Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: kTJEpEI0Rw3mm8Dysdp0hpLQsb+a56sBwC/9SGT+FBY=
Subject key identifier: 66:CD:EA:7A:73:E9:8B:40:F4:30:30:02:79:78:87:21:3A:26:91:A7
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 01A1762740A93DCB42AFA15C3ED1B5DE39F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 1AC4
Signing time: Mon 26 Oct 2026 03:00:46 +0000
Manifest this update: Mon 26 Oct 2026 03:00:46 +0000
Manifest next update: Tue 27 Oct 2026 03:00:46 +0000
Files and hashes: 1: GjpGm1v3wSRAaUtsjrHQn6aKiJ0.roa (hash: 4K7A1g6E595/Yprg9eFeVpmlN6yEQaZZKljRzX+WHN4=)
2: J72P5DI9aUZfHCEMMwWflr8uG8k.roa (hash: FIxoJFJimB9dMBCV9pC5bRPsPazZNP7zbfoE1WYrso8=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: rJY4bRm0qaoM1bY3/MNL5pqY7qfVL7fKBOG9vFL17Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:40:a9:3d:cb:42:af:a1:5c:3e:d1:b5:de:39:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Oct 26 03:00:46 2026 GMT
Not After : Oct 27 03:00:46 2026 GMT
Subject: CN=66cdea7a73e98b40f4303002797887213a2691a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:ff:06:fc:ad:35:43:28:1b:6b:9c:50:99:
77:71:cc:26:9e:b9:1c:71:d1:9e:01:2b:90:99:75:
eb:fc:f5:bc:c1:59:dc:1d:5a:a1:aa:2c:55:32:70:
01:eb:08:3d:40:7e:f0:28:cd:c5:be:b7:63:18:16:
21:86:d9:ec:eb:2b:53:c8:3d:47:27:3a:0a:a6:48:
de:6f:32:f0:dc:0b:4a:e6:04:0e:43:6a:af:06:27:
bd:fb:44:d5:ee:8b:d4:de:26:dd:8a:1e:b5:83:d8:
4f:f8:d1:db:bd:1f:cb:f4:ab:43:00:b7:e8:e2:10:
88:1d:33:59:9a:e4:f4:06:c6:67:94:7d:00:bc:05:
2c:e8:ea:cf:c8:73:0d:98:bd:f1:85:c0:18:11:39:
a0:8a:59:53:ea:bd:f2:83:73:c9:a5:0b:95:9e:e0:
ca:dd:f4:c7:ba:5d:16:7b:38:10:43:3d:92:20:2f:
ab:ed:82:8a:e8:c0:03:7a:43:cc:78:03:fd:ce:ab:
2d:4c:6a:5f:43:89:43:ec:40:45:e3:69:a2:7e:48:
70:53:ee:d9:6f:62:47:e1:75:f3:93:66:70:7f:44:
97:c2:db:59:02:2b:a8:97:05:d5:ca:c7:8c:24:2e:
bd:f3:c9:37:45:44:2e:e0:9b:d2:a3:c5:6a:e3:87:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CD:EA:7A:73:E9:8B:40:F4:30:30:02:79:78:87:21:3A:26:91:A7
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c7:a0:2c:d0:48:fb:ca:10:bf:27:35:ff:cb:b9:1d:01:d6:
c4:fb:d9:9c:57:22:64:67:4a:f1:57:87:65:94:4f:34:2a:d8:
86:15:83:07:b4:93:e5:fc:5f:29:ef:ff:9e:8a:e7:97:1f:e7:
31:4a:06:1f:98:c0:5a:82:ab:6c:6a:44:d1:2e:6d:37:c2:cc:
b7:87:cc:83:aa:2b:29:4e:b1:3d:36:21:c2:34:a7:5e:ca:ad:
83:3f:14:08:5c:78:30:4c:35:ca:ed:64:0b:92:4b:4b:f7:06:
08:04:8a:1a:9d:da:e5:5f:42:d4:cc:4d:15:8b:03:f8:7b:32:
29:6f:89:bc:21:6d:22:5f:31:8a:33:04:77:3b:fc:a9:12:19:
f3:8d:05:68:84:5a:7f:5a:7f:66:34:01:20:15:55:47:1d:f2:
80:82:12:df:a5:3d:bc:31:2e:66:15:1d:fd:6c:51:c8:d9:c4:
f2:d3:d7:53:7f:c1:75:fe:81:8c:bc:b7:8d:2d:07:49:2e:cc:
67:14:68:53:10:b9:c0:fc:c1:d9:d6:e1:6f:39:b6:81:59:0b:
22:f9:48:f5:91:55:e2:ce:c4:8a:96:fb:77:5e:62:58:b1:bc:
c8:f2:0e:53:f7:d5:19:d4:7b:40:e1:2b:c6:e1:9f:3d:3d:1a:
1b:c0:ea:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2J0CpPctCr6FcPtG13jn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMzlkZDdiZDczYzNlMWJhMjdkMTc4ZDU1YzI2ZjhhOTZj
ZGI0YTkwHhcNMjYxMDI2MDMwMDQ2WhcNMjYxMDI3MDMwMDQ2WjAzMTEwLwYDVQQD
Eyg2NmNkZWE3YTczZTk4YjQwZjQzMDMwMDI3OTc4ODcyMTNhMjY5MWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiP/BvytNUMoG2ucUJl3ccwmnrkc
cdGeASuQmXXr/PW8wVncHVqhqixVMnAB6wg9QH7wKM3FvrdjGBYhhtns6ytTyD1H
JzoKpkjebzLw3AtK5gQOQ2qvBie9+0TV7ovU3ibdih61g9hP+NHbvR/L9KtDALfo
4hCIHTNZmuT0BsZnlH0AvAUs6OrPyHMNmL3xhcAYETmgillT6r3yg3PJpQuVnuDK
3fTHul0WezgQQz2SIC+r7YKK6MADekPMeAP9zqstTGpfQ4lD7EBF42mifkhwU+7Z
b2JH4XXzk2Zwf0SXwttZAiuolwXVyseMJC6988k3RUQu4JvSo8Vq44e7tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbN6npz6YtA9DAwAnl4hyE6JpGnMB8GA1UdIwQY
MBaAFD853XvXPD4bon0XjVXCb4qWzbSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMt
MDRmOWU2MTZhZjYwLzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMtMDRmOWU2MTZhZjYw
LzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsegLNBI
+8oQvyc1/8u5HQHWxPvZnFciZGdK8VeHZZRPNCrYhhWDB7ST5fxfKe//nornlx/n
MUoGH5jAWoKrbGpE0S5tN8LMt4fMg6orKU6xPTYhwjSnXsqtgz8UCFx4MEw1yu1k
C5JLS/cGCASKGp3a5V9C1MxNFYsD+HsyKW+JvCFtIl8xijMEdzv8qRIZ840FaIRa
f1p/ZjQBIBVVRx3ygIIS36U9vDEuZhUd/WxRyNnE8tPXU3/Bdf6BjLy3jS0HSS7M
ZxRoUxC5wPzB2dbhbzm2gVkLIvlI9ZFV4s7Eipb7d15iWLG8yPIOU/fVGdR7QOEr
xuGfPT0aG8DqGQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:44:37 2026 by rpki-client