Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: jC0C7PpHfnRI5DaWclcaVyCEFRAbv5H6QyvT7vjzbtU=
Subject key identifier: CC:E7:B1:BB:E8:69:1D:8F:4C:2B:00:24:BC:32:D7:29:E5:1B:D1:B8
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 01A0E173E8CD64C4C2C2A45F3E2C22506B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 06:01:04 +0000
Manifest this update: Sun 27 Sep 2026 06:01:04 +0000
Manifest next update: Mon 28 Sep 2026 06:01:04 +0000
Files and hashes: 1: GjpGm1v3wSRAaUtsjrHQn6aKiJ0.roa (hash: 4K7A1g6E595/Yprg9eFeVpmlN6yEQaZZKljRzX+WHN4=)
2: J72P5DI9aUZfHCEMMwWflr8uG8k.roa (hash: FIxoJFJimB9dMBCV9pC5bRPsPazZNP7zbfoE1WYrso8=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: dilqkDK8UGG1EMQldYCNA6q1eeHKAVYcebW6CzV+72o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:73:e8:cd:64:c4:c2:c2:a4:5f:3e:2c:22:50:6b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Sep 27 06:01:04 2026 GMT
Not After : Sep 28 06:01:04 2026 GMT
Subject: CN=cce7b1bbe8691d8f4c2b0024bc32d729e51bd1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:8e:4e:27:e9:23:7f:50:dc:7a:61:e0:58:
40:12:01:4f:13:87:5f:e4:22:eb:ba:38:0c:3e:fa:
6d:fc:5f:7f:3e:e5:71:95:a7:84:a2:94:e8:fc:0e:
bb:2b:12:1e:b9:2f:0f:87:11:fb:a4:38:b0:a0:12:
07:c8:11:90:9a:51:8e:7b:72:fe:2b:b0:bd:e9:bf:
ab:3a:13:58:b5:31:a0:1f:3c:80:c6:de:4a:d3:51:
59:40:e1:1c:37:ab:75:ce:65:ac:67:c5:12:24:5e:
32:26:2b:ab:fe:72:2c:66:a6:6c:6c:a7:54:ec:95:
7b:05:2c:46:88:a7:8b:6b:6e:77:32:11:81:55:7d:
2a:68:21:ce:1a:4b:29:1e:f5:5f:d1:39:e6:ea:8e:
2e:85:a2:7d:b1:3e:ea:f8:b1:3b:5c:1b:55:b7:5e:
c1:49:82:f6:eb:80:f1:f5:2c:37:e2:7a:44:8d:8c:
e8:1e:b7:da:74:12:12:41:39:cd:2f:48:24:a8:a1:
38:76:29:a8:c7:9e:b1:ab:2e:00:e9:05:1a:47:e9:
12:a7:fe:d0:5e:45:6f:0b:29:cd:23:ac:1a:47:eb:
ee:f9:01:c6:4d:05:48:2c:0b:86:19:f5:28:9e:8a:
03:89:36:b0:1b:98:95:df:10:32:1c:e5:7d:3e:0a:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E7:B1:BB:E8:69:1D:8F:4C:2B:00:24:BC:32:D7:29:E5:1B:D1:B8
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:93:c5:21:02:64:9b:9f:c3:53:e8:48:57:4e:d2:0e:fe:99:
57:8f:4a:8b:00:91:6b:94:06:7a:49:1b:b0:b9:3d:dd:10:fc:
f1:f4:2c:c8:c0:63:96:82:32:40:80:4b:cb:55:a1:23:a9:d5:
da:2b:52:45:07:a5:f9:8d:f7:76:a9:65:3c:ae:12:59:f4:d8:
8c:73:a8:86:b9:dc:f6:cf:93:a1:66:27:50:ba:29:63:42:61:
30:db:8a:00:53:31:66:b7:21:13:b6:29:12:d7:b5:2b:e2:4f:
fd:e5:e9:da:6e:ae:a7:4d:ad:72:73:b1:16:5e:55:08:fd:0c:
50:eb:c6:78:1e:3f:ef:41:83:59:cf:91:4b:29:d1:5f:7c:54:
8d:1f:ee:7c:bc:ce:21:a4:a6:54:27:fd:de:bb:a7:3f:66:96:
eb:8d:a2:cf:1d:d6:b9:51:2a:c2:6d:78:46:0f:1e:a5:6c:6e:
13:65:cc:08:f9:d9:d4:2a:4c:21:be:7e:15:9a:59:69:dc:a0:
f3:42:0f:e0:f2:0d:49:46:b6:af:4f:7f:db:7b:58:89:1b:54:
6a:e5:d2:cc:8e:ca:f0:a8:b1:68:57:84:d8:e4:32:9e:8a:2d:
e8:ff:e1:16:b4:06:5d:49:85:79:e5:23:85:f2:c6:d9:48:c1:
ec:cc:88:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:57 2026 by rpki-client