Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: uoMEJfP0onRKKNRxrMZ1bdimIkerSdzc4fTZ8q2B3Dw=
Subject key identifier: A2:D0:51:1B:67:B6:D7:7D:49:81:2E:F4:50:3A:E4:47:08:0C:E3:58
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 019D37C1173D49317038F79BAC1ED081CCF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 132E
Signing time: Sun 29 Mar 2026 04:01:34 +0000
Manifest this update: Sun 29 Mar 2026 04:01:34 +0000
Manifest next update: Mon 30 Mar 2026 04:01:34 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: BVGeajbvj+B6GZqCkXwEea8qBbKNbhGzf4dthjXm/gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:17:3d:49:31:70:38:f7:9b:ac:1e:d0:81:cc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Mar 29 04:01:34 2026 GMT
Not After : Mar 30 04:01:34 2026 GMT
Subject: CN=a2d0511b67b6d77d49812ef4503ae447080ce358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:51:74:5c:9a:95:9c:7e:0e:7c:ac:73:97:89:
f3:22:9d:12:9a:e7:cc:d7:24:fd:d0:ee:ae:40:71:
2a:0b:a5:6d:29:16:c9:ff:8f:11:b3:0e:3c:18:c5:
2a:f6:1c:61:35:39:db:93:d3:8c:62:fd:96:ab:eb:
b5:44:52:dd:5d:01:f7:06:61:c0:94:f7:fb:e6:8f:
e9:55:aa:3c:90:2a:28:18:c1:0f:d1:a5:ff:3b:a4:
49:4a:3d:03:52:9f:f9:32:b3:43:8a:05:1a:75:52:
02:fc:e7:90:1a:24:ec:d8:ce:60:bc:82:c3:87:9d:
2b:a1:f5:e0:5d:15:d7:6d:89:cf:d5:5f:19:e7:0a:
a3:ab:21:95:5c:2a:c3:67:71:cf:d5:2d:c4:f5:7d:
4b:00:41:2f:1f:07:2d:58:da:34:0a:aa:16:eb:9e:
5d:9b:92:9b:82:cf:28:0f:fd:e8:5c:be:cc:8d:cf:
95:cf:66:3e:80:54:3b:31:e7:b9:bf:3d:91:55:75:
56:fa:f0:56:d2:08:d3:a2:31:6a:0d:23:a8:3e:15:
4a:fd:b6:f5:6a:94:44:68:3a:ea:07:80:5e:1c:90:
66:2d:c7:4a:55:38:16:2e:3c:cb:06:fd:08:6f:62:
0b:85:b0:4d:51:34:44:98:23:3e:d2:64:ba:95:13:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D0:51:1B:67:B6:D7:7D:49:81:2E:F4:50:3A:E4:47:08:0C:E3:58
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cb:84:9c:b5:dc:bd:cd:23:a5:b7:61:d5:42:a9:87:4a:b8:
5d:5e:5c:88:56:88:f0:22:1f:79:72:39:72:da:d1:05:0f:ca:
24:34:5c:81:1d:e7:b6:0c:90:a5:59:7e:69:f8:54:00:ce:cc:
bb:74:e8:05:05:4c:69:d1:e4:0e:dd:30:5e:f7:5c:76:26:2a:
ad:f8:31:37:6c:61:1b:d5:ab:e4:8f:94:de:ee:9a:de:91:5d:
75:5f:7d:09:4c:1a:98:f9:b3:39:3a:c2:90:2c:dc:1f:2c:2b:
a9:23:84:4e:c2:01:7d:9d:8b:1c:7f:e4:4c:91:9d:17:56:ac:
45:f3:94:ad:dc:d5:e6:b7:94:61:2f:da:07:cc:a0:3b:c9:56:
63:a9:09:8c:ac:48:2c:84:ad:1a:4f:1d:36:e5:84:ee:d5:f4:
b3:19:e4:f2:6d:1c:05:c0:c8:fd:e2:ad:16:38:13:81:5a:cb:
0b:16:94:e3:25:3e:80:fc:14:4c:f6:09:d7:93:16:d3:ad:a3:
73:86:dc:89:38:e3:54:ad:c9:54:62:80:82:20:fb:48:61:79:
1f:f2:cb:79:31:77:19:d4:d5:84:3f:2a:ea:7e:88:99:2f:15:
44:8d:12:f8:ee:3d:30:b4:d3:8d:5b:fc:cc:9f:44:fd:d2:1b:
5e:a5:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:56:19 2026 by rpki-client