Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
File: PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft (raw, json)
Hash identifier: Baq+7pcQ6VMpXVDyIIgud4PZfSgSM3/HwWzgq9+LQ2A=
Subject key identifier: EC:AA:58:2D:52:51:0D:24:82:46:18:DE:8E:6D:AB:14:8C:CB:5D:00
Authority key identifier: 3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
Certificate issuer: /CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Certificate serial: 01A0E3996826AE6554687D1AB7A31A7AD3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
Manifest number: 0F92
Signing time: Sun 27 Sep 2026 16:01:16 +0000
Manifest this update: Sun 27 Sep 2026 16:01:16 +0000
Manifest next update: Mon 28 Sep 2026 16:01:16 +0000
Files and hashes: 1: PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl (hash: +Op6EwgFrqD0Ah6MrISsg2ulAq3K5Ckr6wCblkYKF5o=)
2: TLFiEoQRGLVMCGc46Mn0G99fC5U.roa (hash: gDFtNWXwzA45vosk76KSuCgqR0QSeN+bVcyur4756BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:68:26:ae:65:54:68:7d:1a:b7:a3:1a:7a:d3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Validity
Not Before: Sep 27 16:01:16 2026 GMT
Not After : Sep 28 16:01:16 2026 GMT
Subject: CN=ecaa582d52510d24824618de8e6dab148ccb5d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:e1:80:95:40:46:b6:c9:60:ec:ab:05:cd:
9a:64:7e:2f:45:a0:fe:c0:8d:9a:e4:05:64:f6:af:
41:df:96:71:4d:64:f0:13:75:23:7e:1c:52:0c:5c:
82:7f:3d:3b:fd:e5:83:d5:3a:72:46:d8:58:e9:1f:
43:a9:18:cc:f6:13:2c:35:d1:0a:5c:8b:0f:57:63:
76:a4:01:c8:59:5d:14:27:9f:72:a0:31:61:bc:e9:
7d:c9:e9:a7:ec:70:0e:6f:f3:75:a4:b1:51:d6:b5:
43:19:cf:28:35:e3:82:cf:3a:68:f9:17:2d:a1:88:
8a:20:19:5f:59:00:99:6f:a4:98:bc:57:0e:8d:9a:
d8:b0:c5:f6:6f:8f:20:8b:74:75:00:4f:c3:64:79:
c5:36:e2:b5:40:50:8f:ff:15:ea:9c:95:11:42:7c:
d8:dd:6a:99:2a:78:cc:c3:eb:c8:c2:a6:36:c3:75:
10:df:82:1e:a5:96:b9:5d:4f:76:4a:17:38:ae:70:
52:7c:c9:d5:07:e8:5d:4a:99:22:fb:35:f0:38:98:
8a:45:fb:b8:b9:aa:bc:24:1b:10:73:e0:c9:71:42:
dc:0c:08:c5:0e:37:df:eb:7b:3e:a0:e4:a7:34:f9:
5d:74:6d:5b:58:51:25:16:05:6a:23:76:d6:5b:fb:
55:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AA:58:2D:52:51:0D:24:82:46:18:DE:8E:6D:AB:14:8C:CB:5D:00
X509v3 Authority Key Identifier:
keyid:3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:cb:d7:1e:b0:ec:b0:e9:c7:27:f9:c8:a5:4b:e1:6f:05:52:
a8:3b:9d:29:e0:7b:45:e2:f3:63:30:fd:50:d3:c7:28:d9:6b:
de:fb:6e:a7:2c:ea:fd:23:90:5e:2d:70:1a:c4:e5:ab:3b:98:
e8:29:5b:30:50:cd:3c:7c:7b:df:5e:2d:fa:25:d2:98:3a:12:
4b:7c:e5:2f:0f:d3:b5:a0:d4:b1:33:88:fb:f6:68:d1:e2:ec:
1d:f7:6e:41:a7:1f:cd:8f:51:8c:08:88:3f:62:c3:3a:29:bc:
7b:0d:2f:7d:a0:07:44:da:6e:50:25:43:09:41:f8:20:9f:16:
c9:a2:20:7a:0c:d9:ee:17:66:ed:fc:16:4c:3d:87:50:e0:c4:
32:b4:d2:c5:ff:69:61:2a:79:c4:6b:9a:fd:70:40:96:fc:7f:
e1:28:73:36:a7:b3:df:3c:75:d8:9d:f1:bb:b5:c2:e7:bf:0e:
69:20:1a:47:de:48:5a:2b:c1:a6:b3:c0:0d:05:f2:d4:68:bc:
72:87:6a:6f:ca:13:54:f6:4a:a9:02:09:14:fb:17:f5:fb:54:
c3:2a:05:f3:8b:75:a9:2e:71:a1:75:ba:03:ea:eb:07:85:a3:
e1:8a:01:bf:7e:0e:54:07:a2:53:a4:be:44:06:ba:25:9d:f3:
dc:f4:5f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:58:17 2026 by rpki-client