Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
File: PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft (raw, json)
Hash identifier: NniDfjAPVKVRcpHObpIGAuS++/LYCWPBaC2dil3HJY8=
Subject key identifier: FE:79:A8:83:D1:74:79:BC:63:F3:F5:21:B0:E2:06:0F:BF:E9:83:E4
Authority key identifier: 3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
Certificate issuer: /CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Certificate serial: 019E20C89144A1635E69555B106F9B403592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
Manifest number: 0E24
Signing time: Wed 13 May 2026 10:01:15 +0000
Manifest this update: Wed 13 May 2026 10:01:15 +0000
Manifest next update: Thu 14 May 2026 10:01:15 +0000
Files and hashes: 1: PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl (hash: vf3kRwE7rGjM2B/87f0jjKefuTumOstOFwjqSMXrRWM=)
2: TLFiEoQRGLVMCGc46Mn0G99fC5U.roa (hash: gDFtNWXwzA45vosk76KSuCgqR0QSeN+bVcyur4756BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:91:44:a1:63:5e:69:55:5b:10:6f:9b:40:35:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Validity
Not Before: May 13 10:01:15 2026 GMT
Not After : May 14 10:01:15 2026 GMT
Subject: CN=fe79a883d17479bc63f3f521b0e2060fbfe983e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:42:b0:c7:63:90:4a:65:06:35:50:1a:1b:
e5:ef:3d:2a:25:8d:4a:a4:82:c5:4f:ce:17:95:c9:
49:85:ec:7a:2b:f8:7a:15:a1:a1:e0:56:8a:62:53:
c3:31:6d:9f:de:54:38:4c:67:b3:d9:07:f9:51:8b:
48:21:64:2b:f4:fc:93:ab:9d:4a:8b:4c:53:23:14:
06:f3:14:4a:b0:f4:37:19:0a:c6:d6:3d:c9:c2:7b:
ac:b0:05:d6:94:eb:3f:7c:fd:57:6a:78:13:97:94:
d5:c8:14:df:d9:3d:48:1a:99:aa:6e:54:73:ee:fe:
35:8e:b3:8f:c0:13:8e:d7:d5:31:cd:0a:f8:d7:97:
01:48:20:db:ba:6b:2a:d7:eb:6b:4b:4b:93:c8:8a:
33:80:13:50:33:90:2f:e4:b1:30:c9:b5:4e:e9:18:
07:18:74:b3:ba:6d:f1:89:9b:4a:e1:92:ef:75:ea:
57:74:af:d7:18:61:e5:c9:27:f2:20:db:65:41:39:
82:c5:ff:84:c3:b4:94:33:44:bd:e8:05:21:17:42:
36:7c:85:3a:49:ab:f1:41:9b:21:0b:0f:5c:ab:73:
36:e8:ee:8d:60:b1:d0:c2:d1:1c:30:ea:a9:0a:54:
dd:0a:fe:59:e5:6e:82:fb:21:ae:37:89:75:26:22:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:79:A8:83:D1:74:79:BC:63:F3:F5:21:B0:E2:06:0F:BF:E9:83:E4
X509v3 Authority Key Identifier:
keyid:3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ec:69:77:63:ef:a6:94:c6:76:9b:33:8a:d3:05:2e:84:58:
1b:06:22:7e:8e:dc:66:ab:92:45:85:23:fa:ee:9a:6b:2b:1a:
7e:e0:de:4a:7a:1d:66:5f:f5:b5:31:5a:a8:13:75:d4:54:78:
92:80:4d:52:29:b4:11:e6:29:7c:63:57:ed:16:f3:c1:1a:90:
5e:36:c9:df:17:08:1b:c1:4b:07:d1:0d:70:3e:d9:15:6f:54:
6e:de:9a:9d:c4:1a:91:8e:5d:f6:2d:68:13:12:33:57:66:76:
9c:ab:7d:fe:90:fb:34:2f:3a:12:c3:2c:f1:d1:51:a6:b5:79:
9c:a1:16:da:18:f5:b5:3a:e0:04:3b:fb:c3:be:01:43:b3:71:
f2:7c:0a:d7:c9:2a:d2:a0:a4:c8:87:d8:83:35:23:a6:57:66:
95:a2:cb:cc:82:6f:e6:fd:95:04:8e:ce:e5:f5:91:57:94:a2:
5b:e5:e3:18:a3:0a:fa:b7:1d:d0:f3:f8:14:da:fd:d1:06:de:
01:37:4a:3e:06:1a:a4:fb:f6:78:9a:26:2f:a8:08:a1:92:1d:
69:83:48:c9:09:62:51:0c:e7:d6:11:bf:2f:c4:f7:da:57:b5:
a9:d2:76:dc:33:ed:97:80:65:38:99:40:bb:bd:ab:64:73:e5:
03:0e:dc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:49:02 2026 by rpki-client