Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier: QmNQb0Yc0205qyoW1jzImlWjk5GxTev5QEqRbdkuQvk=
Subject key identifier: 23:87:FD:CA:45:B8:A5:13:2A:98:DB:02:78:BE:91:2F:81:F4:C5:A8
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial: 019F8F7F3FECBBE51334C07B8A51E1AC632C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number: 157C
Signing time: Thu 23 Jul 2026 15:01:48 +0000
Manifest this update: Thu 23 Jul 2026 15:01:48 +0000
Manifest next update: Fri 24 Jul 2026 15:01:48 +0000
Files and hashes: 1: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: dSkSw/u6djetei1vFo/xKzoLcFW8y8uCoI2SzJe4Bsg=)
2: RNcEVKn_YGokJaou-FFvGOIS8ag.roa (hash: +QqLk1UMMwGnBKT5dxNl032oE64z8hg1X5YrO9LqWdo=)
3: jG9EgXRBLGvOBo4GIXCZVUuSt2A.roa (hash: ulV9PXQSp7gV/2hgy8hXiIjeElHgC51tTqI2j2NsiPw=)
4: ry7mAo1iVDE-vQJVtpiChZag52A.roa (hash: /gsQ2B1v3KhCgm7kkq8lHyOWScapaf0eIQ7WAnTVr3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:3f:ec:bb:e5:13:34:c0:7b:8a:51:e1:ac:63:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Validity
Not Before: Jul 23 15:01:48 2026 GMT
Not After : Jul 24 15:01:48 2026 GMT
Subject: CN=2387fdca45b8a5132a98db0278be912f81f4c5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:5f:34:5a:ef:85:27:5e:ce:48:e0:63:3e:
c4:7a:f3:79:ca:70:b4:ca:17:48:88:10:4d:fd:66:
e3:a9:0c:95:ff:b3:df:4c:c8:ee:46:a8:8f:72:80:
e8:89:c9:ef:e5:b7:ae:d0:ac:c1:f5:fa:cc:22:4d:
43:99:32:85:99:22:cc:c3:5a:dc:00:0b:e6:92:d8:
ac:0b:ea:4e:be:44:5f:d7:5a:9a:b4:92:e7:a8:d2:
f3:e4:f9:e5:0a:b5:57:77:62:d3:12:0b:ee:f1:b8:
06:58:bd:8c:6e:1e:96:5f:7d:d6:60:bc:46:38:c0:
52:84:18:9a:b5:d6:b3:f5:09:82:29:25:d1:b7:92:
ad:18:5d:d1:36:fb:ac:ba:0b:3a:52:9c:d2:6a:c4:
c6:36:3a:35:15:1a:b1:32:e2:94:b1:d3:64:16:91:
54:49:4d:8e:bf:1f:56:73:44:aa:7c:5b:f6:ec:b2:
91:65:eb:98:7d:4c:00:fd:3f:43:0a:ad:2e:52:c6:
e9:8e:05:c3:6d:d0:ff:4f:97:f7:a3:0c:eb:d9:1b:
17:f9:6b:ec:e9:f6:ef:fd:e7:61:e0:4d:20:91:0c:
6a:a0:62:7c:ba:2b:4d:b5:ab:a2:77:e3:4e:61:99:
a6:41:88:b9:c3:ca:be:3b:b9:32:60:60:8b:4a:43:
48:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:87:FD:CA:45:B8:A5:13:2A:98:DB:02:78:BE:91:2F:81:F4:C5:A8
X509v3 Authority Key Identifier:
keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:04:a6:38:3d:c0:14:56:6c:5a:4e:5b:6d:46:63:b4:2d:81:
d1:2d:15:ba:8f:4c:45:53:e7:de:e3:05:2c:73:de:7c:7a:2a:
8d:54:77:3a:76:88:0d:e9:33:55:0c:98:6c:b0:e1:08:dc:8b:
f1:55:1a:3f:ce:e9:b2:0b:bb:7c:6f:82:6d:20:30:16:43:8e:
a5:4c:d8:fb:df:8f:3c:a9:6d:d3:b1:12:9f:17:f5:11:f0:16:
a6:6a:59:a3:69:ad:91:33:ca:fe:9e:78:10:9b:5b:4f:3d:cd:
6c:dd:c4:65:95:3a:48:fa:30:5c:b0:80:15:48:b7:3b:3d:87:
5f:02:68:2e:7b:ba:a7:ae:4f:85:48:cd:b9:7e:ea:24:e4:9c:
86:f4:5b:5a:eb:5d:a2:d1:4b:7f:bc:c5:66:e2:3c:bd:1b:a4:
3d:9e:31:63:da:69:be:29:2d:1b:0e:b0:21:84:12:d1:e0:37:
9a:4d:b2:e1:15:e3:86:52:6a:6b:e1:db:11:e1:9b:55:b0:93:
c4:07:2f:f5:ca:c9:f9:6b:cc:ce:e6:ac:b5:a6:49:2a:fd:37:
d7:f0:40:e5:af:e1:5b:42:d2:22:0a:dc:c9:79:57:cc:fd:1d:
3a:22:60:24:e9:04:bd:06:20:4b:5b:56:54:ce:05:dc:b9:23:
14:86:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:48:13 2026 by rpki-client