Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File: C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier: 2ZNIif99XlU1pDebxgG8lRBkEbKLNW+JMp3J/XHhhic=
Subject key identifier: 14:98:FF:33:D9:D5:06:FE:CB:D7:3F:6C:C1:D6:10:DF:9C:A4:8E:1F
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer: /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial: 019F17C366A747F3D50D4D7C0C6373DA426E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number: 1990
Signing time: Tue 30 Jun 2026 09:01:49 +0000
Manifest this update: Tue 30 Jun 2026 09:01:49 +0000
Manifest next update: Wed 01 Jul 2026 09:01:49 +0000
Files and hashes: 1: Booj1ASQ-cXKqkh-r2x7fAQ_0Uw.roa (hash: zF9nqvpnqLrzZFWAUgKZQIRUSTlgxgEW6M1SkVs+U8w=)
2: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: zBJizJ4Sp+ZHc5WnJAaHjg/st6DTYCyZ2q+/jfUUIwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:66:a7:47:f3:d5:0d:4d:7c:0c:63:73:da:42:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
Validity
Not Before: Jun 30 09:01:49 2026 GMT
Not After : Jul 1 09:01:49 2026 GMT
Subject: CN=1498ff33d9d506fecbd73f6cc1d610df9ca48e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:26:c4:c3:53:cb:25:fd:d0:fb:55:e1:9e:
9b:04:bb:49:9b:30:9e:91:42:31:f2:d0:4f:1a:3d:
d9:4f:93:88:83:7b:08:8d:db:29:39:35:05:48:2d:
9a:7b:d1:7c:8a:70:9a:b2:29:61:9f:63:9d:91:2c:
71:69:fe:51:f7:ec:54:c9:b7:ba:b5:5a:c7:6c:fb:
5a:21:ec:0a:40:3b:a6:e5:9a:c9:39:9b:bd:8f:35:
5c:be:36:e3:c8:fd:b5:f3:e5:c7:e2:73:5f:d4:4c:
a4:7f:33:8f:3e:14:62:07:84:13:0b:fd:2e:b5:b3:
c2:00:4f:3f:f6:d0:23:f3:39:7c:0e:05:15:28:ed:
16:14:04:6f:f4:2d:ce:e4:36:65:c3:a1:02:bc:ad:
9c:ad:49:1a:ab:21:04:da:78:c9:40:14:37:df:97:
17:26:8e:ba:07:59:ca:23:20:7d:b6:71:e8:ba:55:
4d:c8:31:76:c0:5f:09:e5:42:d9:98:30:dd:76:f6:
67:8e:4b:f3:98:5c:11:af:ce:13:a8:21:82:25:84:
96:f5:78:e2:a9:b2:a2:77:ad:42:31:91:9b:31:fe:
28:19:bb:3b:08:30:9c:a6:31:58:d5:58:23:02:22:
0c:0e:74:a7:0e:57:88:bd:fd:22:e0:c7:c2:5c:a3:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:98:FF:33:D9:D5:06:FE:CB:D7:3F:6C:C1:D6:10:DF:9C:A4:8E:1F
X509v3 Authority Key Identifier:
keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:33:d3:b6:16:94:18:55:45:6b:cb:69:11:36:56:25:ff:4b:
06:6d:70:50:4a:79:1b:c5:12:2a:2e:c7:46:f6:15:1e:4f:a8:
da:df:c8:95:13:29:f8:40:58:17:dd:5d:5b:b0:5b:eb:64:6f:
b0:4b:c6:d9:16:ca:28:ee:da:46:6f:52:ae:9d:cf:7b:08:14:
77:8f:c5:4e:0e:19:ef:66:82:82:4b:85:2c:5d:0a:c9:d1:5f:
85:93:c0:01:0b:4e:5c:e0:2b:21:a1:24:77:44:bc:3e:1b:e2:
79:07:51:c9:37:1a:f6:63:48:bf:01:20:d0:1c:7c:86:c4:eb:
75:7c:1e:f7:ec:08:36:92:bf:93:23:38:d5:6e:a8:89:20:f9:
0b:5f:50:e2:da:68:fb:8d:8c:5c:75:2e:b1:7a:41:79:99:c2:
80:a9:07:b4:f1:8f:66:a2:aa:61:e7:ea:ec:03:28:1e:fd:0b:
78:7c:ff:a0:33:6b:de:82:17:20:dd:8f:9d:74:de:8a:28:d8:
ed:e8:da:49:ce:95:c7:5a:ed:9b:5c:d4:36:98:1d:5a:45:72:
1a:8f:2d:93:13:4d:57:a9:09:76:11:5b:17:84:11:5f:ae:4e:
ca:df:4e:fa:2d:87:2c:42:38:0f:9a:d5:25:c0:44:06:46:05:
1f:92:b3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:35 2026 by rpki-client