Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
File: PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json)
Hash identifier: s3HvFvKUACuoeDrmBOoJFnbEnzDIdr/PZurCHyijNaQ=
Subject key identifier: B0:D4:1C:3B:7F:3B:7F:F3:B9:E0:DC:A6:CA:91:49:9A:EF:6F:EE:16
Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Certificate serial: 019D2583E786508F9207FDC4C27FEEB07DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
Manifest number: 1175
Signing time: Wed 25 Mar 2026 15:01:34 +0000
Manifest this update: Wed 25 Mar 2026 15:01:34 +0000
Manifest next update: Thu 26 Mar 2026 15:01:34 +0000
Files and hashes: 1: 3I6LNJN6PPsiFBXmOu2FHBnIjRw.roa (hash: 7S75Cr0RAlxkkgtmqpz1YNkkzHYPGceCTqlkYTBVOv4=)
2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: crDDxwKqQHXCYwrwG18ThSOa5+E7gyg/DjDsgcBThY0=)
3: RHL3XX7_eL5Sd7PtgFRm8c0mqx8.roa (hash: iXzaXbJN/wQTFbRM2yp/OOeZq8dsLS6ERqyx8upKLQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:e7:86:50:8f:92:07:fd:c4:c2:7f:ee:b0:7d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Validity
Not Before: Mar 25 15:01:34 2026 GMT
Not After : Mar 26 15:01:34 2026 GMT
Subject: CN=b0d41c3b7f3b7ff3b9e0dca6ca91499aef6fee16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:eb:d2:8e:c1:db:57:f0:c9:94:54:c0:23:
de:f5:76:91:b0:86:d2:0f:ff:11:fe:a5:ae:1e:4d:
20:c7:2b:0c:56:7b:3b:39:5b:bb:c5:1b:71:0b:e1:
18:da:3e:93:58:dd:e8:97:bb:9e:3c:f0:90:ec:1f:
c3:60:72:dd:c2:ef:00:5b:2b:e2:0c:45:ed:f9:de:
b1:7c:30:72:cc:68:db:66:31:4b:b1:46:92:e4:19:
31:4f:70:48:b0:f7:36:76:4d:06:30:57:73:46:b6:
5e:60:fe:db:62:5a:2c:f7:50:b2:0a:ca:f5:33:58:
da:43:ac:6e:c5:65:f6:64:77:49:24:4e:8c:a0:20:
e2:ff:10:b9:51:df:ca:55:33:71:3b:33:a2:c5:80:
2d:11:1b:df:7f:27:d0:bd:0a:d7:d0:90:03:02:14:
a9:82:e6:7d:3a:7d:cd:01:fa:64:8a:ba:28:de:e4:
15:d4:2e:35:22:77:92:5e:2f:36:02:28:b0:ab:53:
64:a8:58:b2:02:a2:9e:37:d0:21:07:c4:c1:a1:5e:
9b:ec:e3:56:05:cd:e2:fd:ff:36:d4:84:34:94:db:
7a:0c:02:2f:03:28:45:51:13:bb:ab:0b:30:a7:fe:
47:ac:dd:34:12:3f:f0:8f:28:98:40:14:bd:24:83:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D4:1C:3B:7F:3B:7F:F3:B9:E0:DC:A6:CA:91:49:9A:EF:6F:EE:16
X509v3 Authority Key Identifier:
keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:0a:bd:b1:ff:25:00:43:75:52:80:a0:25:6c:84:0d:4a:cf:
55:e8:54:0c:44:a0:fb:9d:8a:a7:d7:5e:32:71:11:79:23:4d:
dd:d7:53:4d:5e:23:a9:80:4a:84:7e:67:a7:7a:d2:6b:31:5d:
da:7a:a6:8c:ce:33:38:31:bc:bc:4e:ab:b6:af:a0:49:63:73:
c9:c4:9c:41:66:f2:88:32:20:a7:3e:d7:93:af:6c:42:ae:7f:
3e:71:ff:0b:79:ec:c1:d4:ef:bb:da:1a:ea:10:a7:d1:2c:c0:
cf:e7:6d:1d:43:41:ab:d2:27:bf:c4:7b:ae:cc:88:d7:92:bc:
24:b9:c9:30:79:e4:8c:a7:6a:a7:6c:e8:fc:34:4a:c7:44:68:
54:30:bb:28:f6:4a:5b:1d:7b:37:6b:ef:1e:78:83:90:fe:14:
38:4d:26:83:ba:55:21:74:04:ee:65:a8:ee:2b:29:9d:8b:20:
17:86:39:61:63:d2:42:57:f1:ef:e5:5d:c1:f3:48:9e:d7:47:
e7:6e:60:88:fe:2c:d2:85:18:27:53:f3:76:8e:48:bc:8b:a4:
42:3d:1e:4b:b0:76:d5:73:e9:5a:b4:00:73:6a:0d:88:d8:11:
b6:ed:b8:9c:b4:82:9f:ec:3b:46:16:cd:60:fa:f4:7e:7c:43:
f2:3e:89:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:26 2026 by rpki-client