Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
File: pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft (raw, json)
Hash identifier: Kn2GlxYe9FqsdBZqWIA5HKOm3YsHtAqvPKb8Fg4OhF8=
Subject key identifier: C4:C9:71:EC:16:98:4C:8F:14:04:A8:EC:6F:47:FC:33:0F:D6:90:0A
Authority key identifier: A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C
Certificate issuer: /CN=a55004661a09e2675fc1599d4e40027d778c404c
Certificate serial: 019D38D3151FB087EDAE251033D77B8E83C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
Manifest number: 09C0
Signing time: Sun 29 Mar 2026 09:00:50 +0000
Manifest this update: Sun 29 Mar 2026 09:00:50 +0000
Manifest next update: Mon 30 Mar 2026 09:00:50 +0000
Files and hashes: 1: MaDS8-joEcAo6zZrve4qyKt9_MA.roa (hash: xT1YeTMUMUPt/jRAlRUdl6PIm7aXY3jJu/RwbOafDEw=)
2: pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl (hash: 2Ikr1Jtec64k4GyBCQoxC9YGzDZdFIiVi69KfGx2wUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:15:1f:b0:87:ed:ae:25:10:33:d7:7b:8e:83:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a55004661a09e2675fc1599d4e40027d778c404c
Validity
Not Before: Mar 29 09:00:50 2026 GMT
Not After : Mar 30 09:00:50 2026 GMT
Subject: CN=c4c971ec16984c8f1404a8ec6f47fc330fd6900a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:e3:c2:42:8a:ae:c3:12:db:f6:b1:33:5b:
e5:8a:ea:07:3f:a0:b5:16:30:2e:a2:72:3a:15:86:
04:a8:c7:78:ab:3e:ef:0e:ce:5d:1d:0d:13:0a:22:
d2:73:28:d8:0a:df:8c:45:34:f2:78:79:96:aa:ab:
9b:5e:73:00:49:d5:48:14:ce:c4:1f:ad:61:16:7d:
81:aa:52:1c:ac:fd:8b:a6:6f:54:c8:af:38:6b:cd:
c3:87:a4:e5:2e:74:92:33:ee:7d:d0:c5:25:93:07:
14:2a:d9:0e:c0:7d:9c:40:ce:b5:f9:42:0c:26:bf:
18:4b:19:fa:78:df:cd:dd:27:27:09:fa:77:cb:65:
68:b1:b0:89:47:7d:7f:6c:98:80:b4:ff:18:e9:6c:
8b:18:ee:94:b6:b4:41:86:2c:f8:e0:57:af:d3:7f:
53:b2:fa:b2:d5:9d:ac:75:d2:4a:be:49:73:11:96:
83:da:37:00:20:21:41:05:c9:fb:68:50:9a:fc:27:
86:d9:b7:58:f2:43:4e:e0:17:49:45:d9:57:be:43:
e2:27:76:c3:75:3f:64:2f:05:34:6d:4f:17:87:6e:
4a:6b:ca:7a:4e:f6:df:31:45:e8:9b:55:d3:5c:5b:
b6:c5:a4:57:17:6d:47:0a:c1:78:4d:d5:90:03:f9:
08:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C9:71:EC:16:98:4C:8F:14:04:A8:EC:6F:47:FC:33:0F:D6:90:0A
X509v3 Authority Key Identifier:
keyid:A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6b:70:62:39:ff:2f:ec:93:7a:e9:26:aa:70:bc:85:84:85:
35:af:93:1e:d9:9d:a9:0c:e9:0f:a4:44:9b:c1:02:73:48:68:
fc:d4:18:67:ab:0b:2f:8b:c4:7c:59:17:c8:ad:77:c5:92:4a:
02:76:64:fb:18:c2:c4:7d:76:f4:6c:02:cd:2b:5b:c2:e5:b7:
dd:ed:c3:ff:91:d6:ae:9b:a7:ab:80:a1:a0:7e:3b:1c:3f:92:
42:d4:8f:f3:ce:34:a8:4d:b8:e9:f3:66:76:b1:88:85:ad:f2:
1e:d4:9d:37:8f:15:f9:e5:57:29:7e:82:9b:39:e3:ba:65:51:
84:a9:8d:e1:37:67:e9:75:11:7c:bb:92:5c:87:ff:b8:9f:34:
79:96:dd:c0:c2:0b:87:a4:7c:b5:21:1b:e2:1a:a8:8d:0a:1d:
b2:2f:02:a7:72:d5:51:57:65:d0:f8:3b:8f:5a:ab:45:a5:aa:
3d:ab:54:8a:b3:9e:e0:6d:e3:21:b1:75:3e:57:b9:15:b0:a4:
88:c4:83:9e:7b:1d:9e:8c:4a:43:78:3d:cc:dc:bb:1f:e7:0c:
6f:89:66:86:f1:f4:be:f1:07:3b:8e:69:10:ba:04:12:41:5b:
46:76:a8:9e:f5:53:5f:5a:b0:84:9c:4f:37:fc:0e:18:fa:e0:
b0:57:c4:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040xUfsIftriUQM9d7joPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NTAwNDY2MWEwOWUyNjc1ZmMxNTk5ZDRlNDAwMjdkNzc4
YzQwNGMwHhcNMjYwMzI5MDkwMDUwWhcNMjYwMzMwMDkwMDUwWjAzMTEwLwYDVQQD
EyhjNGM5NzFlYzE2OTg0YzhmMTQwNGE4ZWM2ZjQ3ZmMzMzBmZDY5MDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd3jwkKKrsMS2/axM1vliuoHP6C1
FjAuonI6FYYEqMd4qz7vDs5dHQ0TCiLScyjYCt+MRTTyeHmWqqubXnMASdVIFM7E
H61hFn2BqlIcrP2Lpm9UyK84a83Dh6TlLnSSM+590MUlkwcUKtkOwH2cQM61+UIM
Jr8YSxn6eN/N3ScnCfp3y2VosbCJR31/bJiAtP8Y6WyLGO6UtrRBhiz44Fev039T
svqy1Z2sddJKvklzEZaD2jcAICFBBcn7aFCa/CeG2bdY8kNO4BdJRdlXvkPiJ3bD
dT9kLwU0bU8Xh25Ka8p6TvbfMUXom1XTXFu2xaRXF21HCsF4TdWQA/kI3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTJcewWmEyPFASo7G9H/DMP1pAKMB8GA1UdIwQY
MBaAFKVQBGYaCeJnX8FZnU5AAn13jEBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFZBRVpob0o0bWRmd1ZtZFRrQUNmWGVNUUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yY2ZkZmQtMWIzYi00YWFhLWJkODIt
M2Y3OGJjM2RlM2E4LzEvcFZBRVpob0o0bWRmd1ZtZFRrQUNmWGVNUUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8yY2ZkZmQtMWIzYi00YWFhLWJkODItM2Y3OGJjM2RlM2E4
LzEvcFZBRVpob0o0bWRmd1ZtZFRrQUNmWGVNUUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2twYjn/
L+yTeukmqnC8hYSFNa+THtmdqQzpD6REm8ECc0ho/NQYZ6sLL4vEfFkXyK13xZJK
AnZk+xjCxH129GwCzStbwuW33e3D/5HWrpunq4ChoH47HD+SQtSP8840qE246fNm
drGIha3yHtSdN48V+eVXKX6CmznjumVRhKmN4Tdn6XURfLuSXIf/uJ80eZbdwMIL
h6R8tSEb4hqojQodsi8Cp3LVUVdl0Pg7j1qrRaWqPatUirOe4G3jIbF1Ple5FbCk
iMSDnnsdnoxKQ3g9zNy7H+cMb4lmhvH0vvEHO45pELoEEkFbRnaonvVTX1qwhJxP
N/wOGPrgsFfEAQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:53:59 2026 by rpki-client