
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
File: pszH03YZ_dof84uT_s5gq9SYq4Q.mft (raw, json)
Hash identifier: rVr+tK/3J3QZzxg/wIEvuHzqP0LbeHetIXalwq5XT/Y=
Subject key identifier: 21:4C:FD:D9:2E:6B:EC:2C:08:11:7F:F2:A0:F9:19:8A:B6:C4:C8:BF
Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
Certificate issuer: /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Certificate serial: 01A092B47D5F2E87E84365282A188962301E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
Manifest number: 0345
Signing time: Fri 11 Sep 2026 23:01:36 +0000
Manifest this update: Fri 11 Sep 2026 23:01:36 +0000
Manifest next update: Sat 12 Sep 2026 23:01:36 +0000
Files and hashes: 1: cNWWHlQTLoBnWDX0Cr-HJhDwkyQ.roa (hash: RBDJxnmtcnqGTkRo8S/I5iM/CbwoBW03aRJgb8eIgr4=)
2: pszH03YZ_dof84uT_s5gq9SYq4Q.crl (hash: Tdl/dbZG6oj6/KkWYqhBk+9GTHGvWtK7tBcHnOw7ZRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 23:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:b4:7d:5f:2e:87:e8:43:65:28:2a:18:89:62:30:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Validity
Not Before: Sep 11 23:01:36 2026 GMT
Not After : Sep 12 23:01:36 2026 GMT
Subject: CN=214cfdd92e6bec2c08117ff2a0f9198ab6c4c8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:15:9a:9d:a0:10:fe:1c:3f:a0:4a:9e:a7:
30:d9:c3:9f:14:ae:a7:30:32:c2:c4:55:82:d9:22:
71:13:f7:b7:88:59:c7:02:6d:c4:2e:7b:9a:43:9a:
7c:b5:f2:81:8d:ff:24:2d:f1:3e:f9:ba:f6:64:ce:
34:64:31:a8:be:83:01:05:fd:dd:88:5b:30:aa:0d:
cd:39:5f:9d:f3:66:af:0f:ee:08:91:f5:04:93:e6:
44:9b:5c:ba:3b:d9:3e:29:d6:f4:4a:dd:8e:80:15:
da:d1:13:58:2f:1e:c9:4d:5b:3b:cb:b4:09:a2:00:
2c:a1:bb:cf:03:d8:c8:33:68:92:95:f5:cb:cc:3c:
8a:89:98:cb:25:13:07:d7:27:65:e2:a4:4a:05:52:
bc:26:af:1f:7d:1d:4f:4c:17:33:fd:9b:d8:11:39:
6c:b0:7b:c8:77:04:31:b0:09:76:e6:4f:43:55:82:
3d:2e:a2:f7:e3:8b:63:d0:8c:da:16:b1:72:1c:57:
87:9f:2e:20:40:bc:90:48:c1:7a:bb:32:b7:08:2f:
4c:8f:1a:e6:a5:bd:e5:91:d3:db:d5:7e:a2:15:d4:
b3:69:b3:ac:b8:a2:83:b8:41:08:18:77:2d:bf:3d:
55:eb:29:6c:86:ed:db:87:75:9f:f3:9d:ad:c0:ca:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4C:FD:D9:2E:6B:EC:2C:08:11:7F:F2:A0:F9:19:8A:B6:C4:C8:BF
X509v3 Authority Key Identifier:
keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d5:cc:38:4e:29:90:e0:ff:fa:97:38:bb:6f:ca:02:bb:fe:
a9:a5:a0:7e:1f:ce:7d:c5:c4:53:c9:9e:a7:6e:4c:00:33:69:
39:45:10:17:36:f2:07:4d:66:fe:25:f5:27:68:c1:d3:d6:7d:
e7:c3:d6:c4:bb:d4:d5:3a:ef:a0:38:5d:31:29:c2:ce:05:7c:
5b:ff:4b:7e:43:3c:3f:8a:b2:99:21:cf:e0:6d:8e:f2:af:e6:
02:81:37:e3:f2:82:e1:e4:2f:f0:45:f2:9a:32:a9:42:cf:81:
88:41:2d:86:ed:98:ac:31:83:db:69:d1:17:8c:ac:cd:32:11:
63:ca:8c:ef:54:6a:8f:a2:31:68:fb:7e:fc:63:9d:77:45:c5:
1b:38:5d:f6:10:60:6e:95:0a:ec:48:39:b3:63:b3:de:c0:db:
85:17:54:f6:aa:3a:ec:7e:0b:8a:23:ea:8e:d0:05:d5:fa:23:
b8:6c:e0:38:07:ad:df:56:de:03:bf:25:d5:7a:db:9d:33:5a:
08:14:5d:49:3b:7b:70:4e:57:f0:0e:d6:01:03:4e:16:b2:2c:
8c:e7:33:27:80:22:7c:9c:83:a9:7c:78:b0:7b:78:f7:40:26:
8b:4c:05:a6:b3:99:84:b1:e9:fa:67:bd:ee:22:2c:f1:07:b5:
09:cc:05:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCStH1fLofoQ2UoKhiJYjAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Y2NjN2QzNzYxOWZkZGExZmYzOGI5M2ZlY2U2MGFiZDQ5
OGFiODQwHhcNMjYwOTExMjMwMTM2WhcNMjYwOTEyMjMwMTM2WjAzMTEwLwYDVQQD
EygyMTRjZmRkOTJlNmJlYzJjMDgxMTdmZjJhMGY5MTk4YWI2YzRjOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOcVmp2gEP4cP6BKnqcw2cOfFK6n
MDLCxFWC2SJxE/e3iFnHAm3ELnuaQ5p8tfKBjf8kLfE++br2ZM40ZDGovoMBBf3d
iFswqg3NOV+d82avD+4IkfUEk+ZEm1y6O9k+Kdb0St2OgBXa0RNYLx7JTVs7y7QJ
ogAsobvPA9jIM2iSlfXLzDyKiZjLJRMH1ydl4qRKBVK8Jq8ffR1PTBcz/ZvYETls
sHvIdwQxsAl25k9DVYI9LqL344tj0IzaFrFyHFeHny4gQLyQSMF6uzK3CC9Mjxrm
pb3lkdPb1X6iFdSzabOsuKKDuEEIGHctvz1V6ylshu3bh3Wf852twMo95wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFM/dkua+wsCBF/8qD5GYq2xMi/MB8GA1UdIwQY
MBaAFKbMx9N2Gf3aH/OLk/7OYKvUmKuEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAt
ZjFiYzk1Njg1OGFhLzEvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAtZjFiYzk1Njg1OGFh
LzEvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetXMOE4p
kOD/+pc4u2/KArv+qaWgfh/OfcXEU8mep25MADNpOUUQFzbyB01m/iX1J2jB09Z9
58PWxLvU1TrvoDhdMSnCzgV8W/9LfkM8P4qymSHP4G2O8q/mAoE34/KC4eQv8EXy
mjKpQs+BiEEthu2YrDGD22nRF4yszTIRY8qM71Rqj6IxaPt+/GOdd0XFGzhd9hBg
bpUK7Eg5s2Oz3sDbhRdU9qo67H4LiiPqjtAF1fojuGzgOAet31beA78l1XrbnTNa
CBRdSTt7cE5X8A7WAQNOFrIsjOczJ4AifJyDqXx4sHt490Ami0wFprOZhLHp+me9
7iIs8Qe1CcwF8A==
-----END CERTIFICATE-----
Generated at Sat Sep 12 09:43:51 2026 by rpki-client