Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
File: pszH03YZ_dof84uT_s5gq9SYq4Q.mft (raw, json)
Hash identifier: 17Y9gWYeyy9OemRC3yicxIwNS6BFzO4motwZsUnFjlk=
Subject key identifier: 33:EB:C3:F0:72:A9:22:D1:E1:2F:6F:38:92:4C:89:CF:65:20:BB:A6
Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
Certificate issuer: /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Certificate serial: 019DAB3166E9FB16D6F2F62EA8D027661EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
Manifest number: 01C4
Signing time: Mon 20 Apr 2026 14:00:34 +0000
Manifest this update: Mon 20 Apr 2026 14:00:34 +0000
Manifest next update: Tue 21 Apr 2026 14:00:34 +0000
Files and hashes: 1: cNWWHlQTLoBnWDX0Cr-HJhDwkyQ.roa (hash: RBDJxnmtcnqGTkRo8S/I5iM/CbwoBW03aRJgb8eIgr4=)
2: pszH03YZ_dof84uT_s5gq9SYq4Q.crl (hash: H9zURouqlsLOPYgXW8WksKgKWSOTUzle7HIDz5+IaTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 13:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:31:66:e9:fb:16:d6:f2:f6:2e:a8:d0:27:66:1e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Validity
Not Before: Apr 20 14:00:34 2026 GMT
Not After : Apr 21 14:00:34 2026 GMT
Subject: CN=33ebc3f072a922d1e12f6f38924c89cf6520bba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:3a:96:4c:13:9c:4f:7b:8f:d4:f4:b5:30:
40:df:eb:14:f5:c1:55:a4:47:3b:d3:23:8e:30:5a:
74:41:09:c5:63:65:b4:e1:a8:58:af:e5:25:de:eb:
05:56:65:f3:57:d2:8f:6c:64:e9:b7:e5:6a:7e:ea:
5b:b5:20:be:25:d7:38:fb:29:15:fc:45:ce:26:6b:
ad:02:54:c6:30:8f:6d:ac:16:c1:ed:e3:76:47:97:
69:03:c2:d1:47:72:6b:e7:f0:5b:75:42:18:2e:9f:
ad:9e:27:19:ae:f8:d6:e4:e1:81:82:2a:01:7f:c3:
64:17:ec:43:e8:bd:e5:ba:e7:ce:2b:0e:8d:86:90:
57:5e:b3:ba:8e:e8:83:d9:bb:7c:c2:c6:d5:07:f4:
30:2e:cf:c6:9e:b5:d5:dc:bb:5e:44:10:d6:3f:08:
c2:4e:af:45:59:64:79:2d:41:15:b1:43:56:50:79:
76:1f:f6:a3:e7:c2:09:3b:4d:ea:b1:f1:0e:3c:61:
33:e9:1f:27:f1:25:80:83:23:61:f0:26:b7:68:16:
93:e0:7d:70:62:49:11:df:ac:b4:93:fc:18:47:aa:
89:05:bf:ee:73:61:00:e1:74:28:7a:79:59:03:9b:
9f:32:1e:e1:08:a1:0e:32:d3:ca:80:31:6a:db:0a:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EB:C3:F0:72:A9:22:D1:E1:2F:6F:38:92:4C:89:CF:65:20:BB:A6
X509v3 Authority Key Identifier:
keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fb:7d:41:ee:6e:86:a2:a4:ec:ee:fd:8f:51:86:c7:87:19:
d5:78:af:ba:82:e1:26:6b:a0:3e:90:d5:e3:d2:d7:73:37:7c:
49:e1:68:b5:e7:a5:17:8b:af:55:15:bb:b4:6b:7f:41:03:a4:
79:d9:2c:a5:b4:db:f5:c2:92:e6:da:b4:39:cb:11:ef:28:17:
37:c4:b7:0f:3c:18:98:d0:5a:0a:05:05:30:32:6d:2b:7f:d8:
83:58:c9:b2:98:57:ac:cb:64:b4:39:97:10:c6:ff:05:37:9e:
56:65:7e:59:85:77:63:5d:af:e6:ff:20:aa:17:2c:a9:8e:c2:
ee:b1:75:b9:13:08:0a:3a:b0:9a:a6:19:4a:8a:93:b2:8a:11:
2f:fa:3f:cd:c5:23:a5:fb:b0:36:8d:94:e7:c6:d6:d6:49:1d:
95:04:30:b1:bd:35:b5:47:f5:9c:b2:28:2a:a8:0b:c9:94:42:
f3:ee:65:ba:c9:a8:e2:08:3a:17:93:55:0a:16:e9:ba:54:8e:
42:1c:da:e3:ff:ef:89:09:1e:86:d3:31:08:de:51:62:d5:af:
a8:37:d2:2f:8b:a8:02:d0:3a:d9:69:74:ce:a1:fa:d8:37:19:
f7:85:61:0f:af:bb:e3:f1:24:aa:a3:7f:95:fe:f1:89:d5:b9:
d3:49:09:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2rMWbp+xbW8vYuqNAnZh64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Y2NjN2QzNzYxOWZkZGExZmYzOGI5M2ZlY2U2MGFiZDQ5
OGFiODQwHhcNMjYwNDIwMTQwMDM0WhcNMjYwNDIxMTQwMDM0WjAzMTEwLwYDVQQD
EygzM2ViYzNmMDcyYTkyMmQxZTEyZjZmMzg5MjRjODljZjY1MjBiYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy86lkwTnE97j9T0tTBA3+sU9cFV
pEc70yOOMFp0QQnFY2W04ahYr+Ul3usFVmXzV9KPbGTpt+VqfupbtSC+Jdc4+ykV
/EXOJmutAlTGMI9trBbB7eN2R5dpA8LRR3Jr5/BbdUIYLp+tnicZrvjW5OGBgioB
f8NkF+xD6L3luufOKw6NhpBXXrO6juiD2bt8wsbVB/QwLs/GnrXV3LteRBDWPwjC
Tq9FWWR5LUEVsUNWUHl2H/aj58IJO03qsfEOPGEz6R8n8SWAgyNh8Ca3aBaT4H1w
YkkR36y0k/wYR6qJBb/uc2EA4XQoenlZA5ufMh7hCKEOMtPKgDFq2wrWkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPrw/ByqSLR4S9vOJJMic9lILumMB8GA1UdIwQY
MBaAFKbMx9N2Gf3aH/OLk/7OYKvUmKuEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAt
ZjFiYzk1Njg1OGFhLzEvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAtZjFiYzk1Njg1OGFh
LzEvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/t9Qe5u
hqKk7O79j1GGx4cZ1XivuoLhJmugPpDV49LXczd8SeFoteelF4uvVRW7tGt/QQOk
edkspbTb9cKS5tq0OcsR7ygXN8S3DzwYmNBaCgUFMDJtK3/Yg1jJsphXrMtktDmX
EMb/BTeeVmV+WYV3Y12v5v8gqhcsqY7C7rF1uRMICjqwmqYZSoqTsooRL/o/zcUj
pfuwNo2U58bW1kkdlQQwsb01tUf1nLIoKqgLyZRC8+5lusmo4gg6F5NVChbpulSO
Qhza4//viQkehtMxCN5RYtWvqDfSL4uoAtA62Wl0zqH62DcZ94VhD6+74/EkqqN/
lf7xidW500kJtw==
-----END CERTIFICATE-----
Generated at Mon Apr 20 23:58:42 2026 by rpki-client