Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File: _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier: l8nzlTln1+c9t0LvHS9PKVdadywaRM1osuZVTAOVvIk=
Subject key identifier: 51:BA:75:52:07:E7:E4:48:C4:D1:1D:F6:89:FB:F5:AB:0D:AD:81:A3
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 019CF0837FC5CB1F4C2708007B7BE4C46C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number: 1869
Signing time: Sun 15 Mar 2026 08:01:15 +0000
Manifest this update: Sun 15 Mar 2026 08:01:15 +0000
Manifest next update: Mon 16 Mar 2026 08:01:15 +0000
Files and hashes: 1: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: UyNKmZHc/7ORTSZ2XIOF+aubJirSploH0dMiltNcNao=)
2: p8BGzkeZTXu6qLWOB4ZXBUN3ORs.roa (hash: OVtfVKdOOl/LSMO1Y47imdhBsBHfrXhcCR6Y3Lh7Lwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:83:7f:c5:cb:1f:4c:27:08:00:7b:7b:e4:c4:6c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: Mar 15 08:01:15 2026 GMT
Not After : Mar 16 08:01:15 2026 GMT
Subject: CN=51ba755207e7e448c4d11df689fbf5ab0dad81a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:71:cf:a6:fe:27:0b:45:d5:c4:18:5b:83:bc:
ff:73:dc:68:bc:28:13:36:72:e0:c7:ef:26:51:57:
1b:80:e8:77:ca:fe:8f:be:67:21:55:43:56:b2:b6:
f4:81:02:a3:5a:e1:f8:24:55:cd:6e:38:31:81:ed:
fc:ff:9a:c0:1b:97:29:78:6e:4a:e0:74:65:d4:76:
31:45:1c:92:2e:5d:e4:e8:93:26:88:86:1d:0b:c0:
78:f8:54:62:a2:e3:10:bb:bb:b1:c3:13:65:6a:47:
cd:ab:6c:1b:3f:18:f7:9b:fe:5b:52:a2:c4:40:a2:
e1:a0:37:65:02:39:9a:32:15:b9:67:16:48:dc:98:
fb:7b:30:5d:b6:12:2a:30:a9:ae:4c:09:9c:75:05:
ea:2b:8a:5b:bc:7e:7a:ed:04:ef:07:57:91:09:1c:
c0:1e:6e:f2:c1:2a:87:62:6d:96:20:ca:c6:25:06:
6c:4e:ae:55:9e:ff:f7:78:a5:c5:f4:3c:f5:ab:4b:
46:d4:35:26:4b:9d:87:59:f5:73:fb:2f:90:6a:94:
21:86:4f:c2:0e:98:22:19:69:47:93:50:a7:7e:dc:
0d:90:11:22:20:b5:0b:34:2b:c9:5c:a8:e5:3d:a5:
ed:c9:ec:6e:d8:2f:4e:2c:c3:6a:98:05:da:b2:32:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BA:75:52:07:E7:E4:48:C4:D1:1D:F6:89:FB:F5:AB:0D:AD:81:A3
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3e:cc:fa:03:b2:41:b8:8f:92:47:60:12:7e:50:fb:20:e6:
72:f7:83:d2:e0:c6:e3:f1:2c:f7:6c:8a:b2:f2:46:9f:15:db:
8b:fb:89:55:a2:c4:e2:9c:bc:f6:cf:d8:80:ce:c3:d1:69:a5:
1d:33:40:bf:3c:44:a8:49:ae:17:cb:36:f6:50:90:16:86:eb:
3d:b7:2e:a3:45:d7:68:a8:92:05:66:7a:30:66:3b:4f:71:4e:
c8:02:e9:c3:25:92:78:87:ac:de:b9:37:1f:b3:ea:1c:b8:ba:
47:49:df:2b:7a:f4:2a:f1:ce:b5:76:e5:0e:be:18:ca:04:4f:
77:ca:84:a8:0c:ee:a8:46:b3:7f:4c:93:9d:4a:6b:00:9c:82:
c1:c9:37:63:24:41:e1:83:d5:d3:87:d5:19:3a:f3:33:be:20:
7a:e5:fe:ae:6e:e8:e6:54:f3:ef:0e:35:71:25:ef:58:7b:22:
a4:8b:c3:15:5e:a0:48:5c:3f:cc:a8:c8:c8:74:61:00:6a:ed:
82:ca:71:47:48:86:c0:3b:60:3c:bf:93:1a:ac:f2:ad:aa:4b:
42:fe:bf:33:36:ff:ce:62:83:f5:a7:88:c9:5e:1a:1a:fa:f9:
aa:4a:44:86:68:b1:80:a4:e7:bc:97:75:62:09:67:9a:49:95:
1a:07:8e:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzwg3/Fyx9MJwgAe3vkxGyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZjVmMDgwMzFlMzVhZjk1NDVkM2FkM2QxMzhjYWQxMDM5
NmUyY2EwHhcNMjYwMzE1MDgwMTE1WhcNMjYwMzE2MDgwMTE1WjAzMTEwLwYDVQQD
Eyg1MWJhNzU1MjA3ZTdlNDQ4YzRkMTFkZjY4OWZiZjVhYjBkYWQ4MWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnHPpv4nC0XVxBhbg7z/c9xovCgT
NnLgx+8mUVcbgOh3yv6PvmchVUNWsrb0gQKjWuH4JFXNbjgxge38/5rAG5cpeG5K
4HRl1HYxRRySLl3k6JMmiIYdC8B4+FRiouMQu7uxwxNlakfNq2wbPxj3m/5bUqLE
QKLhoDdlAjmaMhW5ZxZI3Jj7ezBdthIqMKmuTAmcdQXqK4pbvH567QTvB1eRCRzA
Hm7ywSqHYm2WIMrGJQZsTq5Vnv/3eKXF9Dz1q0tG1DUmS52HWfVz+y+QapQhhk/C
DpgiGWlHk1CnftwNkBEiILULNCvJXKjlPaXtyexu2C9OLMNqmAXasjKeewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFG6dVIH5+RIxNEd9on79asNrYGjMB8GA1UdIwQY
MBaAFPz18IAx41r5VF0609E4ytEDluLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1BYd2dESGpXdmxVWFRyVDBUakswUU9XNHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iN2JkZjYtOWRmNC00ZDRmLThkOTUt
YmNiZmIxODk4ZWJhLzEvX1BYd2dESGpXdmxVWFRyVDBUakswUU9XNHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iN2JkZjYtOWRmNC00ZDRmLThkOTUtYmNiZmIxODk4ZWJh
LzEvX1BYd2dESGpXdmxVWFRyVDBUakswUU9XNHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIT7M+gOy
QbiPkkdgEn5Q+yDmcveD0uDG4/Es92yKsvJGnxXbi/uJVaLE4py89s/YgM7D0Wml
HTNAvzxEqEmuF8s29lCQFobrPbcuo0XXaKiSBWZ6MGY7T3FOyALpwyWSeIes3rk3
H7PqHLi6R0nfK3r0KvHOtXblDr4YygRPd8qEqAzuqEazf0yTnUprAJyCwck3YyRB
4YPV04fVGTrzM74geuX+rm7o5lTz7w41cSXvWHsipIvDFV6gSFw/zKjIyHRhAGrt
gspxR0iGwDtgPL+TGqzyrapLQv6/Mzb/zmKD9aeIyV4aGvr5qkpEhmixgKTnvJd1
YglnmkmVGgeOqg==
-----END CERTIFICATE-----
Generated at Sun Mar 15 16:18:21 2026 by rpki-client