Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
File: PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft (raw, json)
Hash identifier: 1FLUd5u2Z0LHWhwR9CWJkRW9gUE3mzh4M+MKhVLSrZg=
Subject key identifier: D0:4E:DD:82:63:02:94:C2:B4:8C:81:A9:9A:83:A6:FA:BA:94:A3:67
Authority key identifier: 3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73
Certificate issuer: /CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773
Certificate serial: 01A004398C3F246CEA35A453225327C53920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
Manifest number: 0CC9
Signing time: Sat 15 Aug 2026 07:01:15 +0000
Manifest this update: Sat 15 Aug 2026 07:01:15 +0000
Manifest next update: Sun 16 Aug 2026 07:01:15 +0000
Files and hashes: 1: 0kteYDEknBDxG9W3J3cL9QhFRvc.roa (hash: 1XWojZWd6G7wDLkk3o7HBTuYxtsrR+gEZcfWZE2ZhEU=)
2: PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl (hash: R0FGf4EEu1rP7M+EGqAsVJ0Qq6PUJv0YXeEqANTj5Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:39:8c:3f:24:6c:ea:35:a4:53:22:53:27:c5:39:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773
Validity
Not Before: Aug 15 07:01:15 2026 GMT
Not After : Aug 16 07:01:15 2026 GMT
Subject: CN=d04edd82630294c2b48c81a99a83a6faba94a367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:f3:da:06:0c:ea:fd:f6:79:69:72:f6:92:
2a:f7:60:61:91:58:9f:39:ec:e5:61:07:df:5d:14:
05:1f:6d:4c:43:7d:2b:18:54:79:78:b2:36:11:ff:
89:6f:08:57:20:26:fa:70:72:db:b8:ff:31:18:f1:
48:55:32:e6:8a:73:b7:9a:35:7d:03:92:f3:84:83:
41:7c:47:36:c5:86:e2:34:c6:38:22:65:f3:ba:90:
93:5f:5c:8c:5f:7b:66:b0:5d:0e:ac:0b:94:76:83:
d2:45:d4:48:29:60:3a:7c:e7:6c:82:1e:96:3d:cb:
70:9a:12:25:34:92:7b:bd:17:b6:6c:d9:26:72:09:
24:c8:fb:bd:bc:9b:bf:15:c1:2e:a0:82:73:3b:7d:
b4:40:a3:67:05:3a:62:89:39:ab:62:db:94:e0:9d:
07:a7:59:92:d2:f2:f0:0e:a2:43:ff:2d:36:33:fd:
5e:d3:31:58:a2:63:af:36:ce:76:ae:e3:81:b5:4d:
af:49:8b:54:39:56:54:64:6e:e3:02:a4:85:58:7c:
b9:79:8e:41:fa:9d:65:36:a1:6e:99:eb:a6:0e:b1:
46:3a:cc:6b:b3:00:4b:49:33:52:f1:f8:5d:92:fd:
61:7d:14:99:68:c9:d3:ec:3c:d9:28:4b:7e:8e:3a:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4E:DD:82:63:02:94:C2:B4:8C:81:A9:9A:83:A6:FA:BA:94:A3:67
X509v3 Authority Key Identifier:
keyid:3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a1:73:9b:c2:2c:88:ee:f9:17:0d:22:14:a5:46:32:c2:3e:
09:e0:47:af:48:25:e0:f4:af:66:e2:99:05:49:19:36:4d:af:
c3:d7:2d:92:15:97:37:0d:e2:c8:18:fb:f2:d9:2c:da:0b:0c:
bd:bf:80:3a:d0:fd:2f:59:86:3b:2e:ed:f6:e9:15:90:0b:73:
db:fe:a6:af:11:a2:f9:4b:69:b1:7b:98:73:2e:45:a4:a0:bf:
86:4f:13:71:69:0b:8a:9e:85:d2:7a:bf:dd:69:22:21:84:5d:
1c:b7:bf:1f:0f:e1:34:4e:0a:6b:5d:e9:b6:53:0a:f2:e7:d7:
2b:c9:a4:f4:37:cc:17:bf:f1:9f:25:5e:75:ab:a4:7d:51:0c:
b6:56:83:bc:a7:ca:28:99:95:ff:4c:d1:1b:31:ca:9b:63:f9:
a7:95:47:0a:aa:72:e9:ef:dc:3f:9d:cb:5e:00:2e:bc:c3:28:
70:a1:c3:b8:c9:4d:47:a7:27:c1:57:8c:f8:6d:45:9f:bc:28:
e4:13:d6:44:83:7e:a1:bf:3e:8d:d7:b2:38:78:65:d7:b8:3c:
d2:78:67:de:f8:89:5d:16:23:80:17:cb:45:1f:14:c3:a0:a4:
5f:28:31:15:65:ef:1f:3d:f7:bd:b9:39:87:9a:3f:80:09:83:
46:e4:ad:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:37:12 2026 by rpki-client