Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier: nz399Sc+cDfJDDfrocGYz9IxofyQxl+VTq7gYT40mp8=
Subject key identifier: 4B:68:89:E3:A8:91:DE:C8:FC:C8:53:8E:A0:42:57:B0:0C:EC:37:4E
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial: 019D2960B597509B5E7F5029B622C4D6833F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number: 143E
Signing time: Thu 26 Mar 2026 09:01:36 +0000
Manifest this update: Thu 26 Mar 2026 09:01:36 +0000
Manifest next update: Fri 27 Mar 2026 09:01:36 +0000
Files and hashes: 1: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: uK1wt/3uyruiJTiUhYuY2V8sIwQLMKMw5J1Js+hqNcQ=)
2: RNcEVKn_YGokJaou-FFvGOIS8ag.roa (hash: +QqLk1UMMwGnBKT5dxNl032oE64z8hg1X5YrO9LqWdo=)
3: jG9EgXRBLGvOBo4GIXCZVUuSt2A.roa (hash: ulV9PXQSp7gV/2hgy8hXiIjeElHgC51tTqI2j2NsiPw=)
4: ry7mAo1iVDE-vQJVtpiChZag52A.roa (hash: /gsQ2B1v3KhCgm7kkq8lHyOWScapaf0eIQ7WAnTVr3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b5:97:50:9b:5e:7f:50:29:b6:22:c4:d6:83:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Validity
Not Before: Mar 26 09:01:36 2026 GMT
Not After : Mar 27 09:01:36 2026 GMT
Subject: CN=4b6889e3a891dec8fcc8538ea04257b00cec374e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fb:04:57:0e:20:d7:5c:2b:07:b2:72:47:61:
93:19:3e:e5:20:14:f8:0e:c1:a5:b4:7d:16:71:4e:
99:7d:1c:99:ec:80:99:63:9c:70:79:e2:d4:46:41:
b1:1f:ff:ee:8a:e4:00:a7:ff:5d:8e:23:c2:93:bf:
87:17:df:1a:c9:da:b9:61:a5:a2:7d:7c:c0:49:51:
1a:c1:5c:d8:e2:73:d1:7d:0d:a1:62:88:59:b0:1a:
b9:96:42:f9:97:7e:4e:23:81:13:07:6c:b8:e3:1c:
e4:3e:74:5e:4b:96:9f:61:13:93:c5:82:d2:55:60:
70:d8:b2:e3:33:ca:43:a9:d8:eb:1a:64:c2:12:4c:
b2:28:50:03:02:c2:f3:ee:d3:6d:ec:c0:44:74:a4:
5e:8d:16:b2:75:46:91:86:96:e0:fb:b8:0a:ea:54:
15:5d:d5:a9:eb:65:a7:95:f0:54:5b:5e:69:90:f8:
6f:28:01:65:ab:dd:2d:59:23:58:24:2b:9d:c6:a2:
88:3f:a6:b0:74:50:cb:28:3d:d5:c0:37:57:19:ad:
83:1f:cd:5b:84:2e:f2:f6:e1:35:5b:24:f7:7d:9f:
ba:2d:a4:8a:c1:c9:f4:58:58:93:b3:e7:ca:d3:62:
3e:56:89:41:a2:32:d0:23:71:03:56:a1:c3:0b:5a:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:68:89:E3:A8:91:DE:C8:FC:C8:53:8E:A0:42:57:B0:0C:EC:37:4E
X509v3 Authority Key Identifier:
keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:99:22:12:91:d9:72:bd:f5:d3:b2:98:fb:28:59:e2:ce:8c:
ef:3f:88:ed:d9:f9:b3:c8:c2:cc:94:18:f8:1b:ea:31:7a:dc:
a6:9a:e6:4f:bf:a8:1a:26:83:ad:b2:96:fd:cd:3a:5f:86:50:
50:8f:1b:b0:e0:35:77:6d:f1:a4:5f:65:38:38:b5:61:98:9c:
9b:e1:e8:df:7a:6b:ec:21:6f:dc:6e:98:fb:ae:81:7b:1a:b4:
2f:11:56:86:9b:2b:6f:de:66:06:13:f0:d1:db:0f:46:06:5f:
e7:d2:5a:36:0c:98:85:18:4c:c3:23:02:58:ec:0b:d6:53:90:
3a:78:87:84:a6:af:d3:7d:32:df:51:5a:80:f8:09:0f:bd:70:
b8:15:f0:93:f6:32:08:60:5d:b8:76:b0:d3:bc:71:c7:a2:a5:
1c:76:12:e6:0e:6a:6f:9a:90:73:bb:3c:6c:8a:a4:6f:aa:37:
55:26:b2:8c:d4:ff:0b:ce:9b:ea:fe:19:5d:4c:3f:e1:43:f1:
fb:5e:42:fd:4e:28:2f:ab:06:12:1d:ce:33:15:48:3e:68:74:
97:2a:b8:72:f9:a9:83:52:59:54:b4:10:9d:12:4f:24:a7:d0:
ff:c4:e5:70:6f:50:df:9b:8f:af:3f:e4:81:e1:f2:8b:d5:17:
d8:5b:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:43 2026 by rpki-client