Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
File: P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft (raw, json)
Hash identifier: EYn49rWbHEc0p4oUBZ0cG5p9VQPGMvfeoLsif4BcBco=
Subject key identifier: 11:3A:EF:F5:56:83:7B:1A:CA:66:E4:B6:FA:B2:79:08:D5:F1:57:CD
Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Certificate serial: 019D3752B76861DEBE88FFC429C779CE28CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
Manifest number: 1813
Signing time: Sun 29 Mar 2026 02:01:00 +0000
Manifest this update: Sun 29 Mar 2026 02:01:00 +0000
Manifest next update: Mon 30 Mar 2026 02:01:00 +0000
Files and hashes: 1: P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl (hash: wYTVJMgGg0pHXpt4QUXaZHf/OaORtBdisoPyVtnxb1s=)
2: gU_DFsw1i7Mrmms493aHhV3X97I.roa (hash: Xuww54GOBuOopCkJwxsjxENEGeQxpUGHwuosFzJt3EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b7:68:61:de:be:88:ff:c4:29:c7:79:ce:28:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Validity
Not Before: Mar 29 02:01:00 2026 GMT
Not After : Mar 30 02:01:00 2026 GMT
Subject: CN=113aeff556837b1aca66e4b6fab27908d5f157cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:c6:be:b5:b1:fe:dc:42:d0:e4:dc:f1:32:
90:80:de:70:a3:14:8a:0c:7a:9e:2a:6a:b0:cb:ca:
0f:00:6f:96:c9:87:6f:a2:f9:0d:73:28:f7:ec:87:
d5:53:a6:ad:34:4f:c0:b0:63:3a:f0:4c:ac:17:eb:
ea:60:a9:68:6f:8b:1b:a2:76:b1:a1:4e:f3:50:e9:
28:4c:a0:2e:c6:21:08:bb:f0:8d:96:55:3a:a4:fc:
b3:08:7b:f5:eb:6c:3b:5d:34:0a:d1:6d:7a:19:fb:
50:a2:7c:6e:0b:f3:8b:30:25:f4:ca:a3:a6:aa:a7:
f8:f6:01:98:f8:b8:83:2e:dd:86:f9:e5:de:d9:00:
2c:39:44:bc:a9:af:73:58:d0:d4:28:35:96:ea:33:
b0:67:26:83:07:ea:2f:3e:e3:83:c6:d5:9a:97:1a:
c1:a4:ff:48:d5:21:b2:0c:a1:db:55:b1:de:96:00:
da:a1:91:94:0b:f0:9f:b4:15:02:37:07:58:a8:39:
ce:3c:79:61:b4:72:e4:70:48:61:2f:a7:fa:a3:bb:
9d:25:1d:51:57:f3:03:c4:5f:ad:c3:31:2e:f3:12:
ab:a6:69:2d:58:85:ab:d5:a0:43:96:aa:86:f7:42:
2e:e5:bb:72:d9:ef:94:7e:a8:d2:04:d4:3e:58:e6:
b9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3A:EF:F5:56:83:7B:1A:CA:66:E4:B6:FA:B2:79:08:D5:F1:57:CD
X509v3 Authority Key Identifier:
keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d9:11:dd:ab:4b:8f:8c:57:a1:72:59:6e:98:ba:2f:48:23:
6f:1a:1f:2e:82:8f:d3:64:f7:45:6d:dd:3e:af:1e:3c:c4:66:
02:08:68:42:dd:3d:21:ab:25:69:1e:f0:1b:cb:d4:d1:17:5b:
ff:e6:d9:d1:0f:15:fb:1e:14:de:77:2b:3c:8f:1e:86:65:a5:
2b:b0:5d:c7:1e:a7:50:fc:16:f0:ab:35:99:14:15:52:ef:d6:
14:19:35:96:d9:a9:88:8e:26:0b:3e:78:ce:27:ed:dc:c1:52:
6c:28:d8:81:f2:1a:2b:bb:96:f1:39:cd:69:b4:50:75:c8:fd:
f2:4f:75:bb:5a:33:06:16:40:af:5e:fc:a9:28:b5:e3:bb:24:
64:14:ef:21:0c:8b:73:e9:da:98:e4:e0:e5:8d:da:bf:32:b0:
4b:83:e9:c2:36:b1:d4:c6:53:88:6b:8e:dc:0c:d1:6b:38:b6:
ce:b7:e8:91:65:f5:0e:97:a6:68:2a:42:45:d9:f2:ba:80:5b:
f9:3f:2e:94:f9:a0:a7:b4:14:e9:3c:6f:1c:e8:95:ce:01:ea:
05:5a:ba:42:c1:c2:e4:12:7a:3f:1c:1b:cf:1c:bf:98:66:29:
0d:96:e7:cb:f5:64:88:5c:19:db:2c:59:ec:07:c1:07:07:d3:
60:b0:45:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UrdoYd6+iP/EKcd5zijPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZjc3ODkzNDZhOWY5MjkxNWYxZjc1YjEwYWY5NGY5N2I2
ZTI0ZmEwHhcNMjYwMzI5MDIwMTAwWhcNMjYwMzMwMDIwMTAwWjAzMTEwLwYDVQQD
EygxMTNhZWZmNTU2ODM3YjFhY2E2NmU0YjZmYWIyNzkwOGQ1ZjE1N2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOHGvrWx/txC0OTc8TKQgN5woxSK
DHqeKmqwy8oPAG+WyYdvovkNcyj37IfVU6atNE/AsGM68EysF+vqYKlob4sbonax
oU7zUOkoTKAuxiEIu/CNllU6pPyzCHv162w7XTQK0W16GftQonxuC/OLMCX0yqOm
qqf49gGY+LiDLt2G+eXe2QAsOUS8qa9zWNDUKDWW6jOwZyaDB+ovPuODxtWalxrB
pP9I1SGyDKHbVbHelgDaoZGUC/CftBUCNwdYqDnOPHlhtHLkcEhhL6f6o7udJR1R
V/MDxF+twzEu8xKrpmktWIWr1aBDlqqG90Iu5bty2e+UfqjSBNQ+WOa5rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBE67/VWg3saymbktvqyeQjV8VfNMB8GA1UdIwQY
MBaAFD/3eJNGqfkpFfH3WxCvlPl7biT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80ODFhMzUtMjQzNC00NmUzLWFlZTEt
YWUxMzA1MzEzM2NiLzEvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80ODFhMzUtMjQzNC00NmUzLWFlZTEtYWUxMzA1MzEzM2Ni
LzEvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtkR3atL
j4xXoXJZbpi6L0gjbxofLoKP02T3RW3dPq8ePMRmAghoQt09IaslaR7wG8vU0Rdb
/+bZ0Q8V+x4U3ncrPI8ehmWlK7Bdxx6nUPwW8Ks1mRQVUu/WFBk1ltmpiI4mCz54
zift3MFSbCjYgfIaK7uW8TnNabRQdcj98k91u1ozBhZAr178qSi147skZBTvIQyL
c+namOTg5Y3avzKwS4Ppwjax1MZTiGuO3AzRazi2zrfokWX1DpemaCpCRdnyuoBb
+T8ulPmgp7QU6TxvHOiVzgHqBVq6QsHC5BJ6Pxwbzxy/mGYpDZbny/VkiFwZ2yxZ
7AfBBwfTYLBFuw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:51 2026 by rpki-client