Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
File: P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json)
Hash identifier: XYRzX/VPBpqEQlovvJhBDMD3aZzjaBcle1iIKkqCsoQ=
Subject key identifier: CF:82:4E:43:2A:9B:50:00:48:12:26:2E:BA:3D:7B:8F:71:03:C6:28
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial: 019E216D318072ECDE328C0B6B552483DDDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
Manifest number: 1699
Signing time: Wed 13 May 2026 13:01:04 +0000
Manifest this update: Wed 13 May 2026 13:01:04 +0000
Manifest next update: Thu 14 May 2026 13:01:04 +0000
Files and hashes: 1: KZNB7lWAg2ccw6OEH22PfuTr474.roa (hash: oNpR7vBBKKyNPGUa7GkD8mmfi4bNftZfBrk2/MA9hZw=)
2: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: sQQr63dCbA6JIdNnFOgSyIeWHqAPnKeB3KtAt13orVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:31:80:72:ec:de:32:8c:0b:6b:55:24:83:dd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Validity
Not Before: May 13 13:01:04 2026 GMT
Not After : May 14 13:01:04 2026 GMT
Subject: CN=cf824e432a9b50004812262eba3d7b8f7103c628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f6:20:1a:49:e6:21:c9:bf:b6:aa:6b:be:70:
b4:b5:51:51:a3:18:7e:d5:cd:c3:d3:6a:69:09:54:
e6:86:15:63:a6:e1:b6:23:87:33:86:ea:f1:95:ee:
9e:58:32:f4:2c:50:99:08:aa:04:46:a0:bb:18:72:
78:62:53:71:92:a5:2f:0a:13:0f:3e:33:81:83:4a:
31:a2:dd:42:df:d6:64:37:f4:ac:40:84:92:04:d6:
cc:45:32:e6:56:72:82:a0:3c:b7:f5:c0:1e:ad:af:
74:a9:fe:57:4e:86:e2:3d:f3:4d:e5:12:15:5a:c4:
1e:3f:6a:ac:e8:ee:e8:98:a6:5b:79:ae:8d:40:8b:
ce:3b:83:41:46:5b:38:16:92:41:e3:77:7d:f9:6b:
00:86:bf:5f:e8:aa:b5:eb:4b:e2:e9:69:94:ea:c1:
ab:91:fb:14:9d:7c:5a:ff:ca:f3:31:14:fc:75:e8:
ec:fa:9f:1c:b2:c2:67:46:bd:0d:61:96:d0:fd:f8:
9a:f0:f3:53:08:6a:62:74:db:38:62:0c:c7:ae:1e:
68:a8:7c:76:6c:9c:17:83:c1:65:3a:3a:78:06:fb:
89:07:ea:2f:c2:5d:a8:cc:f5:cd:54:30:d5:4f:94:
bb:6b:1e:63:8e:0e:f1:89:3e:79:1b:fd:c1:e2:d6:
4d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:82:4E:43:2A:9B:50:00:48:12:26:2E:BA:3D:7B:8F:71:03:C6:28
X509v3 Authority Key Identifier:
keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e1:c6:9f:fb:8c:eb:4f:a1:d3:bf:1f:f8:e9:78:88:71:d7:
98:b2:f6:82:0d:5d:3d:20:fd:ea:e2:bb:63:bb:46:70:88:3f:
2d:bb:a1:69:da:07:7a:84:39:5d:3b:9c:ce:05:ec:1c:2a:fd:
78:24:02:83:a6:0b:a7:1f:30:a2:7a:32:04:25:c0:35:67:ed:
07:b4:a9:98:e0:70:05:fd:b8:9b:0a:35:82:44:89:2c:b0:e1:
22:68:12:d5:b6:b8:84:85:fa:4b:c3:b6:54:e6:b2:98:19:61:
f4:75:aa:10:5c:39:48:48:03:5f:ce:c8:e7:57:46:19:94:c8:
3c:eb:7c:e5:bf:77:a1:99:06:ea:da:48:1e:b4:19:56:9d:2a:
b8:87:45:5c:d6:bc:cd:68:fb:dd:95:2d:d4:f0:fd:a8:dc:82:
bb:ce:bb:8a:5e:5a:b4:dd:6e:5e:69:97:98:71:da:c3:8c:22:
b1:6f:b2:36:56:86:a9:db:75:80:fc:3e:6f:4b:fe:62:4f:c3:
19:1d:7b:04:90:7f:53:47:69:83:44:96:44:f1:cf:d4:e2:14:
91:ae:63:16:39:2f:cd:f0:ee:7c:c0:31:67:96:a3:0f:29:04:
2c:0e:b0:e3:82:26:61:68:0b:60:b6:49:ef:d1:d5:c3:3f:cb:
f2:21:f3:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hbTGAcuzeMowLa1Ukg93bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZjU4ZGZmYmE0ZGY2YWMzNGJkOWY0ODExOWFlMTFjZmVm
OGE3NmMwHhcNMjYwNTEzMTMwMTA0WhcNMjYwNTE0MTMwMTA0WjAzMTEwLwYDVQQD
EyhjZjgyNGU0MzJhOWI1MDAwNDgxMjI2MmViYTNkN2I4ZjcxMDNjNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/YgGknmIcm/tqprvnC0tVFRoxh+
1c3D02ppCVTmhhVjpuG2I4czhurxle6eWDL0LFCZCKoERqC7GHJ4YlNxkqUvChMP
PjOBg0oxot1C39ZkN/SsQISSBNbMRTLmVnKCoDy39cAera90qf5XTobiPfNN5RIV
WsQeP2qs6O7omKZbea6NQIvOO4NBRls4FpJB43d9+WsAhr9f6Kq160vi6WmU6sGr
kfsUnXxa/8rzMRT8dejs+p8cssJnRr0NYZbQ/fia8PNTCGpidNs4YgzHrh5oqHx2
bJwXg8FlOjp4BvuJB+ovwl2ozPXNVDDVT5S7ax5jjg7xiT55G/3B4tZN4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+CTkMqm1AASBImLro9e49xA8YoMB8GA1UdIwQY
MBaAFD/1jf+6TfasNL2fSBGa4Rz++KdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF9XTl83cE45cXcwdlo5SUVacmhIUDc0cDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yOGZjZTQtODFmMS00Y2QzLWE4ZWQt
YWI5NGFmZmI5MDNhLzEvUF9XTl83cE45cXcwdlo5SUVacmhIUDc0cDJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yOGZjZTQtODFmMS00Y2QzLWE4ZWQtYWI5NGFmZmI5MDNh
LzEvUF9XTl83cE45cXcwdlo5SUVacmhIUDc0cDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsOHGn/uM
60+h078f+Ol4iHHXmLL2gg1dPSD96uK7Y7tGcIg/LbuhadoHeoQ5XTuczgXsHCr9
eCQCg6YLpx8wonoyBCXANWftB7SpmOBwBf24mwo1gkSJLLDhImgS1ba4hIX6S8O2
VOaymBlh9HWqEFw5SEgDX87I51dGGZTIPOt85b93oZkG6tpIHrQZVp0quIdFXNa8
zWj73ZUt1PD9qNyCu867il5atN1uXmmXmHHaw4wisW+yNlaGqdt1gPw+b0v+Yk/D
GR17BJB/U0dpg0SWRPHP1OIUka5jFjkvzfDufMAxZ5ajDykELA6w44ImYWgLYLZJ
79HVwz/L8iHzQw==
-----END CERTIFICATE-----
Generated at Wed May 13 19:10:20 2026 by rpki-client