Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier: k7GTfSWNQM9ljrxLOdnWjOG6lIbJudDIUSBV+bZjFEM=
Subject key identifier: 5A:60:9E:AB:CD:59:D2:C0:19:F5:7C:F5:F2:99:52:1B:E8:B3:C1:AF
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial: 019E3260EA6A7F969E41BFB679D8234472B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number: 06CD
Signing time: Sat 16 May 2026 20:01:12 +0000
Manifest this update: Sat 16 May 2026 20:01:12 +0000
Manifest next update: Sun 17 May 2026 20:01:12 +0000
Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: 3hSCf2YTte777pwi1StdVMhaSrKvl8GDntUbbp8nf00=)
2: vYMGfpWvYNZs02-62C7WJ9xAV3E.roa (hash: sKzGuqCRJukA31DoIxhryBDpKKKc57ySQcucjlkvX1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:60:ea:6a:7f:96:9e:41:bf:b6:79:d8:23:44:72:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Validity
Not Before: May 16 20:01:12 2026 GMT
Not After : May 17 20:01:12 2026 GMT
Subject: CN=5a609eabcd59d2c019f57cf5f299521be8b3c1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e2:04:76:c9:10:0f:60:d2:7d:2f:ac:88:e3:
e5:f1:9d:fc:58:88:8d:ba:54:ed:ea:e4:d9:ec:90:
88:fa:96:4d:58:45:6c:49:8e:51:e6:db:d9:d6:b4:
5c:68:93:11:2d:b1:96:9d:28:58:d0:68:be:50:0d:
c0:24:7c:fd:fa:60:9b:a7:e3:57:e9:9c:49:d7:a6:
38:19:0d:b3:de:b9:51:05:64:9b:ee:f7:e4:e3:b7:
eb:f5:ab:c1:84:9f:d2:04:00:92:2e:b1:60:9c:4e:
89:3b:9b:7d:95:32:93:81:52:32:4a:21:e7:75:53:
ca:21:b9:db:2f:63:cd:90:20:08:c1:90:92:a8:ac:
73:0f:d4:38:56:4c:79:bd:15:9f:89:b2:6c:35:07:
21:52:7e:27:98:e5:df:a3:3e:06:89:07:2b:35:a2:
a6:9f:cb:cc:14:93:ff:e8:8a:db:c7:72:31:a6:fd:
5c:b7:16:e3:ca:5d:0f:d6:d6:2c:01:b1:c2:9e:60:
83:85:cd:60:36:55:dd:8a:97:f8:ce:cd:53:77:17:
cd:27:5c:99:b9:12:7d:0b:ff:fb:6c:c6:ad:a3:c8:
34:84:a0:d3:e5:98:f5:cc:0b:7e:49:78:39:6e:0d:
6c:28:ce:b6:75:94:28:fd:69:a9:88:e6:b5:49:aa:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:60:9E:AB:CD:59:D2:C0:19:F5:7C:F5:F2:99:52:1B:E8:B3:C1:AF
X509v3 Authority Key Identifier:
keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:af:15:74:54:15:76:ca:f9:5d:f4:d1:c5:3a:7b:f3:b5:e0:
b4:be:bf:f1:27:ce:91:e3:14:5b:d6:23:35:96:d7:14:31:71:
5d:78:8f:e9:02:8f:69:e6:e7:89:87:aa:d5:a3:ad:94:ff:ba:
c5:ec:53:44:e1:b2:0a:d7:97:1c:76:b7:40:ff:7b:2d:d8:d8:
5e:e4:bf:71:fd:5f:ae:50:5c:f3:9d:08:24:6c:35:71:28:9f:
38:a5:8b:9b:0f:1e:f0:98:e1:bb:a1:98:67:e9:23:91:95:bf:
32:69:54:52:2f:4c:28:55:0a:83:be:01:21:c1:dc:0f:10:87:
51:95:de:31:64:f0:f7:fe:f7:0f:9e:ac:d7:a2:2e:98:4d:4d:
0a:89:5e:5a:5e:ba:01:e0:62:28:08:45:74:e7:c2:8c:b7:10:
7d:68:52:b6:07:8f:d9:2b:dd:73:90:64:68:3f:77:81:b5:75:
08:f6:34:7f:55:3e:1d:3f:b4:f6:d1:0e:78:a2:f3:b3:24:4e:
71:24:c3:e0:a5:66:ea:0a:8c:29:4d:56:b1:ea:56:92:69:5a:
1c:06:23:27:f0:e4:1c:d0:d5:98:76:0e:89:b4:8a:19:1f:ee:
ef:48:99:29:26:7e:42:f6:cd:fb:13:13:2d:81:27:ac:b8:4d:
47:05:61:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yYOpqf5aeQb+2edgjRHKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjODdmZWI0YWI5YTU3NzY1ZmMwYTY2NDU3MmMzNTAzMmU4
NjZhZDQwHhcNMjYwNTE2MjAwMTEyWhcNMjYwNTE3MjAwMTEyWjAzMTEwLwYDVQQD
Eyg1YTYwOWVhYmNkNTlkMmMwMTlmNTdjZjVmMjk5NTIxYmU4YjNjMWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+IEdskQD2DSfS+siOPl8Z38WIiN
ulTt6uTZ7JCI+pZNWEVsSY5R5tvZ1rRcaJMRLbGWnShY0Gi+UA3AJHz9+mCbp+NX
6ZxJ16Y4GQ2z3rlRBWSb7vfk47fr9avBhJ/SBACSLrFgnE6JO5t9lTKTgVIySiHn
dVPKIbnbL2PNkCAIwZCSqKxzD9Q4Vkx5vRWfibJsNQchUn4nmOXfoz4GiQcrNaKm
n8vMFJP/6Irbx3Ixpv1ctxbjyl0P1tYsAbHCnmCDhc1gNlXdipf4zs1TdxfNJ1yZ
uRJ9C//7bMato8g0hKDT5Zj1zAt+SXg5bg1sKM62dZQo/WmpiOa1Sar5JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpgnqvNWdLAGfV89fKZUhvos8GvMB8GA1UdIwQY
MBaAFDyH/rSrmld2X8CmZFcsNQMuhmrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQt
NDhmYjAwZmM5N2I2LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQtNDhmYjAwZmM5N2I2
LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiq8VdFQV
dsr5XfTRxTp787XgtL6/8SfOkeMUW9YjNZbXFDFxXXiP6QKPaebniYeq1aOtlP+6
xexTROGyCteXHHa3QP97LdjYXuS/cf1frlBc850IJGw1cSifOKWLmw8e8Jjhu6GY
Z+kjkZW/MmlUUi9MKFUKg74BIcHcDxCHUZXeMWTw9/73D56s16IumE1NColeWl66
AeBiKAhFdOfCjLcQfWhStgeP2Svdc5BkaD93gbV1CPY0f1U+HT+09tEOeKLzsyRO
cSTD4KVm6gqMKU1WsepWkmlaHAYjJ/DkHNDVmHYOibSKGR/u70iZKSZ+QvbN+xMT
LYEnrLhNRwVhyg==
-----END CERTIFICATE-----
Generated at Sat May 16 23:30:40 2026 by rpki-client