Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: qQEiwF+RSYk/YgZnJI34NYsBbNIQONr+CfbCisbMAPQ=
Subject key identifier: 11:D7:09:E2:5A:02:E2:A5:4D:A9:64:4E:BE:92:9A:E4:FD:71:6F:0D
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 019D389C4812B5B8F1322474AE7606122B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:00:59 +0000
Manifest this update: Sun 29 Mar 2026 08:00:59 +0000
Manifest next update: Mon 30 Mar 2026 08:00:59 +0000
Files and hashes: 1: D6JN_SUanY3VCPcy8MM0wRyWpFg.asa (hash: GO31s3wbPJQu1T3Grsa85oI8sAVmrZULl2h6J3A4Dcw=)
2: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: xcrBEn3lMpuERPP+kYlN8wB6dOTCnF2PogM0nl78EM0=)
3: iVwLg--4UDbLvJn4dxkRR2fxInw.roa (hash: wrzc6nRtbm4MeWrVh43cUfhaLyz6R8Fbv5xm23WJS0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:48:12:b5:b8:f1:32:24:74:ae:76:06:12:2b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Mar 29 08:00:59 2026 GMT
Not After : Mar 30 08:00:59 2026 GMT
Subject: CN=11d709e25a02e2a54da9644ebe929ae4fd716f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:2b:cc:7f:60:46:d9:bd:1e:1e:09:b4:0c:
aa:06:6d:26:42:05:96:5c:80:6a:60:75:b3:41:12:
9f:9f:10:cc:b3:38:e7:6f:f2:59:e7:b0:d3:af:af:
83:38:20:ba:83:c9:30:fc:de:e3:0b:7a:00:70:e4:
f0:46:61:ea:f0:b2:70:2a:ca:b3:5b:a6:b2:61:27:
03:15:a8:e8:a1:9e:a8:20:d8:b2:59:60:91:c8:13:
d2:3c:50:c0:81:e4:8a:b8:fa:f0:5f:79:b1:47:21:
9d:91:f3:19:af:13:06:a6:8e:5b:cc:03:1a:c7:d0:
dd:00:1c:ed:64:6b:0f:b6:c9:6b:2d:71:f2:d1:bf:
e8:ea:13:09:4c:23:8d:ef:b2:3a:17:95:20:38:30:
d8:9e:22:43:54:d9:a5:47:3e:4e:22:61:a8:b2:45:
53:3c:1f:29:e5:be:82:8c:27:62:6d:4b:45:bc:33:
31:a6:0d:32:99:54:72:c0:4c:34:00:33:d9:4a:93:
12:37:21:45:0b:47:ad:51:0a:0d:70:98:e0:b2:6e:
34:59:4b:c5:4a:43:79:b4:96:aa:3e:6b:57:aa:61:
55:f2:43:1c:2a:a0:ff:88:0e:8f:35:11:52:d3:9f:
ef:09:f0:4f:0f:d0:a0:1a:c8:c8:33:91:2b:1c:30:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D7:09:E2:5A:02:E2:A5:4D:A9:64:4E:BE:92:9A:E4:FD:71:6F:0D
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0c:24:dd:65:6f:9e:7a:9a:f8:c5:4c:31:79:24:aa:b5:89:
a6:de:f5:3c:b8:90:cb:de:b5:53:9a:f4:e4:fc:8e:4f:d6:6c:
cb:8d:05:c2:68:aa:cf:9c:75:75:b8:da:1a:a7:bc:af:40:15:
4e:9a:20:69:78:bc:13:7b:7b:ec:7e:b9:9c:14:4e:97:c0:ad:
01:60:21:a4:b0:1a:bd:55:b7:59:b5:4d:87:34:7e:53:80:7b:
8d:8a:42:ff:c1:18:8e:c8:d4:8c:76:5e:b2:df:38:a8:37:e4:
af:8f:b9:1f:15:5d:0b:cf:9b:26:b2:e2:a3:81:f6:4f:54:25:
6b:3f:1b:db:4d:1b:39:3b:c8:8c:19:64:80:db:91:f0:6f:58:
a2:69:70:0c:85:cd:2a:52:c8:62:d7:89:5b:a4:2f:87:d3:0d:
49:66:44:00:71:e5:92:1a:06:54:42:81:99:bc:bf:56:2c:13:
12:c7:6a:67:a3:33:6c:7b:2b:7e:0b:9e:74:d5:60:27:5c:75:
a6:3e:05:18:a3:b8:04:90:db:2d:79:fd:35:c3:97:2d:28:71:
b8:8a:34:b8:f4:ef:27:47:30:75:7f:f1:1b:9c:ab:92:f9:43:
6e:7d:65:d4:d3:fb:58:74:8e:40:64:29:3e:11:75:c9:e0:54:
6b:02:a0:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nEgStbjxMiR0rnYGEityMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGNmODgxNzc0NDJhNTRmMzIxYjhmYTgwYjZjZjVkZjQw
NGNmZjYwHhcNMjYwMzI5MDgwMDU5WhcNMjYwMzMwMDgwMDU5WjAzMTEwLwYDVQQD
EygxMWQ3MDllMjVhMDJlMmE1NGRhOTY0NGViZTkyOWFlNGZkNzE2ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5grzH9gRtm9Hh4JtAyqBm0mQgWW
XIBqYHWzQRKfnxDMszjnb/JZ57DTr6+DOCC6g8kw/N7jC3oAcOTwRmHq8LJwKsqz
W6ayYScDFajooZ6oINiyWWCRyBPSPFDAgeSKuPrwX3mxRyGdkfMZrxMGpo5bzAMa
x9DdABztZGsPtslrLXHy0b/o6hMJTCON77I6F5UgODDYniJDVNmlRz5OImGoskVT
PB8p5b6CjCdibUtFvDMxpg0ymVRywEw0ADPZSpMSNyFFC0etUQoNcJjgsm40WUvF
SkN5tJaqPmtXqmFV8kMcKqD/iA6PNRFS05/vCfBPD9CgGsjIM5ErHDBgqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHXCeJaAuKlTalkTr6SmuT9cW8NMB8GA1UdIwQY
MBaAFDxM+IF3RCpU8yG4+oC2z130BM/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTkt
NzAwZTMwMjdmNjIzLzEvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTktNzAwZTMwMjdmNjIz
LzEvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAwk3WVv
nnqa+MVMMXkkqrWJpt71PLiQy961U5r05PyOT9Zsy40Fwmiqz5x1dbjaGqe8r0AV
TpogaXi8E3t77H65nBROl8CtAWAhpLAavVW3WbVNhzR+U4B7jYpC/8EYjsjUjHZe
st84qDfkr4+5HxVdC8+bJrLio4H2T1Qlaz8b200bOTvIjBlkgNuR8G9YomlwDIXN
KlLIYteJW6Qvh9MNSWZEAHHlkhoGVEKBmby/ViwTEsdqZ6MzbHsrfguedNVgJ1x1
pj4FGKO4BJDbLXn9NcOXLShxuIo0uPTvJ0cwdX/xG5yrkvlDbn1l1NP7WHSOQGQp
PhF1yeBUawKg7g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:06 2026 by rpki-client