Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
File: PYAS-hSs56DDvS6C4KKdmkS_4pA.mft (raw, json)
Hash identifier: XVCkkp9ZwaV6TtiuI5H1a0ujhkGHLV8fuX7n+KoMWQc=
Subject key identifier: 21:17:64:A0:DB:C5:14:C5:1C:88:8E:36:98:D9:E7:B3:3E:EB:88:E4
Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Certificate issuer: /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Certificate serial: 019D296077BE3506D0261FB30BC05A4C7BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 09:01:21 +0000
Manifest this update: Thu 26 Mar 2026 09:01:21 +0000
Manifest next update: Fri 27 Mar 2026 09:01:21 +0000
Files and hashes: 1: HR-RlvhPR2KFSwj8wKhoiIZcdOs.roa (hash: jF+Fcte6nQCVsXtXgwFb6S4rPJtc/cAAhfv54qZplv4=)
2: PYAS-hSs56DDvS6C4KKdmkS_4pA.crl (hash: 8vjSvG9xA4mq32xvcMe2M5feyOWJ9Nhk25mNhvRw/20=)
3: mY6-iJVYtOGt8motX-SIkcdCctg.roa (hash: g7aaLtcj929tsJ1uCBWQclwxC5qJbCwyOT5p5cGl43U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:77:be:35:06:d0:26:1f:b3:0b:c0:5a:4c:7b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Validity
Not Before: Mar 26 09:01:21 2026 GMT
Not After : Mar 27 09:01:21 2026 GMT
Subject: CN=211764a0dbc514c51c888e3698d9e7b33eeb88e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:fb:34:8d:9e:63:f5:95:ec:fb:e9:a7:84:
7d:f8:56:40:9b:6c:2b:5b:19:fc:4c:0b:fe:2e:7f:
2c:28:5d:43:0b:ae:24:37:3b:8b:66:f8:e1:5e:03:
c6:8b:bb:60:6a:a6:64:02:57:44:45:7a:a3:18:56:
77:df:43:87:62:12:0e:a7:e2:19:f2:9d:e1:4d:fb:
c2:64:a4:93:48:bb:59:f8:ca:7e:b9:78:5e:ec:2a:
a3:be:d1:93:4f:fb:95:18:c6:bc:95:1d:e1:26:c7:
95:73:88:fa:ee:35:f6:a7:2d:da:77:1f:d2:c2:03:
5d:35:74:42:d7:ef:fc:7d:c8:fc:2f:2a:c8:9d:fa:
60:ca:12:9f:5a:63:c1:fd:79:dd:bb:a1:d8:85:60:
ac:6a:d3:d3:ce:93:f1:e4:d1:79:c4:51:98:9f:7d:
46:72:ea:dd:aa:82:92:17:17:c3:0d:d1:a7:2f:2e:
b3:5c:14:3d:f1:12:0f:a5:6e:f0:9b:16:11:44:72:
11:b2:7b:4f:de:8c:d6:ea:32:80:bc:2a:e3:fa:ee:
f7:e6:fd:14:3d:7e:25:f9:71:6f:3e:f0:02:34:48:
0a:01:94:2c:e1:6d:b7:6c:be:6b:a5:bd:80:c8:fc:
b2:10:ef:7d:58:7c:74:6a:e9:fb:92:7e:25:42:0b:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:17:64:A0:DB:C5:14:C5:1C:88:8E:36:98:D9:E7:B3:3E:EB:88:E4
X509v3 Authority Key Identifier:
keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ad:a7:b7:86:d5:ad:a1:d4:71:b9:1f:82:61:3f:93:df:f2:
f5:8f:0f:a0:a6:07:11:04:89:a9:30:6a:56:1b:a3:95:44:31:
80:53:2e:8e:32:a0:3f:be:21:d9:f6:ed:ca:81:cf:e3:b7:d3:
ec:7f:7c:8f:d3:1f:28:b0:ed:c8:73:a8:48:db:61:95:9c:f9:
31:b9:27:5f:09:09:b6:e7:38:e3:db:d2:71:ba:85:d5:a9:50:
c1:0e:94:ce:36:39:c5:0c:65:29:9f:9d:41:c5:e1:8a:74:3c:
7f:68:66:ef:40:70:8d:36:a3:fb:52:3c:3d:8f:2b:7d:18:9b:
34:02:c9:96:e5:da:5a:04:82:cf:98:5e:5e:a9:ca:49:01:f1:
54:0a:af:2d:51:db:1c:af:20:bd:de:09:10:52:16:cf:ba:23:
4b:33:eb:d1:05:67:03:88:8c:07:fc:4d:c7:b3:14:46:27:dc:
66:13:e7:41:63:c0:a7:26:ec:7e:1e:5e:7c:97:af:7c:f2:aa:
15:98:53:77:03:17:9b:c0:6d:eb:10:1d:a0:14:e1:58:6e:4d:
ea:01:b4:5f:f2:5d:44:6c:47:49:ff:8c:d0:27:03:94:c4:07:
66:48:2b:d4:6e:a8:69:65:e2:e0:24:e2:06:a0:1d:e0:9d:96:
f4:6c:e2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:51:41 2026 by rpki-client