Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier: Fyprl+HVt4HTF4iz9rhKw333DOePYx8dSW5RjKCUJXA=
Subject key identifier: 2E:CE:08:51:31:56:F1:68:FA:DB:79:88:20:61:9B:36:B9:AD:7C:61
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 019E1F7EB7A5AF41C932CDEF1F6C615A45C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number: 083A
Signing time: Wed 13 May 2026 04:00:58 +0000
Manifest this update: Wed 13 May 2026 04:00:58 +0000
Manifest next update: Thu 14 May 2026 04:00:58 +0000
Files and hashes: 1: 2LqMB6nAP53p9Mx5BUqCY2aP11w.roa (hash: CXwqScjDeWDjJQZWhT8XIJc7YrmcrC7QUMyXMb9Frso=)
2: EyOWK8XRTj4QM3sd-U5Fu8pd9R0.roa (hash: s7z9jMoOORsHVb0/YBYQ3nLHIuOn+yJ/rTvI7HFxr7M=)
3: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: 6oaYnjmalGAln98JU/E+GkSpHzHtDqP2SJdtT6jRuq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:b7:a5:af:41:c9:32:cd:ef:1f:6c:61:5a:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: May 13 04:00:58 2026 GMT
Not After : May 14 04:00:58 2026 GMT
Subject: CN=2ece08513156f168fadb798820619b36b9ad7c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:85:7f:ea:cd:96:17:c8:38:4d:da:36:bf:
f7:09:7b:90:25:be:4f:e8:e6:98:b0:bb:c3:78:03:
50:3f:b8:1b:72:65:cf:0e:1d:3a:8e:9e:52:f9:39:
ab:f3:67:f8:8c:1d:1c:97:79:ad:29:3c:08:71:ed:
b2:d2:a7:e2:18:e3:03:79:85:cd:4b:29:c2:99:f3:
65:d2:bc:a4:3e:25:2d:9b:f4:9d:7a:6a:02:61:cb:
cb:ff:4d:cf:86:1a:51:ae:ca:6c:6c:b7:1e:36:31:
f4:24:b9:48:74:03:4d:73:af:fe:a4:32:d4:55:c2:
13:33:c1:6e:94:86:b3:2b:8b:c6:df:50:9e:4b:58:
a8:3e:44:4e:9d:09:98:e8:a3:7f:e1:6d:0c:fc:56:
21:19:27:c2:20:f2:0d:93:c0:e0:40:27:e1:0a:29:
41:5b:0e:f8:70:a7:f4:28:eb:65:a8:0e:d7:02:3b:
d1:d6:17:15:a9:33:42:ea:d4:03:34:68:83:b9:e6:
5c:58:6c:db:67:05:7d:bc:d8:9c:71:e9:3b:ad:94:
5d:47:c7:14:03:c6:40:b7:59:44:d8:b5:a8:3b:42:
27:24:41:bb:9c:f0:73:1e:b9:3f:ab:c0:86:ff:1f:
49:67:1f:0d:c2:2d:a7:de:e5:cc:a0:25:88:c1:f8:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CE:08:51:31:56:F1:68:FA:DB:79:88:20:61:9B:36:B9:AD:7C:61
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7a:a3:be:44:c6:3f:2c:27:cb:b3:17:5c:d9:c3:b3:7b:fd:
86:dd:0b:9a:93:f9:75:bc:e7:7c:68:45:7e:62:1e:c2:cf:b4:
fb:13:ff:5b:2f:6a:81:15:ec:2c:af:cf:7f:b0:aa:73:67:8a:
9a:4e:48:8b:c4:81:35:7e:be:3b:5a:36:6c:08:ef:1b:7e:53:
d8:60:36:99:3a:1b:8e:12:1d:90:58:c8:03:39:4b:10:b4:f2:
57:d0:84:f7:4d:94:da:cf:90:9c:3d:bf:09:c2:f1:6b:34:f2:
ac:93:bc:c6:50:e5:64:38:2d:37:08:1f:38:1e:04:0f:0e:3e:
27:f2:d6:59:a7:a5:b0:20:69:98:83:99:39:9e:65:37:83:32:
bf:24:49:5b:5c:19:ed:36:ab:91:0d:b9:38:4f:7d:d3:28:53:
c8:6a:c9:1c:eb:f5:aa:a6:69:a4:a3:c2:70:71:9e:56:8d:00:
61:f5:f0:47:41:94:d1:b4:a4:5b:5c:f7:49:c0:5d:39:54:9e:
38:90:de:75:f2:16:3e:42:c3:4c:8f:cd:3c:07:0c:d5:fc:63:
ca:db:e3:20:78:5e:14:0e:0b:74:10:fc:a5:d7:f7:65:01:45:
2d:57:b5:3c:62:d0:a0:a0:65:04:aa:0b:c9:1e:fc:52:80:0e:
12:13:c7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:32:43 2026 by rpki-client