:FC:D7:D9:90:6C:EB:DB:27:83:F8:1A:C4
X509v3 Authority Key Identifier:
keyid:A5:12:60:9B:E1:F0:57:47:92:8C:5F:07:BD:19:7E:63:14:35:DF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRJgm-HwV0eSjF8HvRl-YxQ132I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:90:16:31:f0:12:ad:dd:7b:de:57:6a:06:d3:10:ff:62:83:
02:44:32:aa:0d:96:fc:63:d0:71:d3:66:bd:e4:5b:ed:d2:e8:
50:75:cc:24:d6:e3:f3:71:03:52:89:9f:7f:4e:07:90:b5:02:
f1:be:b7:ca:5a:ec:69:78:07:0d:a6:e9:a0:4c:a1:42:69:2b:
cd:9e:87:21:fa:d9:19:68:dc:08:3d:f1:0e:9a:f2:ca:b7:b7:
34:73:e6:ce:eb:72:21:a4:fb:ae:fb:4b:19:24:b5:07:51:6a:
30:44:e1:31:16:b8:4c:17:03:f8:a3:25:5e:8e:9a:2a:01:b2:
09:95:0f:f8:7c:10:b3:ac:2d:d2:6d:36:5e:c9:ce:4d:1c:7d:
35:c9:69:b7:6e:6d:4c:72:7c:ae:20:e7:3d:7d:c2:bc:52:02:
81:1c:54:31:ed:0d:05:95:75:49:6c:26:a9:27:e7:f8:1d:17:
9a:73:5f:c8:e7:3f:3d:11:54:64:d2:18:93:3c:82:c2:49:92:
91:a5:ef:d6:b7:81:b8:79:f9:43:99:76:bd:34:b1:34:dd:b1:
74:93:d9:7e:96:2f:23:9f:d5:5f:17:68:04:b0:5d:4c:d1:a3:
f5:33:f0:29:cc:1b:62:f1:1d:d3:74:66:2d:98:55:5f:b4:45:
89:71:b9:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0392zYpGxikO8sY3C/w4+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MTI2MDliZTFmMDU3NDc5MjhjNWYwN2JkMTk3ZTYzMTQz
NWRmNjIwHhcNMjYwMzI5MDUwMDU1WhcNMjYwMzMwMDUwMDU1WjAzMTEwLwYDVQQD
EyhlNTEyYTBiZmJhZDM0YzNjZmNkN2Q5OTA2Y2ViZGIyNzgzZjgxYWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBTR9fqicx6V+erfc+UxYaf0BHki
tAy5u3Cz5Ak5xkG8gDHl51m3Syz8taRYFWHFIHOiD+XXUn2KsvfukBac3i8eDgcm
T7jdj+ha6ooBRIJdos91p6oBS+VZ1Fqnp6EJIpPkN6C64IR81n0oNy7b4/4DslSI
HjIJhlClRa2PvrUYvlXcxbWKGNfTO5uRIlC8g1cymJssFAJA/iOLXNhvboJjVeix
h97am2EQtD32/KtJ+OvMJ1TuyPB6Km5m4Z6UBn69shYXzZgRCDkvzCCUiltmhbZH
TyXxbRQVa2huDS+zOI6pcxnTwhmRmlBxHWsyTYDn2OpfTV7P59ogxJ4ygQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUSoL+600w8/NfZkGzr2yeD+BrEMB8GA1UdIwQY
MBaAFKUSYJvh8FdHkoxfB70ZfmMUNd9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFJKZ20tSHdWMGVTakY4SHZSbC1ZeFExMzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zMzYwNzAtMDI4Yi00NzZmLTg2MDYt
NTVjMWM4NGFlZDc5LzEvcFJKZ20tSHdWMGVTakY4SHZSbC1ZeFExMzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zMzYwNzAtMDI4Yi00NzZmLTg2MDYtNTVjMWM4NGFlZDc5
LzEvcFJKZ20tSHdWMGVTakY4SHZSbC1ZeFExMzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpAWMfAS
rd173ldqBtMQ/2KDAkQyqg2W/GPQcdNmveRb7dLoUHXMJNbj83EDUomff04HkLUC
8b63ylrsaXgHDabpoEyhQmkrzZ6HIfrZGWjcCD3xDpryyre3NHPmzutyIaT7rvtL
GSS1B1FqMEThMRa4TBcD+KMlXo6aKgGyCZUP+HwQs6wt0m02XsnOTRx9Nclpt25t
THJ8riDnPX3CvFICgRxUMe0NBZV1SWwmqSfn+B0XmnNfyOc/PRFUZNIYkzyCwkmS
kaXv1reBuHn5Q5l2vTSxNN2xdJPZfpYvI5/VXxdoBLBdTNGj9TPwKcwbYvEd03Rm
LZhVX7RFiXG5Ow==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:06 2026 by rpki-client