
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File: pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier: rtqza2xxojbofcg6xqRLIQtWlwo2R3lzeXdkduQtalQ=
Subject key identifier: D6:46:7C:74:68:BC:0B:9D:4B:31:83:55:A8:5A:A7:15:33:7F:99:5A
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer: /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial: 01A0D8DEEAEA53BC655F58CD9C73173FAB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number: 0BFF
Signing time: Fri 25 Sep 2026 14:01:22 +0000
Manifest this update: Fri 25 Sep 2026 14:01:22 +0000
Manifest next update: Sat 26 Sep 2026 14:01:22 +0000
Files and hashes: 1: PVIvAggMAtuREjhV8GPK-EuHdx8.asa (hash: /yi4srMyiV+9qj1Uy16aZQoRy4KHU28OFJInXDw+3jg=)
2: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: 6D5VPAXVpSPb4ptIwX5d18Fl0fUsf+uiqNV6KoJej6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:ea:ea:53:bc:65:5f:58:cd:9c:73:17:3f:ab:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Validity
Not Before: Sep 25 14:01:22 2026 GMT
Not After : Sep 26 14:01:22 2026 GMT
Subject: CN=d6467c7468bc0b9d4b318355a85aa715337f995a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:e8:04:9e:f4:51:f3:3b:1c:27:14:76:bf:
8e:6d:5f:39:5e:e5:41:46:f3:8b:ce:ee:6b:b3:2b:
6c:f5:a5:dd:9b:5a:5a:1d:85:75:13:ce:42:d2:e9:
7b:25:43:bc:47:eb:0f:96:3c:1a:5d:87:70:1a:ce:
f5:c7:70:1f:2e:84:0b:cd:59:4b:4a:96:f3:02:75:
9a:95:cb:fc:de:34:79:1f:81:47:fd:f1:ac:7d:19:
46:9a:79:18:db:31:76:d2:25:bb:7c:6b:9a:ec:fe:
e2:94:fb:23:46:21:a8:73:67:02:99:04:77:00:96:
9c:ef:c1:2e:14:45:be:a0:fe:de:bc:cd:57:37:46:
8b:db:1a:a0:c8:25:de:3c:76:a3:79:10:0c:ff:e3:
2e:e9:3e:13:c4:38:c2:a4:8e:cc:3c:0a:b6:f5:d8:
09:ac:e3:39:f2:da:64:da:52:88:a5:88:53:ee:52:
d6:84:ad:b3:fc:42:b0:70:b4:05:52:ea:6a:19:88:
c2:07:36:1f:34:72:0b:eb:b8:f7:a5:03:2b:bd:74:
ee:d7:ea:ae:eb:e7:95:87:71:d9:52:b5:30:28:fb:
7d:d8:62:94:90:fa:30:a8:28:9d:ec:95:2d:15:82:
68:85:29:bf:70:86:e4:95:31:2e:0a:b1:99:9f:cc:
c0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:46:7C:74:68:BC:0B:9D:4B:31:83:55:A8:5A:A7:15:33:7F:99:5A
X509v3 Authority Key Identifier:
keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:07:6e:40:56:d1:52:f5:b2:31:41:9f:41:53:34:40:36:4d:
d1:fc:45:e1:39:19:96:fd:77:52:7c:dc:82:2c:89:5a:3a:fb:
ac:69:61:90:20:fc:e1:00:82:35:25:ee:81:a3:0e:cf:19:d5:
11:9c:61:a3:49:a4:fe:c5:df:fa:d5:11:e3:aa:95:92:0b:ad:
2e:4c:74:fb:da:7b:0f:53:c1:6a:ee:56:80:44:d5:99:56:a6:
42:2d:7a:8e:a1:41:04:2a:92:32:1f:c2:a9:19:d6:c1:b0:88:
ae:f9:fa:62:37:15:e9:1f:23:99:70:fa:98:5e:b0:ec:f0:e5:
a9:ff:62:cd:fb:5f:91:a3:5d:6a:d7:06:0f:7b:5a:ae:76:fa:
ad:39:11:ce:f8:a8:d1:58:6b:50:69:35:70:23:9f:2b:e1:49:
43:e1:4e:7d:f3:60:ee:2b:a1:aa:96:92:77:ed:dd:48:ea:5b:
e8:9c:ae:a3:a5:50:58:cc:2f:d8:26:b6:dc:ee:9b:fc:7f:3b:
e2:f4:e7:1d:31:a1:92:15:c0:a4:3b:1c:dd:4f:9a:65:da:e6:
e1:eb:7b:05:16:46:8b:a8:97:a1:59:f4:7b:fb:93:67:eb:77:
3e:4e:1f:45:c4:b5:64:ed:17:91:8e:cf:85:51:d5:09:5a:d9:
ee:d2:07:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY3urqU7xlX1jNnHMXP6ubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OTBhZmNhNWZlYjRhYzM4YzFhNzM4NTdhZDc1NmY3ZjMz
ZTM2OGIwHhcNMjYwOTI1MTQwMTIyWhcNMjYwOTI2MTQwMTIyWjAzMTEwLwYDVQQD
EyhkNjQ2N2M3NDY4YmMwYjlkNGIzMTgzNTVhODVhYTcxNTMzN2Y5OTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss3oBJ70UfM7HCcUdr+ObV85XuVB
RvOLzu5rsyts9aXdm1paHYV1E85C0ul7JUO8R+sPljwaXYdwGs71x3AfLoQLzVlL
SpbzAnWalcv83jR5H4FH/fGsfRlGmnkY2zF20iW7fGua7P7ilPsjRiGoc2cCmQR3
AJac78EuFEW+oP7evM1XN0aL2xqgyCXePHajeRAM/+Mu6T4TxDjCpI7MPAq29dgJ
rOM58tpk2lKIpYhT7lLWhK2z/EKwcLQFUupqGYjCBzYfNHIL67j3pQMrvXTu1+qu
6+eVh3HZUrUwKPt92GKUkPowqCid7JUtFYJohSm/cIbklTEuCrGZn8zA2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZGfHRovAudSzGDVahapxUzf5laMB8GA1UdIwQY
MBaAFKWQr8pf60rDjBpzhXrXVvfzPjaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYt
OGYwNjNhNWY2YTg2LzEvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYtOGYwNjNhNWY2YTg2
LzEvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQduQFbR
UvWyMUGfQVM0QDZN0fxF4TkZlv13UnzcgiyJWjr7rGlhkCD84QCCNSXugaMOzxnV
EZxho0mk/sXf+tUR46qVkgutLkx0+9p7D1PBau5WgETVmVamQi16jqFBBCqSMh/C
qRnWwbCIrvn6YjcV6R8jmXD6mF6w7PDlqf9izftfkaNdatcGD3tarnb6rTkRzvio
0VhrUGk1cCOfK+FJQ+FOffNg7iuhqpaSd+3dSOpb6Jyuo6VQWMwv2Ca23O6b/H87
4vTnHTGhkhXApDsc3U+aZdrm4et7BRZGi6iXoVn0e/uTZ+t3Pk4fRcS1ZO0XkY7P
hVHVCVrZ7tIHmg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:02:32 2026 by rpki-client