Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier: L+CW44Cj+SyRfnBhHjzz7r1faUtoM/8C2uU5RRCXvQA=
Subject key identifier: C9:96:85:10:9C:BB:FF:2A:A6:74:75:6C:F7:5B:A8:2E:70:B2:20:79
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 019D2AE09550CD70909FC97B3EAECB716342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number: 07BA
Signing time: Thu 26 Mar 2026 16:00:54 +0000
Manifest this update: Thu 26 Mar 2026 16:00:54 +0000
Manifest next update: Fri 27 Mar 2026 16:00:54 +0000
Files and hashes: 1: EyOWK8XRTj4QM3sd-U5Fu8pd9R0.roa (hash: s7z9jMoOORsHVb0/YBYQ3nLHIuOn+yJ/rTvI7HFxr7M=)
2: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: 5oN047m5e3gDG2tc5orAzbVUyBjyqeAQvwc7nIs0TQY=)
3: VnRtMDF4gysmlZSb59wJ0quLjuA.roa (hash: 43Q8juPKAzS/kUi0MJPxgQYqYa6H7Jrksy06nYJpgec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:95:50:cd:70:90:9f:c9:7b:3e:ae:cb:71:63:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Mar 26 16:00:54 2026 GMT
Not After : Mar 27 16:00:54 2026 GMT
Subject: CN=c99685109cbbff2aa674756cf75ba82e70b22079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:7d:5c:13:d8:65:37:c1:72:ef:7e:04:e8:
6c:13:97:b0:54:35:9f:14:61:e4:5f:d0:6f:b9:2d:
76:58:ce:18:1c:dd:27:31:0f:a6:f2:0b:df:2e:71:
42:f7:ef:e0:1e:ca:fb:2a:f7:86:17:96:cd:22:83:
77:5e:c5:6a:42:bb:17:dd:45:af:78:0f:c2:8d:3b:
4c:ea:68:05:83:b3:73:c3:da:35:27:a6:2a:ba:09:
b6:a7:be:7d:47:6d:f6:c2:a5:0f:b6:77:d6:cf:f5:
1f:bf:27:57:eb:46:7a:66:53:5e:ff:a3:72:60:78:
43:d2:89:73:ff:9d:fc:cd:69:2e:97:3a:03:05:1f:
b4:ff:4f:2d:66:e7:a6:e6:cb:16:d0:13:33:bd:3b:
ff:cb:44:ed:9b:3e:14:8d:89:72:e7:2c:50:45:d7:
d8:b9:14:ed:9a:e8:50:87:5a:2c:4b:75:e0:ae:19:
6d:8a:b5:e0:ad:0f:e5:fa:9b:2f:4c:43:db:1b:f9:
62:8c:19:72:2f:f0:af:e9:65:e0:02:e5:c4:85:c5:
c9:8b:f9:84:89:c2:57:6a:6c:6b:4f:e9:07:e9:b3:
f0:71:49:d0:8b:c9:b9:5b:48:c2:23:b4:13:f4:97:
3f:95:1f:c5:9d:27:c0:62:00:37:fe:1d:5e:64:92:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:96:85:10:9C:BB:FF:2A:A6:74:75:6C:F7:5B:A8:2E:70:B2:20:79
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a2:8f:a0:07:7e:87:09:e0:05:7f:69:61:3b:42:f5:ec:bb:
a3:8f:18:04:b5:48:df:a4:2d:29:d7:d2:2c:fd:f8:6a:b9:c1:
f5:62:a4:ea:ca:fc:a4:09:44:d2:12:8b:76:04:5e:94:af:6e:
e8:be:52:5e:c2:82:53:c3:3f:fc:9a:3b:ee:32:28:0d:29:15:
cc:ef:2f:3e:3a:ea:22:e3:96:86:68:ca:a9:29:cc:ce:fa:ea:
13:80:51:bf:9e:95:1a:04:3a:9b:b0:1e:53:82:53:d3:4b:7f:
5c:c5:3d:0f:f5:ee:bd:a6:cb:8e:fd:bf:98:2c:e7:9c:77:a1:
4a:01:67:f3:7c:b4:97:6c:01:74:cb:3a:cc:87:5a:29:b6:e9:
78:42:c5:94:11:01:48:59:16:09:e7:43:01:4c:bd:8b:e4:9f:
22:9a:0e:22:df:53:4a:c7:46:c3:ef:e2:34:3b:86:3a:05:38:
67:e3:15:b4:46:b4:1c:70:e4:15:05:dc:71:20:ef:4b:f0:fb:
ab:5b:a6:b4:b3:f6:3a:1f:31:78:d8:2d:c8:30:36:f0:00:3d:
dd:ea:14:d5:69:c1:1d:2b:0a:2a:45:f6:74:a3:cf:c1:bb:2f:
b5:58:0b:db:db:d0:ec:a6:e5:96:e9:e0:50:0a:63:82:4b:53:
fe:3c:21:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:08 2026 by rpki-client