Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json)
Hash identifier: wI+0a2J/VXCY14UjW03QzW2gubcYtwoysEkPwV9c80o=
Subject key identifier: 35:C8:76:9D:72:FD:9D:01:C4:74:06:AF:C8:9D:28:D9:8C:25:93:98
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 019D37C01D07692E5FE3EF4EBEB62F662A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:30 +0000
Manifest this update: Sun 29 Mar 2026 04:00:30 +0000
Manifest next update: Mon 30 Mar 2026 04:00:30 +0000
Files and hashes: 1: Fi1IL191MwjF0uM0fhIUPlVEg8w.roa (hash: i72yfWesdd9h7w8CX+H4BGBsgb7kiryYQ8GxW04bDw0=)
2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: 3KIaxZW/QvcwaQYX0bvGF11XUjYtIvp6Gpn3RjtVggs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1d:07:69:2e:5f:e3:ef:4e:be:b6:2f:66:2a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: Mar 29 04:00:30 2026 GMT
Not After : Mar 30 04:00:30 2026 GMT
Subject: CN=35c8769d72fd9d01c47406afc89d28d98c259398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:35:85:3c:69:e8:51:8f:45:95:7c:2f:db:
20:0e:97:b0:4b:c3:6f:ac:b4:5f:0d:8b:3f:ca:18:
53:9b:d1:e9:2e:c0:00:b0:2d:a2:6a:c1:09:8e:03:
5e:2e:8b:15:c6:3a:1e:11:80:64:31:9a:c6:9e:3c:
6d:a2:be:2a:41:ff:7b:92:b4:55:0a:f1:2b:6f:ba:
0a:f1:0d:26:5b:3c:f0:d3:cd:b7:a4:b4:73:e7:50:
00:fe:a7:bd:46:56:d8:46:cf:4e:fe:cd:65:99:82:
e4:fa:cc:09:ce:80:71:fe:7e:89:ce:c9:82:70:da:
6e:e6:52:78:26:e4:92:c6:f4:d2:8a:9f:8b:a7:1b:
b0:19:79:97:6d:71:7b:57:a4:61:dd:23:6d:68:12:
44:e4:d6:c8:83:b2:f2:c1:bc:7c:81:a7:4e:6a:3e:
12:d8:97:60:ca:54:58:b8:33:d7:c3:24:d8:de:22:
6d:a9:77:68:31:ec:46:c8:9f:47:40:91:2c:ed:f6:
bc:20:62:76:85:54:46:89:e2:9d:cf:5c:e2:43:8d:
42:94:d6:b1:52:2f:7d:3f:bb:0c:56:8c:b3:35:3e:
78:0b:45:dc:70:53:59:df:0a:35:3f:5d:03:d2:57:
a3:ce:4d:aa:65:82:e4:e6:0f:c0:13:da:1d:94:a3:
be:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C8:76:9D:72:FD:9D:01:C4:74:06:AF:C8:9D:28:D9:8C:25:93:98
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:99:81:3b:18:02:23:42:98:93:9e:2f:87:ff:6e:b6:f9:bd:
be:a1:80:12:41:3c:9d:1b:36:7c:cf:08:87:2c:6f:92:bc:0c:
49:3b:9c:66:c8:7c:2b:07:af:0a:84:c1:76:ca:e1:2b:79:6f:
46:88:90:06:0a:81:57:61:20:1a:40:4b:a8:ec:bd:0a:1c:9d:
fb:01:3e:d2:9d:aa:7a:40:e9:f2:c1:ec:84:e3:19:4e:f4:a5:
fd:c1:9d:1c:0f:8d:2d:5a:0f:d6:59:3d:88:7d:77:c7:42:ac:
20:95:92:9b:ae:00:4f:1d:68:6e:50:0a:be:ae:43:fd:ca:6b:
0d:e9:7e:71:eb:8a:71:be:6f:33:e7:de:b7:4d:f1:3b:22:dd:
95:bb:09:c3:80:dd:33:58:7b:f1:d5:f3:48:2f:25:4a:73:a7:
c6:4c:26:a7:e5:8d:c4:04:df:b4:96:e9:4b:7a:15:27:68:a3:
44:27:69:86:81:ea:90:c5:f2:4f:8c:14:3c:4c:eb:fe:a0:dc:
de:e5:10:ad:76:13:3f:cf:7e:39:aa:a1:d1:b7:df:f8:d7:7b:
a3:b8:10:14:7d:d9:48:58:45:0c:2e:92:b8:96:a8:a6:00:c6:
82:84:94:ea:ec:67:2a:c1:26:85:a4:9a:75:b2:5c:76:91:30:
b6:88:14:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wB0HaS5f4+9OvrYvZipCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOWZiZTE1YzNjZGI1ZTAzNDM1ZTI0Y2Y2MmYxNmZiNmM2
MjM5NmMwHhcNMjYwMzI5MDQwMDMwWhcNMjYwMzMwMDQwMDMwWjAzMTEwLwYDVQQD
EygzNWM4NzY5ZDcyZmQ5ZDAxYzQ3NDA2YWZjODlkMjhkOThjMjU5Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv81hTxp6FGPRZV8L9sgDpewS8Nv
rLRfDYs/yhhTm9HpLsAAsC2iasEJjgNeLosVxjoeEYBkMZrGnjxtor4qQf97krRV
CvErb7oK8Q0mWzzw0823pLRz51AA/qe9RlbYRs9O/s1lmYLk+swJzoBx/n6JzsmC
cNpu5lJ4JuSSxvTSip+LpxuwGXmXbXF7V6Rh3SNtaBJE5NbIg7Lywbx8gadOaj4S
2JdgylRYuDPXwyTY3iJtqXdoMexGyJ9HQJEs7fa8IGJ2hVRGieKdz1ziQ41ClNax
Ui99P7sMVoyzNT54C0XccFNZ3wo1P10D0lejzk2qZYLk5g/AE9odlKO+bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXIdp1y/Z0BxHQGr8idKNmMJZOYMB8GA1UdIwQY
MBaAFD2fvhXDzbXgNDXiTPYvFvtsYjlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFotLUZjUE50ZUEwTmVKTTlpOFctMnhpT1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lODNiYjktYTVjMi00Nzc0LTllYmIt
YWUzMjdkYmU0NWM5LzEvUFotLUZjUE50ZUEwTmVKTTlpOFctMnhpT1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9lODNiYjktYTVjMi00Nzc0LTllYmItYWUzMjdkYmU0NWM5
LzEvUFotLUZjUE50ZUEwTmVKTTlpOFctMnhpT1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpmBOxgC
I0KYk54vh/9utvm9vqGAEkE8nRs2fM8IhyxvkrwMSTucZsh8KwevCoTBdsrhK3lv
RoiQBgqBV2EgGkBLqOy9Chyd+wE+0p2qekDp8sHshOMZTvSl/cGdHA+NLVoP1lk9
iH13x0KsIJWSm64ATx1oblAKvq5D/cprDel+ceuKcb5vM+fet03xOyLdlbsJw4Dd
M1h78dXzSC8lSnOnxkwmp+WNxATftJbpS3oVJ2ijRCdphoHqkMXyT4wUPEzr/qDc
3uUQrXYTP89+Oaqh0bff+Nd7o7gQFH3ZSFhFDC6SuJaopgDGgoSU6uxnKsEmhaSa
dbJcdpEwtogUQA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:14 2026 by rpki-client