Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: XHNu7I1AwZFkCzMR5jKBoyrt9kTyhDGmEEIuKRrYZ2w=
Subject key identifier: FA:BA:83:B1:79:69:0C:FA:7B:02:76:3D:F5:E7:4B:50:E7:86:52:07
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 019D38D3B1A54F67FBDB4606AB6D0D7075D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: GjpGm1v3wSRAaUtsjrHQn6aKiJ0.roa (hash: 4K7A1g6E595/Yprg9eFeVpmlN6yEQaZZKljRzX+WHN4=)
2: J72P5DI9aUZfHCEMMwWflr8uG8k.roa (hash: FIxoJFJimB9dMBCV9pC5bRPsPazZNP7zbfoE1WYrso8=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: YnFRgAEt//THs53yXdAVhlDVFC+WON0mrvXm5VuBc4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b1:a5:4f:67:fb:db:46:06:ab:6d:0d:70:75:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=faba83b179690cfa7b02763df5e74b50e7865207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:b8:a8:39:5c:4f:ed:b2:32:b3:b7:b1:76:
80:a6:fe:08:6b:88:c7:f8:67:e0:20:06:3d:c8:8a:
f9:99:4b:3a:b1:f5:a9:12:9c:27:85:93:1d:1e:b6:
8a:30:df:27:ea:15:1d:bc:b5:ee:4f:6c:57:ce:8a:
3d:82:3e:17:40:cb:56:58:77:7e:e6:c9:45:04:c0:
b3:2c:0d:10:66:38:4d:55:19:b3:83:ae:6f:f8:82:
bd:d2:67:ad:f0:42:e5:f9:ff:79:4f:36:d6:7f:f5:
fd:be:de:6f:a1:ba:00:e9:96:86:12:92:e2:7c:10:
f5:40:19:d2:c5:af:a4:52:8f:4f:51:6a:fc:76:2d:
34:48:02:df:94:af:71:11:97:a7:a4:f1:5f:13:30:
27:f6:ed:fb:77:2f:b7:cc:30:53:04:07:df:1f:18:
bb:f0:79:b5:06:ba:04:2c:c0:1e:95:10:1d:71:32:
30:c3:8d:9a:80:ac:76:e6:51:61:d5:3e:7f:15:a6:
6d:8b:29:d1:3a:df:18:59:94:82:aa:e6:94:0a:ef:
03:f2:4e:28:cf:04:ce:bc:cd:9d:09:b5:c1:43:21:
de:c7:ec:d5:16:f3:fb:c0:44:5d:40:86:27:bd:5a:
e4:47:72:92:a9:60:b6:6c:ac:84:41:a7:2a:a8:9b:
c5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BA:83:B1:79:69:0C:FA:7B:02:76:3D:F5:E7:4B:50:E7:86:52:07
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9d:44:36:7d:6d:31:b6:dc:69:2e:1a:38:78:72:29:2f:9f:
83:cb:83:52:eb:27:b4:f2:6c:f8:ef:64:3f:b6:04:09:6e:61:
24:92:1a:55:cb:23:25:42:39:80:cf:ba:d2:36:46:55:f4:00:
ca:df:7b:54:8c:8a:e1:aa:fe:a1:ee:3e:bc:77:ca:f5:c9:be:
07:a4:02:34:91:c4:3e:d8:48:ad:bd:9f:3e:0e:6b:46:3c:72:
5f:3f:9f:2b:e2:bc:da:2e:9e:93:8f:b2:e7:47:50:29:af:c9:
29:56:ee:08:40:9b:f8:f6:1d:b8:12:b2:44:e1:7b:84:32:1c:
72:d5:37:4f:54:42:51:71:df:8d:5a:39:a5:52:b0:66:de:19:
ea:25:2e:be:64:19:04:1b:5a:ff:93:d3:25:31:23:a5:65:21:
2b:fd:24:cc:dd:53:6f:fd:2b:d0:f9:23:70:5f:15:c7:47:94:
2e:62:22:c2:b2:3b:92:45:98:ab:e3:a7:b2:40:a2:14:1f:dc:
39:ca:76:92:10:fa:62:f2:55:f5:f9:90:56:7b:fc:2d:62:79:
e8:7a:29:78:cc:5f:5f:75:c3:f1:74:4e:b2:59:4f:82:5c:eb:
55:b0:47:a3:8a:33:db:8f:03:e8:ac:8f:90:b8:65:ce:6f:a4:
d5:a3:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:49 2026 by rpki-client