Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier: tmF+mtJfcoChUzVMrdLXMLsn7i8yEAle3qF2VYFDw0M=
Subject key identifier: 17:91:FA:D8:87:38:D9:36:D4:9A:C2:C4:C1:76:16:A9:8A:62:DF:21
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 01A1163CE4233A0652DB0BD2F3AD382997F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number: 0C48
Signing time: Wed 07 Oct 2026 12:00:51 +0000
Manifest this update: Wed 07 Oct 2026 12:00:51 +0000
Manifest next update: Thu 08 Oct 2026 12:00:51 +0000
Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: bqYmlO+8fmI41WRkkq5np1clzB5L0pF3nolKHwkqJ0c=)
2: fUppB1VDu1vL2ViKYL-vIqtVeA8.roa (hash: I/nIKmlTZJsaPW6FiqmV19GI9Y+ltPvlFVp7DDT67CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:3c:e4:23:3a:06:52:db:0b:d2:f3:ad:38:29:97:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Oct 7 12:00:51 2026 GMT
Not After : Oct 8 12:00:51 2026 GMT
Subject: CN=1791fad88738d936d49ac2c4c17616a98a62df21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:92:21:f4:b9:07:1e:b1:c5:b3:8d:3b:23:
d4:7d:d9:84:e3:3a:cd:d8:4c:c3:84:47:ac:18:ea:
b5:60:53:c7:29:bc:4e:ec:6d:11:03:ab:db:9a:39:
82:44:ac:84:86:86:a5:b0:ac:b7:01:2f:08:d4:73:
51:bd:df:fa:5b:57:a4:40:13:bc:cd:d7:4e:9b:9e:
60:3d:00:c4:e6:3c:cf:b1:e5:14:2c:6e:33:0c:33:
ec:36:0b:63:b8:f8:d2:93:f5:57:1d:86:c3:0d:33:
16:c9:bf:93:3f:cc:90:75:85:38:cd:0b:e6:e7:9e:
ad:2e:6c:f2:23:61:f5:1e:39:dc:87:21:57:d1:9a:
01:8a:28:76:f5:8a:5f:f7:2d:64:49:af:c5:89:1c:
47:7d:2c:9a:da:cc:15:69:bd:ad:c8:65:6f:f4:0a:
08:b3:04:f8:f1:f5:ca:8b:4e:e5:f6:21:83:0b:2c:
8b:c5:c7:4e:96:39:bc:38:f8:bb:33:9a:2d:ab:04:
34:00:83:79:39:6e:5a:05:e6:28:f9:bc:d4:08:4c:
e8:e9:86:c6:3e:42:a9:bc:2b:f0:33:83:37:cf:8d:
28:67:68:be:ce:a8:69:93:0f:b7:03:86:44:65:e7:
ad:2a:7d:d4:f8:4a:d4:3f:ad:1a:37:b5:45:3d:e6:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:91:FA:D8:87:38:D9:36:D4:9A:C2:C4:C1:76:16:A9:8A:62:DF:21
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0b:46:2f:ca:b5:41:db:54:b4:fb:b9:78:f7:79:c7:a4:25:
55:aa:2f:6b:8b:2d:3f:c8:b9:89:d1:db:9a:b1:1d:c2:3e:22:
b7:5c:56:70:d6:f4:74:a0:00:9a:fd:60:f3:d6:04:4e:06:d2:
15:6d:2e:9f:f7:ce:b0:4a:47:fa:df:a3:cb:2e:b2:7a:8b:6f:
c4:23:5c:34:d6:96:21:72:4e:ee:02:a1:e4:e5:ba:f7:8c:97:
3e:2b:79:c0:0d:20:54:2c:08:19:b6:44:96:43:ce:16:d4:f5:
83:bf:24:66:9d:09:9e:6a:98:21:70:ee:cc:18:3d:fb:ed:32:
54:09:da:f9:68:fd:48:76:91:98:f0:9a:36:1f:7c:cb:a6:fc:
e6:c5:48:33:30:dd:4b:69:e2:1d:84:f5:45:25:03:54:f1:8b:
4b:31:26:d0:e3:e2:ea:38:48:8e:96:8b:d1:42:11:ef:6f:a8:
d0:33:5d:85:0a:03:bc:3e:e3:25:2f:fe:25:ef:24:03:de:19:
52:5e:08:79:29:6a:a5:ce:c0:8c:2a:a1:c6:5e:f0:87:89:c9:
f0:0f:60:ea:97:ee:25:a7:53:d2:bd:59:a5:38:a9:dd:97:ca:
aa:54:42:e4:af:b0:ca:39:43:f6:6f:77:bb:87:10:3a:6a:7f:
db:b5:c1:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEWPOQjOgZS2wvS8604KZf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNDMyNzdiN2NhNzlkMGU5ZTA3ZmM0YTRiMzE4MDQxZGY0
MTVjYjMwHhcNMjYxMDA3MTIwMDUxWhcNMjYxMDA4MTIwMDUxWjAzMTEwLwYDVQQD
EygxNzkxZmFkODg3MzhkOTM2ZDQ5YWMyYzRjMTc2MTZhOThhNjJkZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDWSIfS5Bx6xxbONOyPUfdmE4zrN
2EzDhEesGOq1YFPHKbxO7G0RA6vbmjmCRKyEhoalsKy3AS8I1HNRvd/6W1ekQBO8
zddOm55gPQDE5jzPseUULG4zDDPsNgtjuPjSk/VXHYbDDTMWyb+TP8yQdYU4zQvm
556tLmzyI2H1HjnchyFX0ZoBiih29Ypf9y1kSa/FiRxHfSya2swVab2tyGVv9AoI
swT48fXKi07l9iGDCyyLxcdOljm8OPi7M5otqwQ0AIN5OW5aBeYo+bzUCEzo6YbG
PkKpvCvwM4M3z40oZ2i+zqhpkw+3A4ZEZeetKn3U+ErUP60aN7VFPebYMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeR+tiHONk21JrCxMF2FqmKYt8hMB8GA1UdIwQY
MBaAFD5DJ3t8p50Ongf8SksxgEHfQVyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUt
M2NmMmE0NjIyZmJjLzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUtM2NmMmE0NjIyZmJj
LzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgtGL8q1
QdtUtPu5ePd5x6QlVaova4stP8i5idHbmrEdwj4it1xWcNb0dKAAmv1g89YETgbS
FW0un/fOsEpH+t+jyy6yeotvxCNcNNaWIXJO7gKh5OW694yXPit5wA0gVCwIGbZE
lkPOFtT1g78kZp0JnmqYIXDuzBg9++0yVAna+Wj9SHaRmPCaNh98y6b85sVIMzDd
S2niHYT1RSUDVPGLSzEm0OPi6jhIjpaL0UIR72+o0DNdhQoDvD7jJS/+Je8kA94Z
Ul4IeSlqpc7AjCqhxl7wh4nJ8A9g6pfuJadT0r1ZpTip3ZfKqlRC5K+wyjlD9m93
u4cQOmp/27XBfQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 17:17:10 2026 by rpki-client