Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
File: pcUihESYJRJgyNqrvCxeGp6PNf4.mft (raw, json)
Hash identifier: xgEjwOi+2ELnH9EznfmTYGY6yybfSDWDZ5ycb2tv/DA=
Subject key identifier: 79:EF:FB:CC:6F:91:9F:24:23:39:18:0F:E8:DF:B0:A9:CF:C8:1B:63
Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Certificate serial: 019D3940EEDBF13E2882D771D8A3A25917E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
Manifest number: 0F46
Signing time: Sun 29 Mar 2026 11:00:49 +0000
Manifest this update: Sun 29 Mar 2026 11:00:49 +0000
Manifest next update: Mon 30 Mar 2026 11:00:49 +0000
Files and hashes: 1: O2hU27KH2d4j4F6MkJ9zQIyNQYw.roa (hash: egY9v9VhomtCqKUAhtFNXeEfGC4c0KX5IFzLFUNn2xY=)
2: pcUihESYJRJgyNqrvCxeGp6PNf4.crl (hash: /9Q9/DwL7VK4X528EWWHt7Bkw95lu8uhSk13zN5/Dqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ee:db:f1:3e:28:82:d7:71:d8:a3:a2:59:17:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Validity
Not Before: Mar 29 11:00:49 2026 GMT
Not After : Mar 30 11:00:49 2026 GMT
Subject: CN=79effbcc6f919f242339180fe8dfb0a9cfc81b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:03:d9:2e:80:b9:4f:dc:5d:64:65:8f:26:
5d:2e:ea:ef:0f:38:c6:04:36:5c:dd:a5:f1:7e:8e:
05:7b:0b:c7:24:c8:41:20:81:9f:86:b0:bb:13:96:
40:f4:5d:5e:6c:9f:0e:97:ae:68:46:46:f4:de:c9:
9f:15:80:cb:07:a3:50:88:bc:12:88:7f:81:78:8e:
e5:f3:3f:cd:0f:8f:81:e0:9b:1b:78:25:24:8e:15:
fb:34:38:03:29:7e:7d:ce:6e:48:32:fc:8f:8b:91:
d4:fa:b7:05:cf:38:d7:00:38:bf:b6:db:93:81:70:
c1:19:bc:5a:6d:9f:3a:da:2b:3f:83:ce:56:c2:9f:
3f:30:b3:02:ac:5b:f4:85:80:94:39:9d:3b:32:fb:
f7:8d:42:81:ac:a3:76:10:fa:bd:08:9e:ce:5b:70:
98:37:4c:e7:66:83:24:f0:81:8c:2d:9a:09:0b:18:
1c:d8:e1:e3:ea:4d:85:92:eb:df:9d:74:51:16:b3:
8f:3e:88:ca:1e:e9:70:58:6a:d7:ad:e9:02:f6:2e:
46:11:2b:06:7b:7c:fe:ee:4e:db:42:b9:44:2d:59:
e8:b1:f4:b0:33:2c:78:74:c8:6a:c3:15:92:58:5f:
e4:63:e8:77:99:20:10:7f:9e:29:9a:8c:73:a0:64:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EF:FB:CC:6F:91:9F:24:23:39:18:0F:E8:DF:B0:A9:CF:C8:1B:63
X509v3 Authority Key Identifier:
keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:cc:6a:27:fb:7b:e4:8f:e0:2d:18:23:0a:93:96:ea:c1:d3:
4f:6a:12:61:74:10:91:72:d9:5c:0a:75:e8:22:69:be:8e:7c:
b9:27:32:b3:ed:a0:d0:d5:c0:c2:59:94:19:36:c6:54:3e:68:
30:37:34:87:62:41:66:41:35:13:9c:7c:a6:c2:75:ae:a0:f8:
e1:ce:12:cd:6a:6f:44:70:24:d1:ce:54:24:ed:d9:82:8f:3e:
76:8b:d3:c3:f3:31:9f:3a:18:7f:29:1a:30:71:40:f0:03:b9:
d0:21:5f:f4:e4:f2:7d:80:90:36:ed:31:70:95:df:5d:ce:7f:
be:df:7c:30:c8:e8:b9:c2:d3:12:47:63:15:b7:ee:7e:ca:13:
e5:0b:9b:b4:ac:b8:73:00:25:31:96:37:a2:19:66:3c:bf:01:
ec:df:ab:0b:ee:1a:9d:6c:54:2e:87:77:30:92:64:06:4c:53:
62:b4:67:6c:dc:10:9f:d0:54:0b:2b:4c:7b:34:19:ae:30:64:
33:03:d2:b6:a4:65:38:c8:2d:73:34:1d:cf:81:d3:1a:8f:8e:
a2:9f:6d:68:0f:93:53:63:da:91:cc:cc:b6:42:aa:79:d4:3f:
e5:49:9a:6a:73:d1:6f:be:96:ff:d2:3f:ea:a6:4c:ca:06:c7:
a2:d9:7a:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QO7b8T4ogtdx2KOiWRflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzUyMjg0NDQ5ODI1MTI2MGM4ZGFhYmJjMmM1ZTFhOWU4
ZjM1ZmUwHhcNMjYwMzI5MTEwMDQ5WhcNMjYwMzMwMTEwMDQ5WjAzMTEwLwYDVQQD
Eyg3OWVmZmJjYzZmOTE5ZjI0MjMzOTE4MGZlOGRmYjBhOWNmYzgxYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/8D2S6AuU/cXWRljyZdLurvDzjG
BDZc3aXxfo4FewvHJMhBIIGfhrC7E5ZA9F1ebJ8Ol65oRkb03smfFYDLB6NQiLwS
iH+BeI7l8z/ND4+B4JsbeCUkjhX7NDgDKX59zm5IMvyPi5HU+rcFzzjXADi/ttuT
gXDBGbxabZ862is/g85Wwp8/MLMCrFv0hYCUOZ07Mvv3jUKBrKN2EPq9CJ7OW3CY
N0znZoMk8IGMLZoJCxgc2OHj6k2FkuvfnXRRFrOPPojKHulwWGrXrekC9i5GESsG
e3z+7k7bQrlELVnosfSwMyx4dMhqwxWSWF/kY+h3mSAQf54pmoxzoGQUAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnv+8xvkZ8kIzkYD+jfsKnPyBtjMB8GA1UdIwQY
MBaAFKXFIoREmCUSYMjaq7wsXhqejzX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNVaWhFU1lKUkpneU5xcnZDeGVHcDZQTmY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8yZWUyMjktNjhjNS00ZjhjLTgwN2Ut
NTQ4ZTdmMDI0MzE0LzEvcGNVaWhFU1lKUkpneU5xcnZDeGVHcDZQTmY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8yZWUyMjktNjhjNS00ZjhjLTgwN2UtNTQ4ZTdmMDI0MzE0
LzEvcGNVaWhFU1lKUkpneU5xcnZDeGVHcDZQTmY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscxqJ/t7
5I/gLRgjCpOW6sHTT2oSYXQQkXLZXAp16CJpvo58uScys+2g0NXAwlmUGTbGVD5o
MDc0h2JBZkE1E5x8psJ1rqD44c4SzWpvRHAk0c5UJO3Zgo8+dovTw/MxnzoYfyka
MHFA8AO50CFf9OTyfYCQNu0xcJXfXc5/vt98MMjoucLTEkdjFbfufsoT5QubtKy4
cwAlMZY3ohlmPL8B7N+rC+4anWxULod3MJJkBkxTYrRnbNwQn9BUCytMezQZrjBk
MwPStqRlOMgtczQdz4HTGo+Oop9taA+TU2PakczMtkKqedQ/5UmaanPRb76W/9I/
6qZMygbHotl68g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:38 2026 by rpki-client