Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
File: pUiu2QpeI7SnNpVgjztleL_exhU.mft (raw, json)
Hash identifier: kN0I99fEo8wszd45ZjQGf7julYpTrtPyQLssmjlfGwM=
Subject key identifier: CC:20:2C:FB:5B:40:B8:E3:54:00:8A:9B:38:FE:A6:B7:7A:8F:C7:80
Authority key identifier: A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15
Certificate issuer: /CN=a548aed90a5e23b4a73695608f3b6578bfdec615
Certificate serial: 019D37F745431FD1F715EAF93CA0F72E18BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
Manifest number: 1157
Signing time: Sun 29 Mar 2026 05:00:45 +0000
Manifest this update: Sun 29 Mar 2026 05:00:45 +0000
Manifest next update: Mon 30 Mar 2026 05:00:45 +0000
Files and hashes: 1: RiGDfeRfBuPIkVOAsEYp1OG4M1w.roa (hash: d1lvvhblvb29tfWPcP1YAd06B6tJXGMQjbQCRPzSFPA=)
2: pUiu2QpeI7SnNpVgjztleL_exhU.crl (hash: p1/MenUd7ZBsr557/NvmuNtRQs1u30VIYx6gCrLrhY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:45:43:1f:d1:f7:15:ea:f9:3c:a0:f7:2e:18:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a548aed90a5e23b4a73695608f3b6578bfdec615
Validity
Not Before: Mar 29 05:00:45 2026 GMT
Not After : Mar 30 05:00:45 2026 GMT
Subject: CN=cc202cfb5b40b8e354008a9b38fea6b77a8fc780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:f5:3e:66:c6:06:c8:64:b6:ad:79:9b:2f:
71:f8:f2:46:96:f6:5c:bb:b2:e3:56:89:89:e0:91:
d3:e0:c6:4c:ad:41:d5:52:0d:ad:15:36:31:f9:3d:
70:62:9b:a7:3a:24:1f:20:f9:3f:2c:41:dc:f7:39:
54:3c:68:a6:24:5e:9a:4d:e3:78:04:a4:7e:a6:91:
15:52:21:a6:81:4d:94:5a:ec:a5:10:c1:a6:53:0d:
59:a1:b6:7b:50:81:93:f5:a6:51:f1:74:65:3e:71:
90:2f:98:89:55:03:3f:99:65:c3:c3:05:9b:7e:ba:
85:74:c7:94:01:5b:3a:df:46:86:cc:aa:29:56:34:
ff:89:22:12:b3:6b:ad:ec:7c:ad:c4:c3:30:bb:48:
8f:db:e9:48:37:0f:20:ec:e3:21:95:b8:9e:d6:1c:
4d:fb:5c:4f:fd:d2:75:3c:28:d5:89:e5:80:1c:97:
ec:cb:20:95:6d:0f:12:7e:1a:91:4f:29:7e:9f:bd:
2d:e5:f5:b1:ca:7b:77:0d:9a:83:46:8d:a2:d6:77:
5b:44:69:41:d4:7e:6d:16:79:a9:49:2a:5e:bc:95:
06:e6:75:5b:b4:d8:e8:1f:f7:8c:1b:85:66:ee:f7:
9e:6d:1f:6d:9c:88:3f:56:c9:6a:37:bb:af:da:4c:
92:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:20:2C:FB:5B:40:B8:E3:54:00:8A:9B:38:FE:A6:B7:7A:8F:C7:80
X509v3 Authority Key Identifier:
keyid:A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:33:dd:55:c5:01:b2:ff:ba:98:0e:44:84:a0:2e:f1:4a:e5:
7c:9c:b9:1d:8a:49:53:55:ad:6b:fb:90:e9:53:88:f8:00:e4:
54:55:d6:b0:7f:14:ed:08:4f:5d:85:f3:05:af:b6:31:e4:e4:
c8:59:2b:41:0f:c1:cf:52:9b:a7:a9:84:b5:fc:90:12:9c:0d:
ee:49:54:42:0e:aa:b1:9d:c7:75:fa:54:29:b5:e6:c4:fb:ef:
17:84:51:bb:36:d2:77:cf:f6:f1:f5:91:0d:0d:67:82:71:d0:
1d:79:38:f6:de:8a:06:35:33:6c:3b:46:e8:ea:ca:f2:0e:6c:
7f:98:4b:e2:86:df:31:9c:89:77:20:82:27:75:d9:d6:16:ed:
8b:7f:19:2a:2e:d5:c6:3d:ea:76:1e:ef:81:71:88:2b:3b:0a:
51:32:00:fa:bc:21:1d:67:1c:d3:a1:bc:92:ba:df:4f:83:7f:
0e:bf:42:51:3f:a9:b3:33:09:95:8c:05:a7:77:ed:d0:73:6f:
b0:c5:95:a4:a6:b0:6f:37:0a:e2:00:53:98:a5:5c:52:e7:43:
3d:60:55:09:71:26:da:0d:34:b5:0d:74:24:24:a6:ab:c3:a8:
9f:3c:a6:b7:99:9b:d1:75:97:ab:e2:64:60:ba:9f:bc:c8:e9:
4f:d3:ea:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0390VDH9H3Fer5PKD3Lhi+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NDhhZWQ5MGE1ZTIzYjRhNzM2OTU2MDhmM2I2NTc4YmZk
ZWM2MTUwHhcNMjYwMzI5MDUwMDQ1WhcNMjYwMzMwMDUwMDQ1WjAzMTEwLwYDVQQD
EyhjYzIwMmNmYjViNDBiOGUzNTQwMDhhOWIzOGZlYTZiNzdhOGZjNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwT1PmbGBshktq15my9x+PJGlvZc
u7LjVomJ4JHT4MZMrUHVUg2tFTYx+T1wYpunOiQfIPk/LEHc9zlUPGimJF6aTeN4
BKR+ppEVUiGmgU2UWuylEMGmUw1ZobZ7UIGT9aZR8XRlPnGQL5iJVQM/mWXDwwWb
frqFdMeUAVs630aGzKopVjT/iSISs2ut7HytxMMwu0iP2+lINw8g7OMhlbie1hxN
+1xP/dJ1PCjVieWAHJfsyyCVbQ8SfhqRTyl+n70t5fWxynt3DZqDRo2i1ndbRGlB
1H5tFnmpSSpevJUG5nVbtNjoH/eMG4Vm7veebR9tnIg/VslqN7uv2kyS4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwgLPtbQLjjVACKmzj+prd6j8eAMB8GA1UdIwQY
MBaAFKVIrtkKXiO0pzaVYI87ZXi/3sYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83NDY2YzItNTZkNC00OTRhLWIyNjct
NTQ2M2I3MWUyNmRlLzEvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83NDY2YzItNTZkNC00OTRhLWIyNjctNTQ2M2I3MWUyNmRl
LzEvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjPdVcUB
sv+6mA5EhKAu8UrlfJy5HYpJU1Wta/uQ6VOI+ADkVFXWsH8U7QhPXYXzBa+2MeTk
yFkrQQ/Bz1Kbp6mEtfyQEpwN7klUQg6qsZ3HdfpUKbXmxPvvF4RRuzbSd8/28fWR
DQ1ngnHQHXk49t6KBjUzbDtG6OrK8g5sf5hL4obfMZyJdyCCJ3XZ1hbti38ZKi7V
xj3qdh7vgXGIKzsKUTIA+rwhHWcc06G8krrfT4N/Dr9CUT+pszMJlYwFp3ft0HNv
sMWVpKawbzcK4gBTmKVcUudDPWBVCXEm2g00tQ10JCSmq8Oonzymt5mb0XWXq+Jk
YLqfvMjpT9PqFA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:36 2026 by rpki-client