Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
File: PzTUjYQaUqQifUn6PvhbpavyIkg.mft (raw, json)
Hash identifier: frJotOooxkcBh2Q7vPVBTLDV9nW7AMEuFTe5qtj/hC0=
Subject key identifier: 1B:A9:5E:27:71:9D:42:B1:2F:47:68:7A:BA:88:4A:FC:AA:F6:05:B4
Authority key identifier: 3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
Certificate issuer: /CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Certificate serial: 019D2997A6F54DF986D438CF91B95331397C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
Manifest number: 079E
Signing time: Thu 26 Mar 2026 10:01:37 +0000
Manifest this update: Thu 26 Mar 2026 10:01:37 +0000
Manifest next update: Fri 27 Mar 2026 10:01:37 +0000
Files and hashes: 1: PzTUjYQaUqQifUn6PvhbpavyIkg.crl (hash: kyJS0dXvtTXilj1duqL7HWAJAyLowTCzpPIwBfr2nNQ=)
2: VJDz-qaUophwYHtBPQA4i8cS3MA.roa (hash: V9aVBC2KoE26lQ0VCkG45owqJDBEmBnHXtHFUy4VDVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:a6:f5:4d:f9:86:d4:38:cf:91:b9:53:31:39:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Validity
Not Before: Mar 26 10:01:37 2026 GMT
Not After : Mar 27 10:01:37 2026 GMT
Subject: CN=1ba95e27719d42b12f47687aba884afcaaf605b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:f4:dc:62:70:a0:29:45:d6:d5:05:7c:b9:
c4:b5:d8:76:ff:9f:50:ed:74:c3:1b:29:2b:fc:4d:
cc:e7:29:9b:aa:15:f0:8c:7f:ae:ab:8d:09:5e:be:
e5:e7:4e:fb:56:c2:2f:e0:9e:c4:21:e3:81:1c:e8:
2e:57:0c:89:55:fe:38:c0:0b:82:b9:fa:24:38:04:
99:51:19:81:53:37:a5:23:32:75:e4:1b:f1:71:58:
e0:de:3c:8d:39:e0:b3:60:a9:b0:57:b5:28:5e:bb:
12:fd:d8:54:b5:9f:b7:ef:9a:7e:05:32:1a:cf:0c:
bb:89:c0:a3:c0:17:00:94:dc:09:60:64:96:46:57:
cd:2d:3d:dc:9a:af:ec:c6:49:ba:90:19:32:f8:9a:
23:51:3b:58:b1:97:d6:65:fe:ba:00:7e:58:f0:0f:
aa:70:03:67:83:cb:7d:74:8a:c4:6e:f2:83:42:8e:
0e:8d:0c:89:82:91:ff:a2:28:3e:cc:d9:69:99:8b:
f4:e0:df:75:3f:f0:7f:34:c5:66:00:b7:be:4f:09:
4f:a7:01:27:02:f2:b0:b1:6a:3c:02:13:7a:53:b5:
92:b2:af:f9:56:af:f4:a7:46:52:3a:a0:6c:c7:02:
fa:e3:83:9a:ba:40:e4:61:09:90:f6:f1:c8:cd:56:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A9:5E:27:71:9D:42:B1:2F:47:68:7A:BA:88:4A:FC:AA:F6:05:B4
X509v3 Authority Key Identifier:
keyid:3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ce:55:5a:9c:be:92:01:09:cd:66:58:16:0e:46:1f:3a:e8:
c6:03:3f:3f:ca:1e:97:b1:e8:de:70:2a:07:0c:40:9e:ec:54:
02:37:49:41:a1:bb:99:84:94:2e:35:4b:6d:ca:6b:58:81:89:
9f:92:63:96:d1:7d:d7:5a:2d:63:4d:e6:05:a2:97:d0:85:f5:
7f:5c:23:6d:f1:d4:e8:63:6d:e8:87:0b:ed:f4:89:ef:f3:48:
6e:f1:96:2e:2d:ad:9c:08:f7:64:4c:3b:05:20:67:d1:4e:35:
11:19:9a:8c:94:b3:0b:25:c3:2d:18:62:42:68:5a:eb:33:f4:
54:52:35:0b:90:6e:9d:75:66:c7:91:3a:24:d8:b3:71:a0:f5:
f7:c7:12:8c:38:b7:d0:75:3b:1c:f3:d1:c2:ce:d1:c6:02:35:
ec:fa:88:a3:de:6a:a3:a5:98:f8:c1:f4:69:0d:b1:6e:03:a5:
c2:e0:77:03:d3:be:56:fb:0c:b2:6f:78:50:66:e2:3c:95:bf:
76:9a:ad:c4:b4:3a:ef:a3:0e:de:ae:e1:fa:07:6b:ed:f9:e0:
cc:2c:82:a0:53:fe:d5:94:5f:7a:60:de:70:44:5a:6b:2c:fc:
a3:db:9d:ff:ed:7e:bb:58:77:f7:26:c0:fa:59:a8:8e:c6:c1:
f9:7d:5e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:47 2026 by rpki-client