Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
File: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft (raw, json)
Hash identifier: JUJbKI2TW9L4cnlmi+w6RzPfD2zvWVTlcCk1y92Zt20=
Subject key identifier: 52:87:25:84:E1:E3:3F:40:4E:27:8D:93:17:C0:37:5B:16:4F:EA:4C
Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
Certificate issuer: /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Certificate serial: 019D292948DB6977622FA521AF30B83964A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
Manifest number: 0E62
Signing time: Thu 26 Mar 2026 08:01:04 +0000
Manifest this update: Thu 26 Mar 2026 08:01:04 +0000
Manifest next update: Fri 27 Mar 2026 08:01:04 +0000
Files and hashes: 1: CnCgZxqBwoZSj-sRCC6hjRMHYgE.roa (hash: t0U8GxVmfi3P7WDV+ltBtv7fLFx6DgcsLhiMKqOEWho=)
2: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl (hash: g6wQ9ngRAAt+Vi14Af7bI4OXez7H5R49cdVahY6i46g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:48:db:69:77:62:2f:a5:21:af:30:b8:39:64:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Validity
Not Before: Mar 26 08:01:04 2026 GMT
Not After : Mar 27 08:01:04 2026 GMT
Subject: CN=52872584e1e33f404e278d9317c0375b164fea4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:16:d2:4f:8a:4c:99:85:2a:55:67:17:ca:
05:8d:80:cb:c2:6b:a0:47:91:d1:32:d7:23:8d:5a:
c7:3f:a1:70:86:dc:d8:8e:c1:c7:83:ff:4e:33:98:
53:4e:cb:2d:09:0d:98:98:c0:bb:9f:a1:26:75:27:
73:a9:f1:c1:8e:de:54:47:7d:67:b5:f5:09:20:af:
6c:31:c7:2c:80:3e:e9:17:f9:8b:29:d7:a3:21:4f:
65:a9:27:e5:bf:42:26:4d:e8:32:6c:43:5f:71:06:
c8:d5:14:b6:1a:71:90:75:7d:78:e9:4c:61:46:61:
ab:4a:4a:04:f2:9f:b6:73:87:cc:7b:ca:7e:ff:bc:
89:36:ee:1a:3c:fa:26:23:c0:7d:c8:b7:c9:c3:ac:
ab:86:8e:af:82:ce:f2:1a:8d:c4:9b:83:12:6c:51:
38:4c:c7:0a:5b:b9:af:40:c6:7a:f3:8b:32:d6:de:
68:6a:99:73:42:c6:14:86:bf:6c:90:3f:1a:21:41:
64:c6:7e:f4:60:61:1a:9f:6a:b3:10:37:79:5e:3d:
64:6c:a6:87:08:1b:38:2c:a4:5d:ae:14:c3:cf:d1:
58:32:c2:3d:b6:91:b0:0f:99:08:3b:4a:5a:7b:83:
5e:f2:73:a2:ed:8d:50:da:fd:8d:76:9e:76:f5:62:
f3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:87:25:84:E1:E3:3F:40:4E:27:8D:93:17:C0:37:5B:16:4F:EA:4C
X509v3 Authority Key Identifier:
keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:22:f9:b7:80:9d:80:78:10:3c:17:89:71:da:32:91:e2:5c:
52:a1:20:61:01:9e:b9:1e:62:72:0e:ba:26:95:3f:7c:b5:6e:
f0:3b:4d:83:7f:8b:00:d4:3e:23:ca:68:36:06:8c:1f:58:f0:
f2:c9:ff:7e:98:e5:04:b9:b1:04:cb:af:12:27:24:b1:98:e4:
06:e2:a6:cb:36:d7:b3:e1:79:fe:58:e2:de:74:0c:bc:30:14:
80:69:9e:50:ea:38:e8:a9:69:9b:52:c2:cc:87:80:aa:4d:4b:
ef:db:32:c8:4c:f7:9f:fe:47:82:b7:35:17:c2:47:d2:78:ad:
6f:9e:ab:7d:4b:ef:bc:b1:d5:fa:a4:05:0b:da:6a:48:4d:c4:
01:e8:85:07:b8:47:7e:61:f1:6f:46:44:a6:84:c0:16:3b:51:
96:51:b0:25:66:37:0e:fe:8b:1f:4c:4d:7f:bb:5a:26:7f:a6:
20:f0:64:e9:10:f3:81:26:73:be:ff:15:3a:b5:19:ba:c4:7d:
30:87:c1:4d:89:f6:f8:d5:24:fa:c7:1d:c5:a1:ef:d3:f9:46:
76:e9:35:1c:56:b3:ca:de:da:d5:70:a5:e6:ab:8f:ba:13:d8:
a4:33:da:59:0b:8b:11:4c:92:d4:c3:1a:2d:64:20:29:5a:37:
87:d4:b4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:30:20 2026 by rpki-client