Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File: pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier: EJp+pe/6Ned8lvkgYC2s9pxFfC741AeGVuGi3AHO/Zg=
Subject key identifier: 9F:F6:6B:1C:59:00:08:1D:E9:4F:43:7F:DF:F2:9F:93:F0:48:48:49
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 019CC7BDFEC5A37DC07F9C51C713C803DB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number: 1311
Signing time: Sat 07 Mar 2026 10:00:43 +0000
Manifest this update: Sat 07 Mar 2026 10:00:43 +0000
Manifest next update: Sun 08 Mar 2026 10:00:43 +0000
Files and hashes: 1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=)
2: ExTCIeQK6Vb8OCwCNuc_-quqRmI.roa (hash: yAl2sJH2YaylYmZhqm6jDAUkF463bPlFn5SJl2V0nqk=)
3: JzElV8rMB35_r5yROjAIe1YSEGk.roa (hash: prxCAC9aS1jR/lGKgImoCaF1puXWY2FG75jnwkB+CC4=)
4: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=)
5: VXazB19Is6W_OKKCp0AvNqbD-rM.roa (hash: IwIknG6od+Fc8/mQwvVulKrK8qXdxe2y0/Y0Cy93yB0=)
6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: ZbxDxHz+26bPH+26FOmn0SXRW6womHdnp3X0FpBwxg8=)
7: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=)
8: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:bd:fe:c5:a3:7d:c0:7f:9c:51:c7:13:c8:03:db:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Mar 7 10:00:43 2026 GMT
Not After : Mar 8 10:00:43 2026 GMT
Subject: CN=9ff66b1c5900081de94f437fdff29f93f0484849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:ab:5e:53:61:18:76:d3:83:68:7f:6a:ad:
5e:8b:e6:bc:de:74:0f:a8:fd:9a:a1:a6:cf:a7:52:
49:6e:00:50:04:2c:35:d9:23:c8:37:59:65:56:0f:
6a:a7:c8:03:1f:1e:be:49:5f:8a:27:96:da:62:23:
2b:5b:c0:ae:8f:f8:47:b6:9e:21:fb:f5:7f:e0:2b:
1a:8e:38:9a:6c:2c:da:75:ca:92:39:7e:93:f3:66:
06:e7:1e:09:c4:6f:36:ab:19:fe:88:30:2c:42:f2:
82:d6:bf:b7:5f:13:e7:89:8d:89:27:c3:a4:df:05:
b1:cf:76:c9:81:cc:a1:e5:39:0f:3d:01:1a:fe:86:
d1:17:dc:08:cb:8f:97:e5:84:7c:ec:44:a5:f7:65:
ce:4a:6a:63:b8:05:f9:1d:6c:be:70:3d:c2:75:74:
73:22:24:14:88:29:5d:a2:44:d2:81:38:35:16:6c:
97:e7:83:5f:3c:c3:1b:c3:5a:c7:ac:21:b0:86:47:
4b:c9:2d:d9:c3:f1:9c:c0:8a:cd:c9:a2:3d:22:8f:
5f:18:2e:d9:03:46:6f:0c:7b:22:f9:00:98:50:6c:
c0:5e:ec:95:77:27:75:2a:08:75:59:fd:c1:8e:d6:
9d:4e:d0:6e:ce:b7:10:31:c6:8b:00:37:50:16:5f:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F6:6B:1C:59:00:08:1D:E9:4F:43:7F:DF:F2:9F:93:F0:48:48:49
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a3:95:bd:4c:0d:b1:62:f6:91:47:64:c7:96:f4:df:bc:db:
c6:f9:3d:98:52:9f:9f:24:df:57:cb:69:32:32:91:12:35:1e:
b8:c1:4f:2e:3a:3d:7f:bd:f9:aa:b9:ca:31:de:71:f8:81:73:
92:0a:5e:3f:53:6f:ae:99:3d:a8:94:ba:be:2b:70:be:2f:2f:
d6:46:d6:63:a0:c2:0e:97:77:89:47:42:0b:a0:a4:af:bc:bc:
22:fd:b4:4c:e4:7f:86:e3:6a:85:e7:0b:70:66:02:4a:4b:91:
50:5e:00:51:a6:e5:5a:24:4c:91:6e:56:aa:cd:82:cf:96:12:
e8:e3:e0:bb:c0:db:39:b7:45:be:1f:7f:c1:8f:a9:48:e2:ba:
b5:ae:d8:f9:ae:6a:2e:38:f5:12:7b:af:cc:d9:f6:b0:c6:23:
47:a5:ac:14:f1:5a:93:95:aa:57:d5:a2:a5:89:74:c5:75:d8:
f9:d2:2e:f5:dc:a6:24:3c:44:0f:50:b8:1a:b8:a7:b4:77:ba:
ff:97:be:b7:70:98:d0:c9:aa:91:8e:9a:54:26:6d:5f:e3:3f:
af:c9:26:69:4a:ae:eb:15:71:5e:7d:fd:98:38:44:f6:3b:3a:
1d:1d:db:0b:09:5f:c3:d3:3f:11:92:d2:a4:0e:55:03:3c:5c:
01:33:91:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzHvf7Fo33Af5xRxxPIA9sVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi
YWQwMzAwHhcNMjYwMzA3MTAwMDQzWhcNMjYwMzA4MTAwMDQzWjAzMTEwLwYDVQQD
Eyg5ZmY2NmIxYzU5MDAwODFkZTk0ZjQzN2ZkZmYyOWY5M2YwNDg0ODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5CrXlNhGHbTg2h/aq1ei+a83nQP
qP2aoabPp1JJbgBQBCw12SPIN1llVg9qp8gDHx6+SV+KJ5baYiMrW8Cuj/hHtp4h
+/V/4CsajjiabCzadcqSOX6T82YG5x4JxG82qxn+iDAsQvKC1r+3XxPniY2JJ8Ok
3wWxz3bJgcyh5TkPPQEa/obRF9wIy4+X5YR87ESl92XOSmpjuAX5HWy+cD3CdXRz
IiQUiCldokTSgTg1FmyX54NfPMMbw1rHrCGwhkdLyS3Zw/GcwIrNyaI9Io9fGC7Z
A0ZvDHsi+QCYUGzAXuyVdyd1Kgh1Wf3BjtadTtBuzrcQMcaLADdQFl9G5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/2axxZAAgd6U9Df9/yn5PwSEhJMB8GA1UdIwQY
MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt
YTRlYTBhNjNmNzY2LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2
LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6OVvUwN
sWL2kUdkx5b037zbxvk9mFKfnyTfV8tpMjKREjUeuMFPLjo9f735qrnKMd5x+IFz
kgpeP1Nvrpk9qJS6vitwvi8v1kbWY6DCDpd3iUdCC6Ckr7y8Iv20TOR/huNqhecL
cGYCSkuRUF4AUablWiRMkW5Wqs2Cz5YS6OPgu8DbObdFvh9/wY+pSOK6ta7Y+a5q
Ljj1EnuvzNn2sMYjR6WsFPFak5WqV9WipYl0xXXY+dIu9dymJDxED1C4GrintHe6
/5e+t3CY0MmqkY6aVCZtX+M/r8kmaUqu6xVxXn39mDhE9js6HR3bCwlfw9M/EZLS
pA5VAzxcATORCg==
-----END CERTIFICATE-----
Generated at Sat Mar 7 17:47:55 2026 by rpki-client