Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
File: PvRdcGusxYrv9q5H8jLZKzwvsBg.mft (raw, json)
Hash identifier: OkPB84ZysN1IgtEnEUw+5fR8VXNOc70peXSHB9GxeRA=
Subject key identifier: 01:87:7C:7B:2C:96:A1:48:90:9A:85:CA:4E:AB:D9:8B:D9:5E:35:8A
Authority key identifier: 3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18
Certificate issuer: /CN=3ef45d706bacc58aeff6ae47f232d92b3c2fb018
Certificate serial: 01A03F3B8FFB6A4E1991839159D8E35E7FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
Manifest number: B3
Signing time: Wed 26 Aug 2026 18:01:03 +0000
Manifest this update: Wed 26 Aug 2026 18:01:03 +0000
Manifest next update: Thu 27 Aug 2026 18:01:03 +0000
Files and hashes: 1: NL1w9Xj9eNNvZHja4bYi8u1uP0g.roa (hash: bGa7KQ5aQ4eZWg9YSqL9Pvq1iyjpLbcYhC9x7Z0XWS8=)
2: PvRdcGusxYrv9q5H8jLZKzwvsBg.crl (hash: jKmiCXznSRYJTolRS/5fCsGooiO0MPEmStB0fh5LFPo=)
3: UGXYFC9jlohYNhw6f4qzRWdUTE8.asa (hash: EAHRau/OfR99p6HOKLABIO+IowH54Ml4zKfLXfBoos4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:8f:fb:6a:4e:19:91:83:91:59:d8:e3:5e:7f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef45d706bacc58aeff6ae47f232d92b3c2fb018
Validity
Not Before: Aug 26 18:01:03 2026 GMT
Not After : Aug 27 18:01:03 2026 GMT
Subject: CN=01877c7b2c96a148909a85ca4eabd98bd95e358a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:b5:cc:d0:a2:a3:ef:fe:e9:d7:ed:0b:1f:
37:49:10:88:ab:fd:f3:b6:bf:1b:e2:43:e1:64:61:
37:8f:3d:bd:ec:10:bf:b3:98:c0:3f:25:3b:2c:57:
f9:4a:b0:8e:ca:d2:f1:6d:76:29:a0:31:89:1b:71:
30:c1:29:f2:51:99:6b:14:84:2c:d6:d1:be:88:4c:
4d:2f:8f:5e:9d:79:3d:3a:67:5e:cc:d8:eb:8d:19:
a5:ac:c4:a8:09:54:99:d2:4a:b8:50:c5:e5:b6:a0:
77:46:67:f8:5d:44:4d:2e:63:36:ca:4f:94:3a:f5:
92:1c:0b:d2:8c:7f:c4:38:e1:20:32:5f:a6:78:4e:
6e:3c:39:99:a4:3e:b4:f4:bd:04:b5:2b:ca:05:2e:
7c:f7:ea:3c:7d:4e:14:f0:73:05:19:e0:e1:b9:d3:
7e:9d:66:0b:5b:3f:47:39:96:5e:c2:21:49:ac:fc:
e8:62:13:54:48:67:45:0e:a8:cd:f1:37:5a:1e:a1:
d7:de:9f:17:6c:ff:40:ee:ce:72:ae:92:85:76:e7:
ea:33:97:61:32:62:b2:98:b0:64:9c:16:d1:65:49:
b6:c7:08:cd:94:cb:04:ac:c2:15:63:2e:b3:b7:34:
51:ff:5b:29:81:c6:f3:82:e3:33:bf:40:72:54:4a:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:87:7C:7B:2C:96:A1:48:90:9A:85:CA:4E:AB:D9:8B:D9:5E:35:8A
X509v3 Authority Key Identifier:
keyid:3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:94:e2:0a:48:6f:e5:8e:32:4f:31:a3:ff:57:0c:c4:d9:a9:
8f:9a:ea:90:e4:c2:fa:8c:fc:57:b6:87:3e:89:58:4a:29:d3:
96:ee:c4:9b:68:e4:aa:1c:0e:ae:da:f6:d7:41:99:2f:00:4c:
36:f1:2b:16:dc:af:16:2e:d0:6d:ef:89:73:fe:57:03:b4:4f:
81:99:eb:c2:83:d6:2a:f6:6c:a9:9f:77:e6:a3:66:08:48:43:
7a:8b:c7:23:3c:db:8e:de:bc:3e:2f:a0:ca:aa:de:e1:28:74:
69:3c:33:b9:09:fc:e0:88:b3:cb:d3:86:a3:74:30:44:f6:dc:
15:7a:9c:69:a8:35:0d:e2:7a:28:38:a8:ef:9c:e1:98:55:e8:
b2:d1:36:11:ae:23:87:cc:e6:e3:dd:fc:6e:7d:d7:43:55:e5:
3a:cd:4c:a7:69:7b:93:98:b7:e0:6a:50:98:48:b8:26:02:44:
d1:c3:dd:58:1e:f5:ad:9f:67:3b:37:5d:58:51:5f:4b:b1:0c:
4c:0f:59:11:d3:28:2d:c2:9a:00:40:be:21:1d:d3:b6:e8:16:
4b:7d:82:40:27:2d:54:13:16:ad:8f:af:92:62:09:2c:09:44:
43:f7:85:63:83:f1:2e:80:22:f5:80:14:6b:77:c2:06:ce:b6:
6a:cb:b7:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/O4/7ak4ZkYORWdjjXn+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZjQ1ZDcwNmJhY2M1OGFlZmY2YWU0N2YyMzJkOTJiM2My
ZmIwMTgwHhcNMjYwODI2MTgwMTAzWhcNMjYwODI3MTgwMTAzWjAzMTEwLwYDVQQD
EygwMTg3N2M3YjJjOTZhMTQ4OTA5YTg1Y2E0ZWFiZDk4YmQ5NWUzNThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDu1zNCio+/+6dftCx83SRCIq/3z
tr8b4kPhZGE3jz297BC/s5jAPyU7LFf5SrCOytLxbXYpoDGJG3EwwSnyUZlrFIQs
1tG+iExNL49enXk9OmdezNjrjRmlrMSoCVSZ0kq4UMXltqB3Rmf4XURNLmM2yk+U
OvWSHAvSjH/EOOEgMl+meE5uPDmZpD609L0EtSvKBS589+o8fU4U8HMFGeDhudN+
nWYLWz9HOZZewiFJrPzoYhNUSGdFDqjN8TdaHqHX3p8XbP9A7s5yrpKFdufqM5dh
MmKymLBknBbRZUm2xwjNlMsErMIVYy6ztzRR/1spgcbzguMzv0ByVErPzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGHfHsslqFIkJqFyk6r2YvZXjWKMB8GA1UdIwQY
MBaAFD70XXBrrMWK7/auR/Iy2Ss8L7AYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHZSZGNHdXN4WXJ2OXE1SDhqTFpLend2c0JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85OTkyOTUtMzFkYy00ZjhjLTg0Yjct
MzdlYWQ2YWI0ZWVjLzEvUHZSZGNHdXN4WXJ2OXE1SDhqTFpLend2c0JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85OTkyOTUtMzFkYy00ZjhjLTg0YjctMzdlYWQ2YWI0ZWVj
LzEvUHZSZGNHdXN4WXJ2OXE1SDhqTFpLend2c0JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApTiCkhv
5Y4yTzGj/1cMxNmpj5rqkOTC+oz8V7aHPolYSinTlu7Em2jkqhwOrtr210GZLwBM
NvErFtyvFi7Qbe+Jc/5XA7RPgZnrwoPWKvZsqZ935qNmCEhDeovHIzzbjt68Pi+g
yqre4Sh0aTwzuQn84Iizy9OGo3QwRPbcFXqcaag1DeJ6KDio75zhmFXostE2Ea4j
h8zm4938bn3XQ1XlOs1Mp2l7k5i34GpQmEi4JgJE0cPdWB71rZ9nOzddWFFfS7EM
TA9ZEdMoLcKaAEC+IR3TtugWS32CQCctVBMWrY+vkmIJLAlEQ/eFY4PxLoAi9YAU
a3fCBs62asu33Q==
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:36:31 2026 by rpki-client