Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: m2oqjJwCWGa5fm/iYIeSPLzNrHn7WYPbhoWTK17JrG4=
Subject key identifier: 21:CC:B9:BE:7D:50:87:AB:12:74:33:2E:DB:95:1B:44:F3:B4:27:07
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 019D265FA78926D1FFFE4AD53A40F6B080F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 1325
Signing time: Wed 25 Mar 2026 19:01:36 +0000
Manifest this update: Wed 25 Mar 2026 19:01:36 +0000
Manifest next update: Thu 26 Mar 2026 19:01:36 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: UFK9b9zNvDjzXpa+tuYRnTWJIzdC2hDLkUZpo93XHmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a7:89:26:d1:ff:fe:4a:d5:3a:40:f6:b0:80:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Mar 25 19:01:36 2026 GMT
Not After : Mar 26 19:01:36 2026 GMT
Subject: CN=21ccb9be7d5087ab1274332edb951b44f3b42707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:d4:9a:50:58:92:81:40:be:4f:a2:e7:73:
45:a6:8d:e4:90:84:76:a0:d3:96:29:56:6b:df:5a:
55:ec:52:b1:a3:1c:71:84:08:22:58:31:ab:fd:13:
f6:e1:78:48:de:18:2a:09:10:28:57:ab:77:1d:b6:
4c:77:9d:19:12:14:5b:a9:fc:a8:17:0b:a9:2d:cf:
c4:64:37:6f:7f:21:7f:6b:ca:9c:aa:20:7c:e8:95:
d8:27:1e:ba:50:a5:82:95:52:d6:e8:c4:90:f2:99:
87:99:9e:7e:11:c5:08:d1:20:69:d0:d3:e5:fe:4d:
65:b6:16:06:df:06:86:f8:f1:7e:5c:73:8d:a7:42:
84:16:08:cc:23:bc:75:f0:dd:8c:77:45:90:b5:f4:
b3:b4:d0:c0:a5:94:09:e6:e9:cb:ae:f9:84:8d:6c:
5a:97:cc:d7:48:36:e5:98:46:2f:c4:58:e4:dd:d1:
49:aa:48:8b:d2:13:35:15:c3:91:0a:f1:61:d7:1c:
5b:0c:44:ba:00:a0:52:80:f3:1f:64:d2:85:bf:68:
72:b2:df:80:3a:2d:cb:50:8d:1e:c2:a0:77:14:52:
2c:3b:72:26:c5:be:a1:41:71:03:9a:f8:ce:58:be:
aa:a3:3d:f4:3d:a1:15:25:e0:3e:7b:d4:94:9c:2d:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CC:B9:BE:7D:50:87:AB:12:74:33:2E:DB:95:1B:44:F3:B4:27:07
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:65:d4:c4:9e:87:df:01:24:35:1c:0b:a4:ef:bd:31:4b:79:
e2:4b:75:85:dd:72:d7:e0:a8:6e:b3:2d:58:56:16:8c:0e:fb:
06:d6:6c:d4:a7:e4:33:d3:48:9c:67:bb:7f:3f:03:93:73:0b:
3f:1e:0e:0a:4f:74:3e:bb:e8:52:8f:50:d1:1e:1d:53:c3:35:
4b:ff:fb:45:f0:01:e7:51:a8:ac:9e:d1:b0:e2:a5:4d:e3:77:
ee:30:8d:11:69:1d:a3:24:7a:99:ad:10:67:a2:20:74:17:90:
65:ac:dd:bb:e3:c8:e3:40:c9:d3:73:fa:5a:f4:5d:2d:09:8f:
9c:e5:18:65:6b:73:d0:71:74:1e:52:8b:88:c0:2b:74:96:99:
eb:5b:15:8f:58:23:39:e9:32:d2:68:b4:29:05:4c:c3:b3:50:
01:29:e5:aa:66:60:e4:1b:34:f6:e8:0e:3e:59:b4:ce:61:d8:
ed:49:dc:07:a7:a3:41:e2:e1:b9:cd:b6:1d:9f:57:b5:6f:6f:
6d:44:4e:3a:bb:75:c8:65:25:07:d8:1c:79:02:b3:68:e0:e8:
be:e9:5b:47:fc:55:fe:b4:ab:ed:ba:51:43:14:95:ba:2d:04:
ea:80:0e:00:af:9e:57:e4:e0:57:cb:e5:a6:ad:84:b8:6f:5e:
fa:19:e5:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX6eJJtH//krVOkD2sID5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMzdjOTRhOTZjNDhmY2Y4NDEyOGU4NDdhZTkwMjBkNmJj
NjYzMDQwHhcNMjYwMzI1MTkwMTM2WhcNMjYwMzI2MTkwMTM2WjAzMTEwLwYDVQQD
EygyMWNjYjliZTdkNTA4N2FiMTI3NDMzMmVkYjk1MWI0NGYzYjQyNzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/bUmlBYkoFAvk+i53NFpo3kkIR2
oNOWKVZr31pV7FKxoxxxhAgiWDGr/RP24XhI3hgqCRAoV6t3HbZMd50ZEhRbqfyo
FwupLc/EZDdvfyF/a8qcqiB86JXYJx66UKWClVLW6MSQ8pmHmZ5+EcUI0SBp0NPl
/k1lthYG3waG+PF+XHONp0KEFgjMI7x18N2Md0WQtfSztNDApZQJ5unLrvmEjWxa
l8zXSDblmEYvxFjk3dFJqkiL0hM1FcORCvFh1xxbDES6AKBSgPMfZNKFv2hyst+A
Oi3LUI0ewqB3FFIsO3Imxb6hQXEDmvjOWL6qoz30PaEVJeA+e9SUnC0CjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHMub59UIerEnQzLtuVG0TztCcHMB8GA1UdIwQY
MBaAFD83yUqWxI/PhBKOhHrpAg1rxmMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zNWE5YmMtYjE0Mi00NDVmLTgxZTct
ZWY5OTBjNThiNDhiLzEvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zNWE5YmMtYjE0Mi00NDVmLTgxZTctZWY5OTBjNThiNDhi
LzEvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2XUxJ6H
3wEkNRwLpO+9MUt54kt1hd1y1+CobrMtWFYWjA77BtZs1KfkM9NInGe7fz8Dk3ML
Px4OCk90PrvoUo9Q0R4dU8M1S//7RfAB51GorJ7RsOKlTeN37jCNEWkdoyR6ma0Q
Z6IgdBeQZazdu+PI40DJ03P6WvRdLQmPnOUYZWtz0HF0HlKLiMArdJaZ61sVj1gj
Oeky0mi0KQVMw7NQASnlqmZg5Bs09ugOPlm0zmHY7UncB6ejQeLhuc22HZ9XtW9v
bUROOrt1yGUlB9gceQKzaODovulbR/xV/rSr7bpRQxSVui0E6oAOAK+eV+TgV8vl
pq2EuG9e+hnl7A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:48 2026 by rpki-client