Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
File: PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft (raw, json)
Hash identifier: +z29hDXMvBg4ywnvnDhNnr0SMXGLxpKtGcRgiMG9lIQ=
Subject key identifier: 9D:02:9F:5B:12:DD:81:4B:1F:0E:E5:91:FD:34:69:F6:0A:5A:B9:0E
Authority key identifier: 3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73
Certificate issuer: /CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773
Certificate serial: 01A140F0964319B8E93745C31616FDAB160A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
Manifest number: 0D6D
Signing time: Thu 15 Oct 2026 19:01:11 +0000
Manifest this update: Thu 15 Oct 2026 19:01:11 +0000
Manifest next update: Fri 16 Oct 2026 19:01:11 +0000
Files and hashes: 1: 0kteYDEknBDxG9W3J3cL9QhFRvc.roa (hash: 1XWojZWd6G7wDLkk3o7HBTuYxtsrR+gEZcfWZE2ZhEU=)
2: PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl (hash: gNUD5bfPlCp2hfGtFDjb8AN4gwwz2KPfI7x0mzLuEMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f0:96:43:19:b8:e9:37:45:c3:16:16:fd:ab:16:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773
Validity
Not Before: Oct 15 19:01:11 2026 GMT
Not After : Oct 16 19:01:11 2026 GMT
Subject: CN=9d029f5b12dd814b1f0ee591fd3469f60a5ab90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:01:0d:73:b1:58:53:a7:15:ed:e2:64:c3:
0d:52:77:3c:6b:b8:94:f4:8c:e5:6a:c0:96:e1:17:
d3:df:98:ac:16:35:1e:5a:6a:10:22:cf:7b:b8:db:
44:8a:94:60:83:e1:f0:b6:11:74:0d:ac:c2:98:38:
35:2f:4b:18:80:36:b3:e8:be:b3:1b:13:74:78:b9:
51:3e:24:59:3f:69:25:87:ee:2e:0b:05:78:bc:e4:
6b:e4:bb:b3:28:6f:9c:6b:f6:90:2c:b3:23:2a:6a:
2b:37:da:25:84:52:f5:ae:e4:13:19:5a:b2:73:a7:
b2:06:f5:75:d2:67:90:a9:39:e0:90:13:19:46:1e:
df:96:31:ff:15:ce:6d:d0:b6:75:f2:92:f6:46:7e:
44:0a:8f:56:1d:e6:ae:35:14:d6:12:6b:d3:bc:4a:
7b:02:4a:c6:06:82:14:16:66:5d:e2:35:dc:1a:fb:
15:fc:0c:d0:04:91:59:f5:90:2d:b3:81:78:4d:ce:
f6:47:78:65:71:71:3c:e4:2d:40:29:7d:ec:60:7e:
c8:2c:d6:f8:39:0e:aa:d5:2c:9e:73:76:42:35:3b:
97:6f:b9:72:1e:7e:d9:85:83:88:ad:f1:bd:f0:6c:
a6:08:85:9b:ad:62:fd:cc:95:5e:2c:a9:ed:53:7d:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:02:9F:5B:12:DD:81:4B:1F:0E:E5:91:FD:34:69:F6:0A:5A:B9:0E
X509v3 Authority Key Identifier:
keyid:3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5b:8a:8a:7a:62:19:9f:ef:5c:27:4c:ce:a2:7a:dd:44:54:
c1:4b:f1:cc:cb:2f:bd:df:22:5d:ee:8c:c2:1a:70:ce:e6:11:
17:d1:15:57:c2:48:34:28:e1:b2:83:13:9e:57:43:b9:68:9f:
d0:fa:8c:c2:5a:af:2a:fb:64:e4:1e:25:24:f8:9b:62:3e:97:
44:5b:a1:3e:d5:7a:0b:d6:32:41:2e:ad:a0:84:b8:b1:38:20:
f2:a6:2a:e3:16:76:14:bf:bc:f5:0a:a4:6e:c2:dc:a7:67:a5:
c9:09:8f:54:61:ea:8a:76:53:4b:15:25:16:99:6f:54:35:d4:
2b:11:58:b6:c7:5b:f2:18:12:ab:c0:96:3c:1c:7a:7e:01:11:
5d:f7:cf:1d:fc:42:df:8d:d2:1f:e4:d4:3f:56:48:b0:5f:6d:
10:86:54:96:1d:a8:8a:db:c2:b6:7d:56:32:dd:45:e1:bd:c1:
c7:77:58:69:00:1f:3a:46:b0:cc:bf:dd:d6:3b:be:66:4a:b4:
61:00:49:81:84:65:96:48:16:e0:0b:a0:0e:05:8b:79:5d:fe:
e6:b3:dc:5b:32:09:93:96:cd:89:e8:92:79:77:dc:5f:60:a6:
b8:f7:3a:be:b9:69:76:dd:48:bd:dd:0f:dc:ee:8d:10:82:c3:
c3:dc:66:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 07:01:47 2026 by rpki-client