Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
File: PFlVXsIygmx91tmpJrU2AoN5SfY.mft (raw, json)
Hash identifier: 6Xb0PrTBKClZQy9vbPKW4D9ov3oQPVqQt2iGgrKU10A=
Subject key identifier: 3B:CF:78:81:99:7F:45:BF:B5:AE:2B:2C:81:59:2C:2B:59:E0:30:F3
Authority key identifier: 3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6
Certificate issuer: /CN=3c59555ec232826c7dd6d9a926b53602837949f6
Certificate serial: 01A04CF706006A5C807BFDF1E9DBE31B8384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
Manifest number: 05DC
Signing time: Sat 29 Aug 2026 10:00:52 +0000
Manifest this update: Sat 29 Aug 2026 10:00:52 +0000
Manifest next update: Sun 30 Aug 2026 10:00:52 +0000
Files and hashes: 1: 9rXRCwgatUO9kftONibS3RKLT7o.asa (hash: cTJSOpixcce8y4cST/YpaD7CTOPUYVw3x0RQUp7VLKA=)
2: PFlVXsIygmx91tmpJrU2AoN5SfY.crl (hash: M/WYQdSTTwKUGIBUYSqK9a1cYC8YB+gBH61ZdO2hYNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 09:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:f7:06:00:6a:5c:80:7b:fd:f1:e9:db:e3:1b:83:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c59555ec232826c7dd6d9a926b53602837949f6
Validity
Not Before: Aug 29 10:00:52 2026 GMT
Not After : Aug 30 10:00:52 2026 GMT
Subject: CN=3bcf7881997f45bfb5ae2b2c81592c2b59e030f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:65:f0:8e:8f:de:b3:29:39:f8:92:ad:e9:
d8:09:4b:47:f7:52:82:3b:29:ed:31:b4:ef:78:ce:
02:6c:ab:b9:a7:4f:bd:6d:dd:c8:e8:15:b5:6f:88:
33:46:61:c7:3e:5b:fd:8c:bf:10:a2:22:22:10:b9:
05:a5:16:ab:ab:71:eb:8a:65:7f:cc:cf:17:90:ee:
92:d7:56:60:dd:7d:a8:e2:6a:1c:02:2d:53:21:62:
e5:10:d3:be:f6:1e:55:98:7b:98:d8:bd:78:94:47:
6c:84:78:60:17:51:c1:2f:fc:00:cc:c9:5f:d9:6a:
cd:c0:45:50:e0:46:41:f5:a0:d1:6f:d6:03:24:42:
a6:2c:2b:4e:7c:5d:fc:fd:3e:12:22:7e:41:91:51:
1f:0e:5a:c8:8a:47:39:89:b1:59:5f:99:67:8a:37:
f1:44:83:1b:a8:4f:64:fe:34:28:dd:3c:c9:75:fd:
67:97:02:16:19:fd:e9:50:f3:5a:ab:b9:68:61:54:
0c:f1:06:2f:5e:c1:89:16:9e:ac:9d:d8:16:37:e3:
89:ed:4c:ff:bc:86:00:43:47:08:44:b1:f9:63:72:
6c:4b:ff:97:e2:cb:35:da:fb:9d:1c:70:99:94:8e:
a7:46:46:5c:65:73:cf:d7:79:77:93:d5:a6:9e:d4:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CF:78:81:99:7F:45:BF:B5:AE:2B:2C:81:59:2C:2B:59:E0:30:F3
X509v3 Authority Key Identifier:
keyid:3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d6:77:e1:a8:ea:4a:90:ab:f9:9b:62:14:33:a7:80:2d:62:
ba:4b:a8:63:3e:33:99:9b:0a:c2:8f:26:3e:1d:e9:53:78:47:
ff:78:41:ee:cc:1b:49:fd:cd:21:6f:7b:2a:e1:84:0b:f2:a0:
88:83:55:12:8d:d9:c8:0f:35:83:c7:3b:86:00:84:2e:f8:27:
04:50:4b:b8:4b:a3:a5:9e:4c:10:73:4c:77:0e:27:1e:bd:83:
e4:0b:60:67:60:4e:b5:44:1e:59:d2:e6:f0:03:7a:4d:39:bc:
c1:27:43:3d:86:cd:19:96:26:08:9d:16:43:32:3e:ef:8b:36:
91:05:4a:c9:dc:2d:a2:69:c6:0e:af:0e:29:8f:9d:5d:d6:cd:
90:8f:07:b2:09:56:ab:fb:cb:92:de:1c:00:63:a8:dd:ed:8b:
f1:82:20:75:ee:ee:81:ee:33:2a:5a:e9:c7:e2:1d:45:db:91:
8e:b5:32:76:d1:6d:4b:a3:31:bc:8d:ce:61:7d:81:2f:09:1d:
cc:7d:8b:6d:65:e5:7f:e7:92:12:3b:f6:a8:34:6d:9b:76:27:
8c:90:a1:47:08:5d:61:b4:4b:3a:5e:4c:a4:a2:fa:a2:28:3a:
84:d5:44:20:28:90:04:74:98:da:2d:71:b2:7b:7f:54:f4:5f:
b0:73:6d:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBM9wYAalyAe/3x6dvjG4OEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNTk1NTVlYzIzMjgyNmM3ZGQ2ZDlhOTI2YjUzNjAyODM3
OTQ5ZjYwHhcNMjYwODI5MTAwMDUyWhcNMjYwODMwMTAwMDUyWjAzMTEwLwYDVQQD
EygzYmNmNzg4MTk5N2Y0NWJmYjVhZTJiMmM4MTU5MmMyYjU5ZTAzMGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3V5l8I6P3rMpOfiSrenYCUtH91KC
OyntMbTveM4CbKu5p0+9bd3I6BW1b4gzRmHHPlv9jL8QoiIiELkFpRarq3HrimV/
zM8XkO6S11Zg3X2o4mocAi1TIWLlENO+9h5VmHuY2L14lEdshHhgF1HBL/wAzMlf
2WrNwEVQ4EZB9aDRb9YDJEKmLCtOfF38/T4SIn5BkVEfDlrIikc5ibFZX5lnijfx
RIMbqE9k/jQo3TzJdf1nlwIWGf3pUPNaq7loYVQM8QYvXsGJFp6sndgWN+OJ7Uz/
vIYAQ0cIRLH5Y3JsS/+X4ss12vudHHCZlI6nRkZcZXPP13l3k9WmntTDOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvPeIGZf0W/ta4rLIFZLCtZ4DDzMB8GA1UdIwQY
MBaAFDxZVV7CMoJsfdbZqSa1NgKDeUn2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEZsVlhzSXlnbXg5MXRtcEpyVTJBb041U2ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iYTk0MDQtNzhmMy00OTM1LTllMmUt
OTViMTM3M2M1Mzk5LzEvUEZsVlhzSXlnbXg5MXRtcEpyVTJBb041U2ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iYTk0MDQtNzhmMy00OTM1LTllMmUtOTViMTM3M2M1Mzk5
LzEvUEZsVlhzSXlnbXg5MXRtcEpyVTJBb041U2ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9Z34ajq
SpCr+ZtiFDOngC1iukuoYz4zmZsKwo8mPh3pU3hH/3hB7swbSf3NIW97KuGEC/Kg
iINVEo3ZyA81g8c7hgCELvgnBFBLuEujpZ5MEHNMdw4nHr2D5AtgZ2BOtUQeWdLm
8AN6TTm8wSdDPYbNGZYmCJ0WQzI+74s2kQVKydwtomnGDq8OKY+dXdbNkI8HsglW
q/vLkt4cAGOo3e2L8YIgde7uge4zKlrpx+IdRduRjrUydtFtS6MxvI3OYX2BLwkd
zH2LbWXlf+eSEjv2qDRtm3YnjJChRwhdYbRLOl5MpKL6oig6hNVEICiQBHSY2i1x
snt/VPRfsHNtjg==
-----END CERTIFICATE-----
Generated at Sat Aug 29 14:04:49 2026 by rpki-client