Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier: 03FJWtrw/ATCx53qjbEmKgztuFHqOP1Dlm/CGeQdzP0=
Subject key identifier: 24:A7:A1:38:C9:E4:22:ED:E9:C1:0A:76:B1:D2:38:9D:5C:E2:85:AF
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial: 01A17514C6B0DD602826BD4C387FD94BA171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number: 162A
Signing time: Sun 25 Oct 2026 22:00:58 +0000
Manifest this update: Sun 25 Oct 2026 22:00:58 +0000
Manifest next update: Mon 26 Oct 2026 22:00:58 +0000
Files and hashes: 1: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: Taj1vanqfIqlQHitQ8dBCoK9nAM07APhnFXnCJoQUm8=)
2: TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa (hash: 4NWLdATC5TzLcy4vgySsRMRG+JcNTxLmpZ+bS7QNQno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:14:c6:b0:dd:60:28:26:bd:4c:38:7f:d9:4b:a1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Validity
Not Before: Oct 25 22:00:58 2026 GMT
Not After : Oct 26 22:00:58 2026 GMT
Subject: CN=24a7a138c9e422ede9c10a76b1d2389d5ce285af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:74:72:3c:3d:d9:e7:99:25:53:51:08:13:
81:c1:7e:24:47:f3:d9:c4:e5:1e:f1:bf:7d:7c:fa:
e8:ef:5e:03:53:73:b8:60:e6:94:15:1b:12:bb:4f:
d9:13:ad:d7:30:37:76:c3:85:1b:33:70:1b:b0:c2:
26:f8:75:a5:9d:b2:85:13:c3:1a:59:c1:27:ce:42:
ca:ed:bb:65:66:b9:07:90:7f:2f:42:41:a6:8f:e7:
a7:7e:19:ae:0f:31:f6:32:cd:8e:d2:05:37:c6:11:
32:52:b7:c3:01:08:80:65:b9:91:c6:03:0c:37:1e:
50:b2:ef:b6:2b:53:d2:d0:7d:26:c1:59:28:db:22:
08:fa:a8:fc:c4:9b:d4:34:d4:ca:06:c5:bd:b0:bb:
1a:39:31:0d:65:be:b0:13:48:20:d6:58:e1:0c:8e:
38:05:0b:4a:f9:c7:21:04:2d:f6:63:2d:7b:9b:4d:
44:a2:3d:e0:31:a7:b1:c2:25:da:d7:96:fd:29:01:
2c:ee:c5:f8:f1:6a:dc:7e:ea:c1:2e:62:6a:94:5c:
3e:0a:6e:50:9a:1e:4b:21:78:f6:d3:74:0d:e0:36:
a8:2d:7c:f1:b3:03:81:c6:c4:8f:a6:66:02:2e:7b:
62:8d:88:34:95:0c:99:75:95:ef:67:6d:61:1d:a6:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A7:A1:38:C9:E4:22:ED:E9:C1:0A:76:B1:D2:38:9D:5C:E2:85:AF
X509v3 Authority Key Identifier:
keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:fc:77:5d:15:4e:ce:ba:ae:64:1a:bd:d7:df:c3:47:bc:1c:
02:b5:30:9a:a6:59:5d:06:b6:02:a6:76:d4:e9:f0:2b:38:9c:
69:c2:d4:43:75:f0:1f:0d:98:b9:89:b3:06:13:f7:35:03:2e:
6e:b1:80:b1:a4:a1:51:54:72:f3:10:75:ae:7c:41:24:08:ce:
9b:8d:b1:1f:db:dd:11:81:97:83:55:a4:10:c5:3f:3f:c6:f9:
e4:ea:04:94:87:ce:5c:2c:17:2b:a7:a5:68:2a:7b:4a:a0:ae:
71:78:2a:59:39:97:bc:6a:0f:0e:97:f1:cc:bc:cc:ac:c7:4c:
4e:06:bc:38:07:d1:7f:a3:b4:ab:63:59:10:b8:46:3f:7b:78:
b9:18:e1:36:da:39:b1:87:30:f7:b9:4d:d6:b8:3e:b1:c3:69:
1f:fb:92:56:13:49:4b:2b:27:86:5c:d8:f9:e7:6a:6e:7d:44:
02:2a:db:79:82:35:63:67:44:8b:98:ef:50:ca:75:b8:e1:bc:
c3:d4:0c:23:62:75:ee:88:fb:5f:b0:3f:48:7e:d2:d5:11:b2:
86:3e:90:20:11:d3:e5:e1:9c:d6:96:88:e8:06:47:db:44:7d:
08:fb:44:85:d0:01:c8:5e:fa:51:9e:9c:91:c5:69:ca:62:ca:
65:ad:8f:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF1FMaw3WAoJr1MOH/ZS6FxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYzIzZThhOGVjOTM5NmIxYjU0Y2ZmYjI3MWM1NTc2NmQ5
NDkxOTkwHhcNMjYxMDI1MjIwMDU4WhcNMjYxMDI2MjIwMDU4WjAzMTEwLwYDVQQD
EygyNGE3YTEzOGM5ZTQyMmVkZTljMTBhNzZiMWQyMzg5ZDVjZTI4NWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0l0cjw92eeZJVNRCBOBwX4kR/PZ
xOUe8b99fPro714DU3O4YOaUFRsSu0/ZE63XMDd2w4UbM3AbsMIm+HWlnbKFE8Ma
WcEnzkLK7btlZrkHkH8vQkGmj+enfhmuDzH2Ms2O0gU3xhEyUrfDAQiAZbmRxgMM
Nx5Qsu+2K1PS0H0mwVko2yII+qj8xJvUNNTKBsW9sLsaOTENZb6wE0gg1ljhDI44
BQtK+cchBC32Yy17m01Eoj3gMaexwiXa15b9KQEs7sX48WrcfurBLmJqlFw+Cm5Q
mh5LIXj203QN4DaoLXzxswOBxsSPpmYCLntijYg0lQyZdZXvZ21hHaZNIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSnoTjJ5CLt6cEKdrHSOJ1c4oWvMB8GA1UdIwQY
MBaAFD3CPoqOyTlrG1TP+yccVXZtlJGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUt
YzBkZDQ3NzFjMmFhLzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUtYzBkZDQ3NzFjMmFh
LzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAufx3XRVO
zrquZBq919/DR7wcArUwmqZZXQa2AqZ21OnwKzicacLUQ3XwHw2YuYmzBhP3NQMu
brGAsaShUVRy8xB1rnxBJAjOm42xH9vdEYGXg1WkEMU/P8b55OoElIfOXCwXK6el
aCp7SqCucXgqWTmXvGoPDpfxzLzMrMdMTga8OAfRf6O0q2NZELhGP3t4uRjhNto5
sYcw97lN1rg+scNpH/uSVhNJSysnhlzY+edqbn1EAirbeYI1Y2dEi5jvUMp1uOG8
w9QMI2J17oj7X7A/SH7S1RGyhj6QIBHT5eGc1paI6AZH20R9CPtEhdAByF76UZ6c
kcVpymLKZa2P9A==
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:42:46 2026 by rpki-client