Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier: S1MNO51gPK77wh7XgWTuyoRU6BtzDmzSRJL8jGQatno=
Subject key identifier: 17:2F:DC:57:FA:E3:58:BE:DE:38:A9:9A:27:AF:6A:A1:BC:2D:7A:ED
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial: 019D38D3815B6087849AA3580C524E5F6831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number: 1446
Signing time: Sun 29 Mar 2026 09:01:18 +0000
Manifest this update: Sun 29 Mar 2026 09:01:18 +0000
Manifest next update: Mon 30 Mar 2026 09:01:18 +0000
Files and hashes: 1: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: CP7nvkjUxL2JJUYlHKc0vSIBua8OhYAr1bCg2uXnAqs=)
2: RNcEVKn_YGokJaou-FFvGOIS8ag.roa (hash: +QqLk1UMMwGnBKT5dxNl032oE64z8hg1X5YrO9LqWdo=)
3: jG9EgXRBLGvOBo4GIXCZVUuSt2A.roa (hash: ulV9PXQSp7gV/2hgy8hXiIjeElHgC51tTqI2j2NsiPw=)
4: ry7mAo1iVDE-vQJVtpiChZag52A.roa (hash: /gsQ2B1v3KhCgm7kkq8lHyOWScapaf0eIQ7WAnTVr3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:81:5b:60:87:84:9a:a3:58:0c:52:4e:5f:68:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Validity
Not Before: Mar 29 09:01:18 2026 GMT
Not After : Mar 30 09:01:18 2026 GMT
Subject: CN=172fdc57fae358bede38a99a27af6aa1bc2d7aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:a5:f7:7d:c5:f4:0f:b8:cc:8e:0b:73:ec:
68:8e:77:06:4d:28:18:c1:54:de:1f:8d:e3:2b:bf:
21:a2:fa:73:2f:30:28:82:64:f0:2c:df:e5:f1:9e:
8f:9d:2e:9d:e2:43:d6:54:7a:e7:e4:0b:b3:67:52:
99:39:6a:9d:53:c8:dd:28:c8:fa:3b:ee:74:58:57:
6f:ca:a2:c0:9f:83:59:a6:66:e4:7f:e8:9b:60:f8:
13:e8:43:e4:76:cd:56:bf:3b:9a:bd:b7:b5:86:34:
31:76:54:40:87:f9:f6:97:b2:a1:5c:a4:b8:60:28:
14:eb:0d:4c:50:f0:7a:75:f7:7b:29:a2:09:cc:ac:
0b:9a:0e:d9:24:21:7b:3a:28:39:c7:47:d7:4f:90:
74:a8:9a:3c:f7:45:42:a8:20:66:ce:4b:41:42:1c:
d4:cb:33:82:05:ff:c9:a2:9b:da:67:bd:ae:34:c8:
25:c8:ce:27:2f:87:49:07:bb:2d:49:e0:e2:4b:5a:
3d:63:81:5b:da:8a:ff:1d:b9:d4:c6:43:ed:5c:b7:
ef:bf:8b:4d:c6:f9:aa:01:60:42:ca:2b:21:8c:4b:
96:21:d4:64:e0:aa:7e:6b:93:c5:b6:0c:69:ac:78:
2b:03:33:ce:1b:2d:54:2a:c5:71:9e:15:c2:9d:25:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2F:DC:57:FA:E3:58:BE:DE:38:A9:9A:27:AF:6A:A1:BC:2D:7A:ED
X509v3 Authority Key Identifier:
keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9c:88:99:09:72:d4:b4:4b:6e:97:fa:c6:f9:80:ae:ca:fd:
8f:e2:47:00:03:cb:c9:42:38:1c:a6:27:09:0b:38:6c:f6:53:
b1:73:b3:dc:87:8e:5e:03:97:3c:bb:7f:5f:e5:1a:96:9b:75:
21:75:59:2e:af:5b:4b:e2:b2:72:2d:1e:b5:ef:f2:e8:d0:f1:
f8:96:4d:e4:17:e1:fd:a5:f4:bc:40:ef:c6:45:96:43:34:ca:
40:69:47:d8:1c:2c:27:fd:fb:3b:a2:8e:24:27:18:87:da:ca:
c5:fa:fc:94:3f:0b:a8:c0:2f:47:5a:87:7a:05:49:7d:27:e6:
6b:e1:00:5c:18:97:a2:6f:89:da:8e:90:da:29:95:7d:4f:ab:
1c:28:af:8d:62:24:7b:e6:27:e3:c9:03:cd:b2:6b:df:f5:58:
cf:38:06:c8:f7:96:a7:2d:91:c4:79:dc:b7:80:0f:a9:86:5e:
63:3e:b3:fb:f1:90:c8:b8:3d:fb:c9:7c:77:f2:37:d8:35:d6:
6b:aa:0f:ce:47:67:f6:a5:ea:c4:73:a4:d5:ac:31:22:ea:2b:
52:36:cd:5f:a9:2d:67:b8:f8:b8:65:7f:df:55:29:34:2d:1c:
f7:c5:7a:4c:8b:1a:e1:ac:d5:c0:45:34:2a:17:40:6e:ee:0d:
5a:e1:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:09 2026 by rpki-client