Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: AP18Lm9KfvY19B+baSC72Y0cER4Od/dnPGZmnhr29+A=
Subject key identifier: 17:F5:64:D4:83:F6:12:58:78:13:D2:76:4C:6E:E8:83:D8:7C:08:7C
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 01A1569D1608835515E414B78FB7F7EFE93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 1AB3
Signing time: Tue 20 Oct 2026 00:01:37 +0000
Manifest this update: Tue 20 Oct 2026 00:01:37 +0000
Manifest next update: Wed 21 Oct 2026 00:01:37 +0000
Files and hashes: 1: 0ZH3kxew36RRFzQg_mo4-7q2H4U.roa (hash: k3MKGbvdmLnbLs9zehodMhvSl8HPr3KY+BJ978CUfo8=)
2: AydP7XNvWxhhDMLSuOqc0Oa5dE0.roa (hash: jUVgcjRvFoEADtpRITq72Z8KeRsnl4848PEL4Me2SIw=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: WruCoZCPnjvT5RFReFO4FZAPBOLVkP8gu2Wq+wDEVWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:9d:16:08:83:55:15:e4:14:b7:8f:b7:f7:ef:e9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Oct 20 00:01:37 2026 GMT
Not After : Oct 21 00:01:37 2026 GMT
Subject: CN=17f564d483f612587813d2764c6ee883d87c087c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:14:c2:93:f9:a3:32:01:92:7f:06:10:da:08:
31:1c:5c:e4:7f:6e:c9:52:81:22:56:23:c4:12:ba:
b5:7b:5a:39:ca:6e:4c:2e:35:4e:a0:a6:36:68:5c:
cc:99:09:d9:b7:42:e1:5c:1b:15:15:8c:ee:05:30:
88:63:b7:e1:d3:cb:9f:86:b5:23:62:db:d3:a2:74:
9a:53:e6:d5:14:db:98:6b:6d:7f:31:1b:8c:2e:9b:
c8:57:17:4a:9a:44:71:1c:78:c1:67:b2:25:eb:83:
63:0c:0a:1e:6f:f5:9d:67:b5:1b:61:94:c2:35:d0:
fb:5a:97:97:1d:a1:cc:cf:2f:7c:fa:e5:e3:7d:4f:
28:f2:34:a4:72:71:26:be:5a:8c:72:db:e7:9d:19:
10:de:6d:90:83:23:5b:71:af:7b:d6:57:67:3c:bc:
18:88:14:ed:a3:d5:7a:fe:8f:f3:82:26:fd:ce:a9:
70:75:44:58:ab:d7:57:f0:96:6a:5e:fb:22:7b:d4:
aa:17:0b:92:7f:eb:a8:6f:d6:a7:8f:86:52:78:c9:
cf:ba:55:5a:c0:d2:86:ac:7d:f0:3f:d0:69:d9:19:
32:dd:c8:e0:fa:b9:3f:50:22:08:2f:46:72:9b:b7:
dc:2f:56:f4:56:86:75:d9:54:8f:4c:17:75:10:f5:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F5:64:D4:83:F6:12:58:78:13:D2:76:4C:6E:E8:83:D8:7C:08:7C
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f2:f7:7a:c2:a1:1d:87:6a:3e:5a:91:7f:b7:a2:79:d5:87:
ad:1f:cb:0e:20:33:2e:13:ab:1f:ee:df:2c:c1:6d:fa:1a:ad:
b3:a8:e8:3f:84:fd:72:7c:f5:84:6a:01:1e:e1:de:b2:26:ed:
e1:8b:06:8a:2f:60:82:af:ce:c8:01:4a:fb:86:b3:67:63:51:
5e:43:10:85:c9:af:e4:6d:47:81:bf:12:16:6b:f2:14:07:89:
44:dc:42:68:c9:f1:26:42:75:26:44:77:fa:a0:a3:dd:cf:80:
a6:38:a8:aa:31:85:9f:90:25:ec:77:48:50:c9:b4:5e:31:44:
f0:97:f4:ca:93:1a:9e:dc:58:c9:c2:52:a4:9b:6f:ce:d6:72:
5b:77:7e:35:51:7b:13:5b:fd:61:ce:3b:e3:78:01:a4:6d:9d:
5c:67:75:a8:5a:24:b1:83:8a:13:c3:03:f7:f5:b4:d4:a8:dd:
5e:82:07:69:92:b0:71:d7:e3:97:c9:92:88:21:4d:e2:73:ef:
54:ab:62:37:94:43:76:82:0a:60:d5:9a:49:7e:d7:15:16:ce:
ae:b8:7e:f5:7f:e2:d8:da:4e:e2:5a:f9:e8:d4:78:13:00:c7:
27:8e:a9:3a:c9:53:d0:fa:6b:7e:99:a8:07:eb:74:9c:4a:12:
55:b6:5f:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFWnRYIg1UV5BS3j7f37+k8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNTY4YzU5ZDdhODMxOTljM2E3OWVhMGU4Mzc1Yjk0NmVk
ODg0ZTIwHhcNMjYxMDIwMDAwMTM3WhcNMjYxMDIxMDAwMTM3WjAzMTEwLwYDVQQD
EygxN2Y1NjRkNDgzZjYxMjU4NzgxM2QyNzY0YzZlZTg4M2Q4N2MwODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRTCk/mjMgGSfwYQ2ggxHFzkf27J
UoEiViPEErq1e1o5ym5MLjVOoKY2aFzMmQnZt0LhXBsVFYzuBTCIY7fh08ufhrUj
YtvTonSaU+bVFNuYa21/MRuMLpvIVxdKmkRxHHjBZ7Il64NjDAoeb/WdZ7UbYZTC
NdD7WpeXHaHMzy98+uXjfU8o8jSkcnEmvlqMctvnnRkQ3m2QgyNbca971ldnPLwY
iBTto9V6/o/zgib9zqlwdURYq9dX8JZqXvsie9SqFwuSf+uob9anj4ZSeMnPulVa
wNKGrH3wP9Bp2Rky3cjg+rk/UCIIL0Zym7fcL1b0VoZ12VSPTBd1EPXOPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBf1ZNSD9hJYeBPSdkxu6IPYfAh8MB8GA1UdIwQY
MBaAFDxWjFnXqDGZw6eeoOg3W5Ru2ITiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82ZjM2YzItZDA1Yy00NDI1LWE5ZTQt
NWUzN2U3ZjNmMTVkLzEvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82ZjM2YzItZDA1Yy00NDI1LWE5ZTQtNWUzN2U3ZjNmMTVk
LzEvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/L3esKh
HYdqPlqRf7eiedWHrR/LDiAzLhOrH+7fLMFt+hqts6joP4T9cnz1hGoBHuHesibt
4YsGii9ggq/OyAFK+4azZ2NRXkMQhcmv5G1Hgb8SFmvyFAeJRNxCaMnxJkJ1JkR3
+qCj3c+ApjioqjGFn5Al7HdIUMm0XjFE8Jf0ypMantxYycJSpJtvztZyW3d+NVF7
E1v9Yc4743gBpG2dXGd1qFoksYOKE8MD9/W01KjdXoIHaZKwcdfjl8mSiCFN4nPv
VKtiN5RDdoIKYNWaSX7XFRbOrrh+9X/i2NpO4lr56NR4EwDHJ46pOslT0Pprfpmo
B+t0nEoSVbZfqA==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:23:03 2026 by rpki-client