Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
File: PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft (raw, json)
Hash identifier: SOb4UtK4EsL1Jy4G6ZMeyF2mQPtcsUs7JR1liOW5QeY=
Subject key identifier: FC:9C:E5:27:6A:27:A1:CE:0A:22:21:0B:C0:69:51:2A:07:2F:4E:7D
Authority key identifier: 3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
Certificate issuer: /CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Certificate serial: 01A001A642CE5704B1A49D9CD45201001ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
Manifest number: 0F1D
Signing time: Fri 14 Aug 2026 19:01:08 +0000
Manifest this update: Fri 14 Aug 2026 19:01:08 +0000
Manifest next update: Sat 15 Aug 2026 19:01:08 +0000
Files and hashes: 1: PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl (hash: /uVvHs8Z7W8IPwJFZ/C61NpkJC1sUwlU1yx9iCeVlu4=)
2: TLFiEoQRGLVMCGc46Mn0G99fC5U.roa (hash: gDFtNWXwzA45vosk76KSuCgqR0QSeN+bVcyur4756BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:42:ce:57:04:b1:a4:9d:9c:d4:52:01:00:1a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Validity
Not Before: Aug 14 19:01:08 2026 GMT
Not After : Aug 15 19:01:08 2026 GMT
Subject: CN=fc9ce5276a27a1ce0a22210bc069512a072f4e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:87:b3:ff:db:ab:34:98:7e:3d:c2:e6:dc:
f6:f1:4f:05:a6:64:c8:be:08:2f:d3:e3:21:9c:b4:
e1:d0:2d:a1:4d:5c:0c:d0:03:26:36:1b:0f:32:69:
95:93:20:0a:c5:a7:fe:ae:88:e1:96:a7:ea:f5:6e:
a5:c8:de:e4:63:bf:44:8d:39:88:86:c6:03:ee:80:
77:4a:7d:a4:f0:af:d5:47:33:be:85:42:8b:56:dd:
42:3d:2c:cb:af:47:3b:3a:54:99:84:28:2d:fe:6f:
c5:d0:84:1f:90:2f:6f:3c:9b:2f:68:8b:e0:18:a1:
61:2c:f1:69:78:95:d5:9f:37:38:d0:fd:f8:d4:0d:
fd:c5:42:07:bf:71:be:05:a4:80:7a:c8:9e:0a:75:
37:08:bd:36:34:d7:3c:3b:f7:d3:0f:d2:b1:10:9a:
54:da:55:5f:fe:d4:8e:94:fa:aa:14:b5:cd:b9:66:
4a:94:ff:3c:0e:39:db:80:f8:63:be:13:71:de:33:
bb:93:2a:95:23:8c:9f:0a:6b:65:34:16:84:78:8f:
d7:2d:53:05:10:06:1b:f3:57:ed:e5:ef:e5:27:7e:
44:2c:ae:17:0e:85:8c:28:32:1f:d3:58:17:a3:07:
67:9e:1c:49:65:c7:c9:b7:28:1a:2f:99:af:bf:96:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9C:E5:27:6A:27:A1:CE:0A:22:21:0B:C0:69:51:2A:07:2F:4E:7D
X509v3 Authority Key Identifier:
keyid:3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6c:48:d4:9b:a1:8f:40:65:4d:b5:6a:1a:d6:ad:cc:99:aa:
65:79:bf:c9:44:36:27:2c:87:ac:de:b9:68:b5:78:b4:dd:3e:
4a:3e:dc:ca:b2:1d:e3:0f:48:8e:33:c1:8a:45:9d:ce:9a:14:
cb:ac:f1:6f:a0:90:b6:7f:b1:7f:59:43:ca:b6:92:a4:51:2d:
0a:57:65:53:58:7f:ef:e8:5a:dc:b6:5e:0d:b3:11:d1:21:45:
66:b7:44:54:e8:b2:fb:7e:61:2f:41:cf:7c:73:69:9c:9a:dd:
82:68:9b:a4:b9:28:6c:a5:54:7f:91:ea:54:b8:73:77:22:78:
7f:95:aa:a8:77:ba:d6:46:3d:e7:75:1a:ef:d1:7c:2a:d5:ed:
de:a6:b8:0f:51:78:7f:55:ea:0c:28:da:db:04:c1:b3:72:36:
33:49:2a:3f:20:e2:42:12:06:ba:df:33:9e:55:a6:1e:72:21:
87:f5:b7:d8:23:db:c3:21:e5:da:d2:d1:48:69:a3:db:84:c4:
e6:b1:3d:f1:63:bb:23:6a:cc:01:e1:ba:26:8a:78:d8:74:0e:
1f:63:14:18:56:04:73:97:05:1c:cf:f0:fc:63:f5:d6:f2:d6:
fd:28:3a:59:06:f2:ef:81:fc:71:92:21:ea:2b:4c:fc:89:e8:
33:2f:aa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:37:44 2026 by rpki-client