Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
File: PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json)
Hash identifier: FbHinnWfa9F/Hy8nyMZ/UWKu6sG6c1ZNz3KXkmCG/S0=
Subject key identifier: 46:83:DB:15:0F:5C:59:47:5E:A7:41:59:AB:0D:37:8F:23:88:98:FE
Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Certificate serial: 019D38D313B22BD63F2D8A178FFBC47C04A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
Manifest number: 117F
Signing time: Sun 29 Mar 2026 09:00:50 +0000
Manifest this update: Sun 29 Mar 2026 09:00:50 +0000
Manifest next update: Mon 30 Mar 2026 09:00:50 +0000
Files and hashes: 1: 3I6LNJN6PPsiFBXmOu2FHBnIjRw.roa (hash: 7S75Cr0RAlxkkgtmqpz1YNkkzHYPGceCTqlkYTBVOv4=)
2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: 83CTuyQw+7fzx3TO/z1lzpEkMY/NU0z3Z962i9eIZ2Y=)
3: RHL3XX7_eL5Sd7PtgFRm8c0mqx8.roa (hash: iXzaXbJN/wQTFbRM2yp/OOeZq8dsLS6ERqyx8upKLQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:13:b2:2b:d6:3f:2d:8a:17:8f:fb:c4:7c:04:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Validity
Not Before: Mar 29 09:00:50 2026 GMT
Not After : Mar 30 09:00:50 2026 GMT
Subject: CN=4683db150f5c59475ea74159ab0d378f238898fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:cc:21:cf:48:1a:5f:09:1e:70:b2:12:a3:
19:b4:e9:17:35:dc:d4:15:db:f1:ff:27:7d:fb:ae:
d5:94:a6:6e:26:24:18:d3:b1:c7:01:a6:9e:80:74:
ce:71:e4:c9:fc:09:54:ea:17:57:74:49:aa:21:71:
64:81:91:50:a3:1c:bd:06:27:4d:b7:8c:3b:68:36:
d7:0b:88:a4:08:a1:c4:fb:1f:a6:b7:62:9e:cc:6a:
13:de:2e:68:d8:61:86:db:62:20:97:62:59:a1:90:
a9:50:05:af:ec:f2:8f:75:6b:75:a6:a8:c9:53:0c:
ba:76:56:44:2f:36:59:d7:7a:b0:53:c5:4f:0f:64:
e5:43:28:05:ce:49:c9:d4:fa:9e:3e:02:0f:de:ec:
73:e1:b3:51:f8:45:11:21:ba:64:9b:17:dd:ca:3b:
f7:90:b6:f3:d0:0b:30:0d:4b:20:13:06:d4:3a:5c:
68:9e:b9:32:b2:4b:70:d2:c3:d7:42:08:f8:c0:af:
49:02:d5:fa:a9:e3:d4:b3:48:9e:a3:a5:bf:c6:63:
7d:3f:59:70:10:26:b8:3b:bc:35:7b:f5:45:27:73:
b8:49:90:67:5a:bf:98:29:3b:79:7a:07:ee:01:69:
db:b9:ec:f9:e1:f2:f3:de:5f:8a:ef:31:d4:d0:ee:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:83:DB:15:0F:5C:59:47:5E:A7:41:59:AB:0D:37:8F:23:88:98:FE
X509v3 Authority Key Identifier:
keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:76:f0:69:8b:8f:c0:11:4e:cd:b9:9a:07:d9:05:21:48:06:
88:5a:92:21:c8:16:0f:5f:2b:28:75:db:cb:4c:17:df:84:da:
a8:ea:72:8f:da:14:a9:d7:6d:b9:91:93:ad:0e:16:11:5f:f9:
0a:76:5c:e7:64:a9:14:97:67:48:5b:57:33:db:37:a2:76:c4:
71:2d:99:01:2c:b5:ce:76:6a:77:17:a8:9c:dc:77:23:8b:c0:
0c:bf:30:90:57:51:4e:dc:05:30:da:01:50:27:1f:85:b7:3d:
c3:fb:2c:4e:bb:e7:35:c7:af:2d:fd:61:cf:57:82:c1:36:e3:
b7:8b:01:20:05:53:43:69:d3:2d:3f:e9:d4:f7:fe:80:bf:2a:
fa:a7:8b:d0:b8:b1:2f:88:01:08:aa:95:25:3a:2d:3e:24:ea:
2d:fe:9a:d3:80:31:e4:88:7e:36:69:72:c3:c0:03:41:7f:8d:
f7:9f:00:29:8c:70:8b:22:e4:48:cb:c6:ff:d9:93:39:a4:3d:
ad:a5:e8:02:01:53:2b:15:b9:75:94:28:14:02:4f:5a:33:c8:
b8:7a:f4:a0:3a:f1:b0:14:05:7b:de:c2:c9:82:c7:27:08:e6:
05:77:27:a9:c6:fa:de:b6:43:eb:ac:aa:90:5c:db:fd:93:40:
d2:7d:36:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:46 2026 by rpki-client