Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
File: Pbiird2wAoUIVJlqlLcrh_Snsw8.mft (raw, json)
Hash identifier: o4cmyYD/FhbeKJynFooz0n/1tk4Yx60LBI6VzdyTuEo=
Subject key identifier: A8:1E:BB:DB:60:4A:13:28:5B:B6:C9:1A:F0:3D:0D:E8:F8:75:FA:68
Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Certificate serial: 019D38D2B1D4F05812278E4D10B58052D0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
Manifest number: 113D
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: Pbiird2wAoUIVJlqlLcrh_Snsw8.crl (hash: 30CVWgZoXI9P6xwXfh08QAN+m/oZGL/+1JdIJp69XwY=)
2: d1oY-rePzrEhSHN4TgD8ubZR5-k.roa (hash: jS9ynsZdE/EEvcdn5+RIkD8jADjtptlW575sCzvdXBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b1:d4:f0:58:12:27:8e:4d:10:b5:80:52:d0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=a81ebbdb604a13285bb6c91af03d0de8f875fa68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:21:7e:85:ab:9f:23:79:b4:bb:60:62:26:
9b:13:6b:d6:17:b9:8f:74:62:c0:c5:67:1a:9f:9a:
32:8d:0c:93:b9:b4:7e:98:6b:e9:10:ec:1b:3d:f2:
e5:c3:98:47:be:45:1f:98:4d:c1:bc:30:6f:9c:c1:
2a:4d:72:34:41:0e:43:99:30:27:7d:7d:16:7d:88:
cc:1d:97:fb:c8:37:c9:1e:ec:b3:18:0e:e1:e8:f1:
2e:41:45:28:ff:99:d0:e4:9f:60:52:a4:9d:bc:c3:
6b:48:5f:13:09:86:4d:25:ef:6e:95:e5:91:e7:64:
49:f0:93:62:17:08:84:ac:31:ab:73:1e:41:33:b7:
7b:36:be:28:04:33:9e:8d:43:c3:1d:c4:b5:75:aa:
df:65:6c:bd:3a:62:d0:29:73:8f:ab:05:db:9f:ad:
43:50:17:ad:c4:6c:fc:ba:67:52:11:1d:73:be:30:
52:7d:6e:09:15:55:87:66:51:49:94:0e:77:6e:9e:
59:ae:a1:55:de:8a:79:47:95:af:36:5a:8a:0b:51:
14:c9:12:dd:20:28:a0:a1:51:a8:49:e9:fe:b3:75:
8f:2e:6a:5e:be:c7:42:ed:8b:46:0b:59:96:92:82:
c7:06:41:be:84:92:f8:6e:0a:85:64:d2:56:26:f3:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1E:BB:DB:60:4A:13:28:5B:B6:C9:1A:F0:3D:0D:E8:F8:75:FA:68
X509v3 Authority Key Identifier:
keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:9a:90:8b:59:79:db:0d:77:e7:1c:aa:1e:d9:51:74:da:23:
57:5c:4b:88:94:9f:54:3c:34:65:29:6b:12:e6:1c:91:49:a1:
ef:6b:40:79:b8:3b:c5:d3:21:3a:8e:59:4b:74:82:7f:79:8d:
c8:96:e9:b7:15:c3:49:9f:29:bf:a9:d6:bf:f3:cf:29:5b:b3:
fa:2a:f9:41:29:f4:24:40:11:94:9e:a2:21:62:b5:91:57:5b:
04:2e:f4:9a:0d:98:05:17:ed:50:fc:11:16:fc:60:4b:3a:9b:
aa:39:13:99:5d:cd:29:b1:73:11:41:e3:ca:15:92:5e:0e:a5:
62:a5:b3:58:7b:e6:db:47:37:c0:27:00:3e:8c:fb:4d:79:60:
ad:bb:ee:a6:d6:12:3d:20:a0:2d:65:93:db:74:5e:1e:fa:fb:
c5:e8:30:a1:99:85:85:eb:f1:46:c7:52:26:2a:04:d8:02:fd:
f1:2f:a8:d9:ec:ff:43:37:f0:1d:12:70:c8:4f:66:b0:75:fb:
d5:32:70:98:f0:e3:59:bc:4c:b8:ef:bc:4b:b2:8c:94:7c:99:
42:68:5b:03:b8:d7:80:be:19:f2:6c:8f:84:be:a0:b1:44:3e:
54:3d:fd:01:d9:7e:74:97:f2:25:e6:0f:2b:9b:6c:ee:a8:dd:
04:25:8c:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040rHU8FgSJ45NELWAUtC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjhhMmFkZGRiMDAyODUwODU0OTk2YTk0YjcyYjg3ZjRh
N2IzMGYwHhcNMjYwMzI5MDkwMDI1WhcNMjYwMzMwMDkwMDI1WjAzMTEwLwYDVQQD
EyhhODFlYmJkYjYwNGExMzI4NWJiNmM5MWFmMDNkMGRlOGY4NzVmYTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4MhfoWrnyN5tLtgYiabE2vWF7mP
dGLAxWcan5oyjQyTubR+mGvpEOwbPfLlw5hHvkUfmE3BvDBvnMEqTXI0QQ5DmTAn
fX0WfYjMHZf7yDfJHuyzGA7h6PEuQUUo/5nQ5J9gUqSdvMNrSF8TCYZNJe9uleWR
52RJ8JNiFwiErDGrcx5BM7d7Nr4oBDOejUPDHcS1darfZWy9OmLQKXOPqwXbn61D
UBetxGz8umdSER1zvjBSfW4JFVWHZlFJlA53bp5ZrqFV3op5R5WvNlqKC1EUyRLd
ICigoVGoSen+s3WPLmpevsdC7YtGC1mWkoLHBkG+hJL4bgqFZNJWJvOriwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgeu9tgShMoW7bJGvA9Dej4dfpoMB8GA1UdIwQY
MBaAFD24oq3dsAKFCFSZapS3K4f0p7MPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQt
YTBhNzJhNzMzYzAyLzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQtYTBhNzJhNzMzYzAy
LzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2JqQi1l5
2w135xyqHtlRdNojV1xLiJSfVDw0ZSlrEuYckUmh72tAebg7xdMhOo5ZS3SCf3mN
yJbptxXDSZ8pv6nWv/PPKVuz+ir5QSn0JEARlJ6iIWK1kVdbBC70mg2YBRftUPwR
FvxgSzqbqjkTmV3NKbFzEUHjyhWSXg6lYqWzWHvm20c3wCcAPoz7TXlgrbvuptYS
PSCgLWWT23ReHvr7xegwoZmFhevxRsdSJioE2AL98S+o2ez/QzfwHRJwyE9msHX7
1TJwmPDjWbxMuO+8S7KMlHyZQmhbA7jXgL4Z8myPhL6gsUQ+VD39Adl+dJfyJeYP
K5ts7qjdBCWMxA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:11 2026 by rpki-client