Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier: uk51k5IwDkwTb3vR3gFNcJxbH8EmmRUU4kIY0jOkSPc=
Subject key identifier: A9:A1:B9:78:6E:81:37:8E:03:E2:E0:C7:58:0B:DA:10:41:3E:23:86
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial: 019E1EA2B0A65ADDCCC374A3E503C5BDCFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number: 14BD
Signing time: Wed 13 May 2026 00:00:38 +0000
Manifest this update: Wed 13 May 2026 00:00:38 +0000
Manifest next update: Thu 14 May 2026 00:00:38 +0000
Files and hashes: 1: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: DGVYaMQCI8tJKCjCZhgN/68auCShVBvmLnLyDa+Fa8M=)
2: RNcEVKn_YGokJaou-FFvGOIS8ag.roa (hash: +QqLk1UMMwGnBKT5dxNl032oE64z8hg1X5YrO9LqWdo=)
3: jG9EgXRBLGvOBo4GIXCZVUuSt2A.roa (hash: ulV9PXQSp7gV/2hgy8hXiIjeElHgC51tTqI2j2NsiPw=)
4: ry7mAo1iVDE-vQJVtpiChZag52A.roa (hash: /gsQ2B1v3KhCgm7kkq8lHyOWScapaf0eIQ7WAnTVr3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:b0:a6:5a:dd:cc:c3:74:a3:e5:03:c5:bd:cf:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Validity
Not Before: May 13 00:00:38 2026 GMT
Not After : May 14 00:00:38 2026 GMT
Subject: CN=a9a1b9786e81378e03e2e0c7580bda10413e2386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:b4:03:8b:46:21:5c:f0:6c:a7:97:18:29:
a0:2d:5b:0e:5f:23:e6:20:ac:05:8e:91:9f:7e:c7:
70:1c:7a:a9:1c:20:47:be:02:ca:dc:1e:b6:9b:10:
3d:83:81:ed:c0:14:a4:69:48:97:1c:7a:f8:fd:86:
c6:6f:4b:ef:6a:fc:8f:e9:a3:f7:90:72:89:72:6b:
fc:46:9a:68:11:1f:a7:f0:88:80:7e:45:cd:49:96:
d9:95:ee:17:29:30:89:71:73:19:25:eb:26:5c:b1:
4d:8f:91:e8:29:de:bd:6d:91:65:48:3f:52:9e:ad:
06:e0:e7:0e:e1:62:31:ec:eb:68:10:49:0f:bb:ac:
bb:ae:28:9b:5d:79:84:91:0f:2d:96:29:b6:ba:4f:
8e:5e:5c:48:7e:90:94:1e:5f:01:a4:89:dc:5a:40:
5d:e5:e0:47:a2:cf:49:66:db:e2:94:16:a2:4e:c4:
6f:d4:f9:44:57:9d:25:05:88:38:ef:a2:70:fa:9d:
d7:4b:b5:fe:e7:49:04:7d:3d:5d:99:e8:6b:c9:78:
5d:7e:76:be:8e:0f:9b:73:af:97:c2:e1:fa:4a:08:
a6:6b:d7:c8:e6:59:d9:92:f8:20:a3:ee:6e:c0:5e:
ba:ca:ea:8f:02:0d:66:fb:b4:b9:c4:ba:fe:23:4b:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A1:B9:78:6E:81:37:8E:03:E2:E0:C7:58:0B:DA:10:41:3E:23:86
X509v3 Authority Key Identifier:
keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:54:e7:43:bb:b8:d5:15:8a:aa:ed:f1:dd:78:29:f1:8e:67:
d8:df:a3:ce:e8:8a:9b:c0:27:c7:26:cb:ef:cd:40:27:79:31:
0b:7d:1c:0c:87:d0:d6:15:f8:ca:ac:22:6d:b6:f9:c2:03:8f:
d3:53:b6:ad:92:be:db:0c:d8:70:93:7e:f2:b9:40:3e:41:30:
60:bd:6c:ff:f0:9c:82:d6:aa:4f:87:04:ad:27:f8:b6:95:b8:
94:ec:5b:63:f5:84:cd:b9:15:f1:47:e4:70:f2:da:57:0d:db:
d6:64:cc:45:be:6c:67:31:d1:fd:85:ac:8f:69:6d:80:39:52:
95:d5:9d:a5:ef:f9:bb:78:5d:bd:2a:06:2e:65:1f:4b:ad:0d:
02:f5:19:9d:53:91:64:2f:14:59:a5:de:3c:28:85:f5:f6:bc:
80:94:cc:9f:a2:aa:c4:46:62:76:2c:16:e6:7c:83:bb:8e:d3:
21:09:f4:d1:3d:36:c8:de:e3:87:1d:78:f9:24:4f:92:fe:4d:
2e:88:bf:bf:a9:90:50:b3:1e:8f:c6:4c:c6:29:5f:28:bd:1d:
4e:5e:92:90:54:0b:cc:51:94:53:e7:1a:88:57:ad:88:c9:4d:
b3:c2:fb:64:2a:17:dc:e0:4a:6d:5b:3e:0c:43:80:d9:7d:dd:
89:c2:cc:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eorCmWt3Mw3Sj5QPFvc/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmM2JmNTExNzc0YjZlMWQ3MDZiYjI3MjdiM2QzMTI1Nzc1
YTkxMmYwHhcNMjYwNTEzMDAwMDM4WhcNMjYwNTE0MDAwMDM4WjAzMTEwLwYDVQQD
EyhhOWExYjk3ODZlODEzNzhlMDNlMmUwYzc1ODBiZGExMDQxM2UyMzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Qm0A4tGIVzwbKeXGCmgLVsOXyPm
IKwFjpGffsdwHHqpHCBHvgLK3B62mxA9g4HtwBSkaUiXHHr4/YbGb0vvavyP6aP3
kHKJcmv8RppoER+n8IiAfkXNSZbZle4XKTCJcXMZJesmXLFNj5HoKd69bZFlSD9S
nq0G4OcO4WIx7OtoEEkPu6y7riibXXmEkQ8tlim2uk+OXlxIfpCUHl8BpIncWkBd
5eBHos9JZtvilBaiTsRv1PlEV50lBYg476Jw+p3XS7X+50kEfT1dmehryXhdfna+
jg+bc6+XwuH6Sgima9fI5lnZkvggo+5uwF66yuqPAg1m+7S5xLr+I0vg8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmhuXhugTeOA+Lgx1gL2hBBPiOGMB8GA1UdIwQY
MBaAFD879RF3S24dcGuycns9MSV3WpEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWIt
YTBkNmRiZmFjNmViLzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWItYTBkNmRiZmFjNmVi
LzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlTnQ7u4
1RWKqu3x3Xgp8Y5n2N+jzuiKm8AnxybL781AJ3kxC30cDIfQ1hX4yqwibbb5wgOP
01O2rZK+2wzYcJN+8rlAPkEwYL1s//CcgtaqT4cErSf4tpW4lOxbY/WEzbkV8Ufk
cPLaVw3b1mTMRb5sZzHR/YWsj2ltgDlSldWdpe/5u3hdvSoGLmUfS60NAvUZnVOR
ZC8UWaXePCiF9fa8gJTMn6KqxEZidiwW5nyDu47TIQn00T02yN7jhx14+SRPkv5N
Loi/v6mQULMej8ZMxilfKL0dTl6SkFQLzFGUU+caiFetiMlNs8L7ZCoX3OBKbVs+
DEOA2X3dicLMdA==
-----END CERTIFICATE-----
Generated at Wed May 13 10:58:53 2026 by rpki-client