Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier: atGKUEUMyG2gc49612bTnlP1ccPhA20zxronE5W6hlo=
Subject key identifier: 40:7D:95:FB:52:47:49:52:8C:5C:20:C8:D6:DE:9B:2D:69:CD:22:AA
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 019D389BB660018085CC1EECC16C70B78955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:21 +0000
Manifest this update: Sun 29 Mar 2026 08:00:21 +0000
Manifest next update: Mon 30 Mar 2026 08:00:21 +0000
Files and hashes: 1: ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa (hash: 9yOiqGJYeL5bi8PHF9fNeVVcmhOJdy6bDsiWR0m6Ve0=)
2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: tE+KSS61p/GfGHZXs+hcDLeMHWm+4BQ461Q9gaYd31Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b6:60:01:80:85:cc:1e:ec:c1:6c:70:b7:89:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: Mar 29 08:00:21 2026 GMT
Not After : Mar 30 08:00:21 2026 GMT
Subject: CN=407d95fb524749528c5c20c8d6de9b2d69cd22aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:a8:4a:c8:34:a6:9b:43:f4:a1:c4:76:a6:
5e:1b:3e:c2:28:a9:0c:f3:73:56:5d:ee:4e:cc:5a:
ff:4c:d9:8b:31:02:59:23:65:f4:cf:dc:29:2e:e9:
98:c3:bb:fd:46:d1:66:71:a3:4f:94:6b:85:ca:c0:
da:43:7f:f6:f4:ff:ed:87:13:06:de:dc:28:3c:51:
62:c1:70:62:df:0d:cc:42:c5:dd:23:55:a1:92:ea:
3c:0f:41:e5:30:8d:df:0e:7b:59:c8:c1:ad:6b:59:
52:0a:77:e2:a6:cc:dc:c5:4c:db:08:fe:e9:e7:f4:
b7:84:24:9b:68:11:ca:ab:98:c9:03:f6:9a:4d:22:
bf:cd:2e:11:99:e4:d2:fe:1c:f7:6a:42:68:ef:63:
37:aa:30:7c:b8:5a:45:cb:19:03:ec:9d:da:02:51:
a4:5e:7e:60:92:f1:07:37:cb:6f:ad:61:86:e6:eb:
15:b3:80:f8:1a:0e:34:1d:d2:8a:2e:64:1d:e0:0c:
f7:13:34:fb:ca:97:52:6d:6f:f4:5b:3c:89:da:3b:
dd:41:47:90:d1:d0:82:e7:d3:d0:73:ed:b2:d9:7e:
89:e8:43:19:fe:af:29:5d:2c:c2:b8:62:b9:1d:82:
60:01:98:4b:55:a5:13:53:e9:04:36:28:40:4e:8f:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7D:95:FB:52:47:49:52:8C:5C:20:C8:D6:DE:9B:2D:69:CD:22:AA
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:62:88:c1:ef:ad:af:bc:33:c7:40:47:9d:39:2b:66:5a:70:
59:3b:97:a1:a1:73:34:1a:0f:2a:93:42:a5:f5:a7:9f:19:e4:
37:24:15:d3:c6:cb:bc:cb:87:05:6f:ed:1e:c5:b2:cb:cb:18:
bc:4b:d4:29:d4:a3:9c:38:ba:ca:ca:d6:f3:74:6f:b9:bd:a4:
65:65:88:d7:27:d5:b8:09:13:24:d9:82:2e:ca:4c:af:02:9a:
03:11:b8:7c:aa:42:f4:44:3e:be:da:74:56:2e:ea:fc:cc:77:
04:1b:5f:dc:35:0c:7b:2b:8e:34:5a:7d:8f:3a:a9:4e:40:20:
80:97:11:89:02:74:4a:22:e8:64:aa:a5:16:01:3c:c7:f2:19:
b0:68:57:81:18:0c:2d:3a:2b:79:5d:cc:8c:9c:1e:77:dc:3a:
07:c1:6f:26:2a:9a:d1:e8:82:66:44:60:ce:85:b2:3e:ed:ee:
25:78:22:b0:ad:23:cf:41:e6:87:cb:70:b9:9d:e8:91:ae:d6:
87:45:fc:39:2d:e5:6d:a6:ec:55:eb:41:63:d9:9a:74:78:35:
3f:79:90:1b:1c:a9:37:68:69:1f:0a:4c:21:c0:df:d3:88:17:
53:94:1c:09:71:a0:e8:f6:ab:1a:27:16:95:65:8e:ed:6a:27:
8c:f2:a7:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m7ZgAYCFzB7swWxwt4lVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjUyM2Q5NDgzODdkOGM1ZmNkZjc1MmUwYTFjYzQwOGNm
ZTgzOTUwHhcNMjYwMzI5MDgwMDIxWhcNMjYwMzMwMDgwMDIxWjAzMTEwLwYDVQQD
Eyg0MDdkOTVmYjUyNDc0OTUyOGM1YzIwYzhkNmRlOWIyZDY5Y2QyMmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV6oSsg0pptD9KHEdqZeGz7CKKkM
83NWXe5OzFr/TNmLMQJZI2X0z9wpLumYw7v9RtFmcaNPlGuFysDaQ3/29P/thxMG
3twoPFFiwXBi3w3MQsXdI1Whkuo8D0HlMI3fDntZyMGta1lSCnfipszcxUzbCP7p
5/S3hCSbaBHKq5jJA/aaTSK/zS4RmeTS/hz3akJo72M3qjB8uFpFyxkD7J3aAlGk
Xn5gkvEHN8tvrWGG5usVs4D4Gg40HdKKLmQd4Az3EzT7ypdSbW/0WzyJ2jvdQUeQ
0dCC59PQc+2y2X6J6EMZ/q8pXSzCuGK5HYJgAZhLVaUTU+kENihATo/acQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEB9lftSR0lSjFwgyNbemy1pzSKqMB8GA1UdIwQY
MBaAFKT1I9lIOH2MX833UuChzECM/oOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEt
MjBhOTAwYmM3NzZhLzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEtMjBhOTAwYmM3NzZh
LzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemKIwe+t
r7wzx0BHnTkrZlpwWTuXoaFzNBoPKpNCpfWnnxnkNyQV08bLvMuHBW/tHsWyy8sY
vEvUKdSjnDi6ysrW83Rvub2kZWWI1yfVuAkTJNmCLspMrwKaAxG4fKpC9EQ+vtp0
Vi7q/Mx3BBtf3DUMeyuONFp9jzqpTkAggJcRiQJ0SiLoZKqlFgE8x/IZsGhXgRgM
LToreV3MjJwed9w6B8FvJiqa0eiCZkRgzoWyPu3uJXgisK0jz0Hmh8twuZ3oka7W
h0X8OS3lbabsVetBY9madHg1P3mQGxypN2hpHwpMIcDf04gXU5QcCXGg6ParGicW
lWWO7WonjPKnfw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:53 2026 by rpki-client