Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: SkXkMANrCk1W35UNyTDC/ijpzQkWN6R3fttkWxYPi6E=
Subject key identifier: 6D:CF:88:73:0D:8B:1B:AE:67:3F:3C:20:72:E2:26:AD:84:CF:80:D0
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 019D296083CB17A38DF91F7ADDE1C52770FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:01:24 +0000
Manifest this update: Thu 26 Mar 2026 09:01:24 +0000
Manifest next update: Fri 27 Mar 2026 09:01:24 +0000
Files and hashes: 1: GjpGm1v3wSRAaUtsjrHQn6aKiJ0.roa (hash: 4K7A1g6E595/Yprg9eFeVpmlN6yEQaZZKljRzX+WHN4=)
2: J72P5DI9aUZfHCEMMwWflr8uG8k.roa (hash: FIxoJFJimB9dMBCV9pC5bRPsPazZNP7zbfoE1WYrso8=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: B0+miHm5kDvs4XhtuV0HcognNYEN/8tU+zBergyeWAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:83:cb:17:a3:8d:f9:1f:7a:dd:e1:c5:27:70:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Mar 26 09:01:24 2026 GMT
Not After : Mar 27 09:01:24 2026 GMT
Subject: CN=6dcf88730d8b1bae673f3c2072e226ad84cf80d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6c:2e:09:c7:33:68:d8:51:56:8c:11:b1:77:
76:47:02:31:e7:3f:ca:12:4f:54:0e:8a:ba:3a:29:
8f:96:ba:fb:3e:64:58:03:4e:82:05:55:31:cd:f9:
4b:d9:df:20:56:22:48:a3:ff:25:39:f7:a1:12:69:
0b:aa:a0:59:5b:a4:e2:b7:55:fc:10:81:32:dc:f9:
42:f3:8c:33:eb:89:3f:d9:9e:d4:93:01:79:7a:3f:
35:db:6a:e0:3f:75:06:99:03:3d:52:91:15:bb:71:
65:23:cf:c5:69:91:e4:aa:00:be:a2:b0:f6:3e:2b:
eb:36:ed:14:ca:6b:0a:5d:97:49:4a:1d:04:58:69:
b1:48:8e:db:a0:f7:37:e4:c0:34:3d:7c:86:15:81:
91:3f:7f:48:70:3e:c5:a3:40:55:c8:06:c9:6b:cb:
dc:c1:17:f6:90:ae:fb:4b:3c:29:59:70:10:61:39:
37:f9:e7:a2:7c:a9:81:66:f6:f9:93:cd:90:79:92:
81:50:4a:21:aa:af:09:a4:da:09:7a:de:76:7d:8c:
a2:f2:f9:12:e9:fe:fb:60:4a:83:b4:1f:0b:0a:e0:
d9:89:17:c3:e7:ad:8b:1f:f5:56:47:3c:1e:a3:ac:
64:06:81:04:fb:7e:4c:77:76:15:5b:59:46:cf:8d:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CF:88:73:0D:8B:1B:AE:67:3F:3C:20:72:E2:26:AD:84:CF:80:D0
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f9:ea:3c:ad:3d:eb:29:a6:73:cf:17:69:80:af:1e:6c:56:
22:75:a8:49:f5:b8:f3:7c:b1:d8:6f:16:0d:1f:7f:58:98:c0:
b6:0e:99:b3:49:da:0d:e4:c2:8f:87:bc:c5:e0:19:c7:78:9a:
87:e9:f3:10:c9:73:d0:9b:2b:94:fd:de:f7:0b:f3:f9:a0:29:
2f:3d:68:51:f7:24:3c:16:29:97:26:58:0b:8c:d7:1d:85:92:
67:31:a2:11:16:b7:76:7d:2f:ea:b6:56:ee:24:0a:ec:68:12:
29:9f:6e:a6:9d:81:06:1f:72:c7:5c:27:b9:ee:03:49:2b:85:
9a:a8:14:a1:c2:6f:8c:82:30:47:49:3a:85:a0:47:65:46:bf:
d5:1a:cf:0e:a8:35:cb:6c:b2:a6:40:aa:6a:ca:43:9b:9b:41:
da:13:01:40:e5:9e:07:0c:bf:6f:4a:bc:45:d1:0b:e1:cf:68:
ab:0d:b1:f3:09:d3:c9:8a:19:ac:55:f2:9c:35:6f:03:f8:90:
1d:99:df:51:49:23:5f:b0:1a:25:77:56:73:8d:47:83:49:76:
35:79:c0:e1:02:32:67:2d:89:e4:17:5a:c2:27:b2:60:84:c7:
d2:a6:6e:70:c2:02:00:c0:0c:18:45:cc:50:c3:da:28:b6:7a:
bd:4b:6b:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYIPLF6ON+R963eHFJ3D6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMzlkZDdiZDczYzNlMWJhMjdkMTc4ZDU1YzI2ZjhhOTZj
ZGI0YTkwHhcNMjYwMzI2MDkwMTI0WhcNMjYwMzI3MDkwMTI0WjAzMTEwLwYDVQQD
Eyg2ZGNmODg3MzBkOGIxYmFlNjczZjNjMjA3MmUyMjZhZDg0Y2Y4MGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mwuCcczaNhRVowRsXd2RwIx5z/K
Ek9UDoq6OimPlrr7PmRYA06CBVUxzflL2d8gViJIo/8lOfehEmkLqqBZW6Tit1X8
EIEy3PlC84wz64k/2Z7UkwF5ej8122rgP3UGmQM9UpEVu3FlI8/FaZHkqgC+orD2
PivrNu0UymsKXZdJSh0EWGmxSI7boPc35MA0PXyGFYGRP39IcD7Fo0BVyAbJa8vc
wRf2kK77SzwpWXAQYTk3+eeifKmBZvb5k82QeZKBUEohqq8JpNoJet52fYyi8vkS
6f77YEqDtB8LCuDZiRfD562LH/VWRzweo6xkBoEE+35Md3YVW1lGz427qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3PiHMNixuuZz88IHLiJq2Ez4DQMB8GA1UdIwQY
MBaAFD853XvXPD4bon0XjVXCb4qWzbSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMt
MDRmOWU2MTZhZjYwLzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMtMDRmOWU2MTZhZjYw
LzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvnqPK09
6ymmc88XaYCvHmxWInWoSfW483yx2G8WDR9/WJjAtg6Zs0naDeTCj4e8xeAZx3ia
h+nzEMlz0JsrlP3e9wvz+aApLz1oUfckPBYplyZYC4zXHYWSZzGiERa3dn0v6rZW
7iQK7GgSKZ9upp2BBh9yx1wnue4DSSuFmqgUocJvjIIwR0k6haBHZUa/1RrPDqg1
y2yypkCqaspDm5tB2hMBQOWeBwy/b0q8RdEL4c9oqw2x8wnTyYoZrFXynDVvA/iQ
HZnfUUkjX7AaJXdWc41Hg0l2NXnA4QIyZy2J5BdawieyYITH0qZucMICAMAMGEXM
UMPaKLZ6vUtrXA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:33 2026 by rpki-client