Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier: Ble8CcQv/gNJYjMjSJBpNCcNHXNmPBIFR0ehjBxhpoQ=
Subject key identifier: FC:EC:80:5C:BE:F6:29:59:97:53:A5:E8:92:70:E4:BF:A8:37:EC:7E
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial: 019F36AA4D96B48A9C3ECAFB47B9ADD1C149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number: 154E
Signing time: Mon 06 Jul 2026 09:02:38 +0000
Manifest this update: Mon 06 Jul 2026 09:02:38 +0000
Manifest next update: Tue 07 Jul 2026 09:02:38 +0000
Files and hashes: 1: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: GP6T3KMTl/spZbH+mYwiH/CofVbaefxTyDDVwU9hAVU=)
2: RNcEVKn_YGokJaou-FFvGOIS8ag.roa (hash: +QqLk1UMMwGnBKT5dxNl032oE64z8hg1X5YrO9LqWdo=)
3: jG9EgXRBLGvOBo4GIXCZVUuSt2A.roa (hash: ulV9PXQSp7gV/2hgy8hXiIjeElHgC51tTqI2j2NsiPw=)
4: ry7mAo1iVDE-vQJVtpiChZag52A.roa (hash: /gsQ2B1v3KhCgm7kkq8lHyOWScapaf0eIQ7WAnTVr3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:aa:4d:96:b4:8a:9c:3e:ca:fb:47:b9:ad:d1:c1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Validity
Not Before: Jul 6 09:02:38 2026 GMT
Not After : Jul 7 09:02:38 2026 GMT
Subject: CN=fcec805cbef629599753a5e89270e4bfa837ec7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:c3:fa:44:e2:b5:1d:95:27:ac:e7:4f:a5:
cf:18:05:3f:46:ed:c4:c3:a1:3b:70:3e:1f:ee:ae:
70:4a:56:5d:f0:9f:a3:be:c2:d2:18:6c:de:f4:34:
ca:b8:a0:b8:04:b6:bb:ae:16:70:f4:0c:9e:3d:d9:
db:83:02:81:e7:21:9c:3e:69:81:02:af:74:e2:ae:
f9:87:95:7b:2d:ed:31:f5:61:c7:cc:5f:42:a4:9b:
de:bd:79:4a:29:2d:0b:1c:98:cf:64:62:67:77:31:
54:50:f6:77:ef:f0:55:c3:8a:99:d6:9a:17:a1:19:
2e:f2:84:9f:6e:89:52:48:67:ad:95:de:62:28:1a:
53:da:d7:fa:ad:c7:c8:a8:0e:59:fb:53:16:25:a7:
12:4e:89:a7:be:67:04:88:d6:ff:0c:34:93:c0:a9:
d5:3b:c4:ba:81:1e:da:aa:d0:1f:04:73:70:db:d0:
15:0a:9e:39:17:34:7d:11:5e:81:64:cd:15:1c:18:
fb:10:85:43:d9:73:97:6f:86:24:21:dc:12:35:f7:
1e:bc:6b:27:73:a3:1d:4c:02:fa:2a:ec:81:ad:de:
da:f7:f8:88:71:ea:cd:3f:b6:24:51:64:6c:1a:fe:
38:8e:4e:95:db:f1:c0:70:df:83:c7:d8:bc:49:87:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EC:80:5C:BE:F6:29:59:97:53:A5:E8:92:70:E4:BF:A8:37:EC:7E
X509v3 Authority Key Identifier:
keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1b:44:08:f8:ad:44:be:a3:30:4a:d9:6e:d4:54:04:f9:07:
8d:21:19:20:0c:79:45:ae:d1:75:2d:17:cf:4e:c9:19:2b:e6:
13:0e:f4:51:af:35:06:2c:e5:d8:8b:94:fa:85:1e:a0:7a:b4:
ce:86:a4:12:9b:08:9e:80:3c:c8:c2:86:1d:c0:1f:ef:3d:6f:
5c:26:db:29:fa:4b:d2:6d:6a:69:54:90:a3:e7:c6:cf:ac:79:
44:75:7a:c5:79:e1:e8:81:e3:aa:4a:84:3b:b3:ab:1e:76:d7:
c7:f2:db:22:f7:c8:93:82:1a:18:00:0b:4f:a2:25:ee:64:90:
10:aa:69:3a:c6:57:bc:90:bf:e3:e4:32:7a:0d:c6:17:3c:d0:
95:b0:53:33:63:03:78:8d:c9:5d:56:32:2b:dd:db:1b:c4:a9:
77:e5:64:c5:da:77:84:7a:7e:08:7f:2b:06:8e:f9:95:6b:b7:
0c:73:36:4d:a5:db:42:77:99:ea:87:c4:dc:d0:14:7e:b2:23:
4e:bb:1a:e2:05:45:03:43:56:40:50:da:e6:58:3c:ea:40:42:
10:6d:b4:85:fd:b6:87:50:80:7e:38:13:00:92:4e:5f:2d:63:
18:57:12:3f:fb:e4:91:59:3d:cf:fd:09:c9:c4:87:5a:a9:c1:
66:d0:b9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:17:37 2026 by rpki-client