Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier: jDvzTqVfISre2OaKSVLeUiSTA/0LLJa4tr7I1SJu0HM=
Subject key identifier: 30:06:FD:75:26:C4:37:65:CD:B0:3C:80:5A:2E:9A:DB:80:B5:BA:D5
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 019D37C06421E5B3C8E437901CDFF0334FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:48 +0000
Manifest this update: Sun 29 Mar 2026 04:00:48 +0000
Manifest next update: Mon 30 Mar 2026 04:00:48 +0000
Files and hashes: 1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: 6kX5pXn3DaFgl2uTNCvVaiOrWVsHyYqVaL5cIRw1Eo8=)
2: Rbj8kULps77k1vuvOD23vcXMVrk.roa (hash: e6y1bFDYJyurguxeJmMNNNjCgXXxGouget3ofm5Tn7M=)
3: RoI3MM-0KYlxwCOUfkaDOeYsU5U.roa (hash: dLJKzgwKEgf2VwAfUCSXlmN7iFsDt2XbjlyglNJp8Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:64:21:e5:b3:c8:e4:37:90:1c:df:f0:33:4f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Mar 29 04:00:48 2026 GMT
Not After : Mar 30 04:00:48 2026 GMT
Subject: CN=3006fd7526c43765cdb03c805a2e9adb80b5bad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:1b:56:ea:c5:98:46:e9:45:0f:f8:e6:e6:
dc:0d:da:e5:61:05:7f:b7:7a:12:3a:3d:2e:ce:fe:
f3:d5:e8:59:ae:b3:da:64:3b:c0:e7:a9:08:b8:54:
fa:80:15:f4:45:c3:b3:d2:78:e2:9a:ff:e4:9c:fe:
6e:64:ed:a1:e2:cd:45:ee:21:2a:bc:c3:75:d5:2a:
03:65:48:22:03:d4:97:b7:e2:6a:50:c6:da:d2:21:
a9:c7:f9:1a:71:ba:e6:50:ae:8c:24:d3:98:68:24:
44:79:36:06:ac:09:7a:7d:db:3c:1e:8e:ed:86:a7:
76:86:47:fb:0e:d5:38:22:12:02:a6:dd:0f:60:87:
bd:66:26:1c:84:87:00:47:a8:fd:2f:26:72:71:74:
59:78:7d:db:9d:35:db:a6:0c:49:a9:5e:c4:69:e2:
01:57:7c:d7:c7:cb:d4:25:46:91:5c:d9:f9:c1:0a:
70:b9:67:7f:4c:c8:61:1a:ea:43:38:59:a4:14:bf:
54:33:9a:21:42:76:b9:26:76:ff:40:e1:bc:52:d7:
2a:54:9c:f9:c1:1e:aa:d0:cd:7f:34:2a:8d:44:b5:
33:37:5f:85:bd:43:f8:7f:93:a5:e4:fa:0a:d7:b5:
18:d4:4f:be:bd:de:80:67:88:5e:1a:48:c4:8f:2d:
e7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:06:FD:75:26:C4:37:65:CD:B0:3C:80:5A:2E:9A:DB:80:B5:BA:D5
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a5:66:0b:45:cb:2f:41:e0:2a:61:b0:de:36:a4:3e:07:77:
71:8d:39:19:9e:5b:94:1c:22:04:90:07:d3:2b:e7:09:12:c1:
d2:32:ac:5c:9b:59:b9:31:ac:b4:e8:82:04:46:28:78:f1:5c:
6b:6f:6b:09:99:3c:7e:fd:da:7b:e5:33:34:09:21:81:0d:36:
3e:83:66:f1:ec:0a:0e:7f:b3:d4:bc:6c:24:c7:5d:f6:fb:7c:
82:92:93:90:51:e3:64:dd:98:98:d7:90:72:b7:47:bb:8c:2d:
c5:c1:d0:d0:45:05:f4:0d:c0:41:ad:40:82:08:8f:71:b9:cc:
1e:22:02:7f:d0:f8:98:e9:60:b0:ae:2f:25:d3:9f:f5:74:44:
5a:6f:93:ed:92:53:c0:80:5a:16:bc:0b:be:40:ea:cd:e8:b0:
50:bf:7e:6d:5e:ac:c8:f1:ce:af:b9:f4:ed:6a:35:53:15:59:
a6:f4:5b:2a:eb:09:69:11:6b:98:e2:c2:bb:0d:fd:3e:86:c4:
8f:49:1a:42:81:20:1f:96:d6:1f:f0:2f:b9:6e:d7:8c:2a:e3:
53:13:dd:19:f7:0d:37:2d:99:83:76:40:d8:12:27:f3:df:fe:
3a:d6:75:f7:e7:ec:a1:8d:52:97:73:15:aa:0d:db:c6:85:ab:
2b:d2:84:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wGQh5bPI5DeQHN/wM0/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMmI0ZmNlYTRiNzIyZjJhNmY2YzcwNWM1NTg5ZWUxYWJj
NjIwYWUwHhcNMjYwMzI5MDQwMDQ4WhcNMjYwMzMwMDQwMDQ4WjAzMTEwLwYDVQQD
EygzMDA2ZmQ3NTI2YzQzNzY1Y2RiMDNjODA1YTJlOWFkYjgwYjViYWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkkbVurFmEbpRQ/45ubcDdrlYQV/
t3oSOj0uzv7z1ehZrrPaZDvA56kIuFT6gBX0RcOz0njimv/knP5uZO2h4s1F7iEq
vMN11SoDZUgiA9SXt+JqUMba0iGpx/kacbrmUK6MJNOYaCREeTYGrAl6fds8Ho7t
hqd2hkf7DtU4IhICpt0PYIe9ZiYchIcAR6j9LyZycXRZeH3bnTXbpgxJqV7EaeIB
V3zXx8vUJUaRXNn5wQpwuWd/TMhhGupDOFmkFL9UM5ohQna5Jnb/QOG8UtcqVJz5
wR6q0M1/NCqNRLUzN1+FvUP4f5Ol5PoK17UY1E++vd6AZ4heGkjEjy3nqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAG/XUmxDdlzbA8gFoumtuAtbrVMB8GA1UdIwQY
MBaAFD8rT86ktyLypvbHBcVYnuGrxiCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NWIyMzctZDA0MS00NDk3LWE3Mjkt
NjI1M2FkMDhmODU4LzEvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84NWIyMzctZDA0MS00NDk3LWE3MjktNjI1M2FkMDhmODU4
LzEvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKVmC0XL
L0HgKmGw3jakPgd3cY05GZ5blBwiBJAH0yvnCRLB0jKsXJtZuTGstOiCBEYoePFc
a29rCZk8fv3ae+UzNAkhgQ02PoNm8ewKDn+z1LxsJMdd9vt8gpKTkFHjZN2YmNeQ
crdHu4wtxcHQ0EUF9A3AQa1AggiPcbnMHiICf9D4mOlgsK4vJdOf9XREWm+T7ZJT
wIBaFrwLvkDqzeiwUL9+bV6syPHOr7n07Wo1UxVZpvRbKusJaRFrmOLCuw39PobE
j0kaQoEgH5bWH/AvuW7XjCrjUxPdGfcNNy2Zg3ZA2BIn89/+OtZ19+fsoY1Sl3MV
qg3bxoWrK9KEJQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:54 2026 by rpki-client