Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
File: PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json)
Hash identifier: lSkBg7wmZxd0LZ9LPrNsxPHjAzFj7cg+R5noAQa4avE=
Subject key identifier: 00:C1:C8:AC:E5:41:86:46:95:29:D8:4E:D2:F7:A9:39:9C:D2:FF:48
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial: 019D382E02B274DB4900A8B989D08A992711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
Manifest number: 1029
Signing time: Sun 29 Mar 2026 06:00:32 +0000
Manifest this update: Sun 29 Mar 2026 06:00:32 +0000
Manifest next update: Mon 30 Mar 2026 06:00:32 +0000
Files and hashes: 1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: XDZqkgiia0mzYfO5gIVAf+5SJpz7MT96XfdxAnWBlx8=)
2: RkAA10vCg6MkKKDZVdqR-tBX7bM.roa (hash: 3GXYAmGoE5ebf+ZEUr6uNtnsEAbhBs1D4PtYm72f7Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:02:b2:74:db:49:00:a8:b9:89:d0:8a:99:27:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Validity
Not Before: Mar 29 06:00:32 2026 GMT
Not After : Mar 30 06:00:32 2026 GMT
Subject: CN=00c1c8ace54186469529d84ed2f7a9399cd2ff48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:88:c2:59:3a:10:38:26:1b:ad:60:97:94:
71:07:a4:7a:41:ae:91:e9:ef:81:91:35:5f:1a:0f:
8f:d1:2c:a2:2b:f2:8e:12:d5:de:eb:a7:5b:67:f2:
d5:12:a4:d5:30:fb:9f:c6:bd:f7:0e:14:5e:8a:69:
1d:97:2e:08:5f:c5:91:62:b8:e0:2a:b9:11:e0:5d:
a5:c4:0c:64:4e:c3:fc:6f:3e:d0:b8:c5:d5:23:a6:
a8:14:fe:cb:00:50:32:12:fb:d4:67:e0:99:bb:96:
01:6d:4f:66:92:54:f6:67:48:56:bb:a2:d6:2d:4f:
29:d4:fd:c1:27:c7:fe:d8:da:96:c2:40:84:f7:6d:
99:22:30:08:aa:ff:c1:25:9d:4a:4b:3c:cf:ec:ea:
88:43:ad:bc:f9:de:be:c3:a8:82:2b:81:50:28:36:
fc:e8:30:ed:1d:e3:f1:85:64:96:40:25:7e:7c:bd:
91:ee:08:ef:9a:f0:c4:33:8a:24:72:64:08:67:f4:
ad:3f:d0:b5:34:d7:ae:64:25:df:10:f6:fc:4f:b6:
bd:88:85:75:2b:cc:7e:d1:d6:4b:85:c3:88:e9:59:
54:e1:5e:eb:c0:9d:8d:51:ea:b3:36:c2:44:71:bc:
fd:7f:f0:40:2c:a4:b5:c5:d1:89:57:c2:f4:cd:00:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C1:C8:AC:E5:41:86:46:95:29:D8:4E:D2:F7:A9:39:9C:D2:FF:48
X509v3 Authority Key Identifier:
keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ea:ed:08:e4:59:c3:8c:a8:64:cf:4c:e9:6c:4b:e6:dc:4c:
58:fe:74:07:e4:f2:99:e6:9d:1f:06:33:8a:05:38:c8:4d:9e:
52:39:5c:49:38:4d:4a:1e:45:07:ab:f5:8b:93:2d:24:04:45:
b6:b2:cd:a5:f5:58:89:29:33:fb:b2:94:47:46:ea:02:ee:a7:
00:d1:97:2f:7e:9b:03:90:06:00:ba:1f:62:f2:f5:1f:3b:e9:
d2:2e:10:e3:0c:2a:14:2f:1e:63:66:5d:47:02:94:39:86:0d:
a6:0c:f0:84:02:bf:be:b5:35:44:83:2f:a0:64:37:3f:73:35:
46:ec:30:e3:10:08:f5:10:05:74:1a:be:ba:54:a0:71:3c:92:
37:ff:05:87:fe:94:c4:12:c4:2b:d1:6a:f6:12:e0:ee:06:90:
26:b6:9f:1c:34:a5:de:06:ab:a5:db:fc:78:51:5b:b8:e0:f7:
e4:fb:38:72:f3:1f:9f:24:0c:a6:00:66:c4:0f:e9:26:a8:62:
b9:5e:99:5d:9c:85:f1:d3:4e:bf:c4:6a:b1:22:3e:55:d2:64:
84:a9:77:27:ad:c0:e8:b5:e0:f2:17:a0:ec:4e:f9:fd:e8:40:
74:20:24:c7:10:5c:7a:bd:03:de:15:2f:b3:15:e6:15:57:ee:
f1:5a:8d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LgKydNtJAKi5idCKmScRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkODUwMGJjZGU0OTY4OTljNWQxZmE5MjRkZTRlNzgyN2Q5
OTE2Y2UwHhcNMjYwMzI5MDYwMDMyWhcNMjYwMzMwMDYwMDMyWjAzMTEwLwYDVQQD
EygwMGMxYzhhY2U1NDE4NjQ2OTUyOWQ4NGVkMmY3YTkzOTljZDJmZjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdaIwlk6EDgmG61gl5RxB6R6Qa6R
6e+BkTVfGg+P0SyiK/KOEtXe66dbZ/LVEqTVMPufxr33DhReimkdly4IX8WRYrjg
KrkR4F2lxAxkTsP8bz7QuMXVI6aoFP7LAFAyEvvUZ+CZu5YBbU9mklT2Z0hWu6LW
LU8p1P3BJ8f+2NqWwkCE922ZIjAIqv/BJZ1KSzzP7OqIQ628+d6+w6iCK4FQKDb8
6DDtHePxhWSWQCV+fL2R7gjvmvDEM4okcmQIZ/StP9C1NNeuZCXfEPb8T7a9iIV1
K8x+0dZLhcOI6VlU4V7rwJ2NUeqzNsJEcbz9f/BALKS1xdGJV8L0zQAuoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADByKzlQYZGlSnYTtL3qTmc0v9IMB8GA1UdIwQY
MBaAFD2FALzeSWiZxdH6kk3k54J9mRbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjct
NzUyNmM5ZjA1Y2Q4LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjctNzUyNmM5ZjA1Y2Q4
LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+rtCORZ
w4yoZM9M6WxL5txMWP50B+TymeadHwYzigU4yE2eUjlcSThNSh5FB6v1i5MtJARF
trLNpfVYiSkz+7KUR0bqAu6nANGXL36bA5AGALofYvL1Hzvp0i4Q4wwqFC8eY2Zd
RwKUOYYNpgzwhAK/vrU1RIMvoGQ3P3M1Ruww4xAI9RAFdBq+ulSgcTySN/8Fh/6U
xBLEK9Fq9hLg7gaQJrafHDSl3garpdv8eFFbuOD35Ps4cvMfnyQMpgBmxA/pJqhi
uV6ZXZyF8dNOv8RqsSI+VdJkhKl3J63A6LXg8heg7E75/ehAdCAkxxBcer0D3hUv
sxXmFVfu8VqNWg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:33 2026 by rpki-client