Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json)
Hash identifier: CTx6T0Qn/EXBKrfeTOZ30wqv3wTDbpMEefLfyfehzX8=
Subject key identifier: AD:71:7C:8A:5B:FB:83:13:A7:BD:2C:69:0B:55:AD:17:B5:BD:5F:43
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 019D265FA5B4B82B2DFD673805F528837B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:35 +0000
Manifest this update: Wed 25 Mar 2026 19:01:35 +0000
Manifest next update: Thu 26 Mar 2026 19:01:35 +0000
Files and hashes: 1: Fi1IL191MwjF0uM0fhIUPlVEg8w.roa (hash: i72yfWesdd9h7w8CX+H4BGBsgb7kiryYQ8GxW04bDw0=)
2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: vk5DUMl/69NYuX4E5Vh4maz05lmp3CqwuAn5ppeg0Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a5:b4:b8:2b:2d:fd:67:38:05:f5:28:83:7b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: Mar 25 19:01:35 2026 GMT
Not After : Mar 26 19:01:35 2026 GMT
Subject: CN=ad717c8a5bfb8313a7bd2c690b55ad17b5bd5f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:37:0d:2e:30:97:6e:4e:fb:ae:99:92:60:
c0:c6:e8:3a:2c:29:10:72:cd:64:c3:c5:2f:33:a6:
c0:75:3e:9c:82:a3:a5:e3:70:7c:05:30:f6:b4:0d:
95:1d:bc:64:8d:1b:93:ce:6e:df:27:cb:8a:70:89:
46:c6:1c:f2:e7:23:f6:1b:41:f2:0f:c6:5c:0e:3b:
e4:48:3f:e2:e8:ef:ce:e2:6b:69:fb:14:b3:3c:ed:
5f:a8:e8:0b:17:d3:ad:a4:87:5d:a8:a7:f7:5a:d1:
66:c4:78:e0:0b:1f:7b:62:f2:d9:44:29:56:19:fb:
18:10:f8:ae:88:f4:c2:57:cf:5f:23:86:70:9e:f4:
35:e4:1f:53:c0:38:01:a2:07:78:f6:80:ee:97:c5:
2c:81:62:58:86:da:e4:9b:c6:3b:01:90:7a:10:6a:
fa:36:b0:8d:70:1f:14:a5:06:95:ed:2a:8b:3e:65:
1d:6a:69:3a:a7:f2:f6:ae:64:7e:79:dd:89:88:41:
73:3e:7a:7e:91:cd:61:d2:80:b7:68:ee:6a:45:f5:
84:29:e3:4d:2e:03:c5:eb:67:8b:e0:47:6a:e0:fb:
67:03:59:49:2b:ff:f1:c1:e2:07:55:29:f4:d1:54:
9b:2b:49:f0:ae:a3:bb:d7:ab:8a:09:74:83:a8:27:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:71:7C:8A:5B:FB:83:13:A7:BD:2C:69:0B:55:AD:17:B5:BD:5F:43
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:38:0b:4d:4d:aa:14:78:8e:04:6b:0b:75:52:64:35:7a:d8:
1f:52:e4:63:56:df:c1:f9:b4:18:d8:af:3e:c6:e7:83:92:bd:
93:3a:c5:d3:03:20:78:86:21:0b:67:00:99:3d:5c:41:9c:f4:
18:c4:70:48:45:ad:d1:65:6d:16:b6:94:f4:de:ed:da:99:4f:
b1:9e:83:fd:08:25:ba:fe:07:5e:fa:f5:69:42:32:4f:7a:a2:
69:03:0c:79:79:48:c8:59:11:16:7e:4d:01:ea:93:2d:59:23:
39:bf:e2:6d:b8:cd:82:fe:5c:97:4f:00:eb:92:fb:41:20:a1:
b6:51:fd:4e:c5:c2:51:bb:f4:de:0e:da:c0:53:e5:08:d4:b5:
4d:61:d8:69:e8:77:46:68:cd:30:11:e0:2a:67:e4:21:68:1d:
0f:c9:64:ae:b9:a9:67:07:65:da:1b:09:87:3c:fe:8b:e7:be:
1c:c0:e1:b2:17:44:53:3f:a5:54:b8:3f:98:2d:ae:fb:7d:9a:
5a:4f:a9:58:61:0d:87:a6:28:2f:65:26:03:64:fa:5f:b5:34:
15:b8:85:39:1a:f3:a7:67:9a:1b:da:fa:67:05:59:ab:bc:e6:
94:f2:35:b5:36:1e:dc:a3:d8:f3:25:9f:1d:da:d8:10:ab:13:
a3:59:b4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:33 2026 by rpki-client