Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File: pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier: SfW7e4xlAHhR6pOouFBAvFnGAcfq+JkJtDgJCZwnMJU=
Subject key identifier: 5A:3A:53:C1:7A:6A:85:D6:B8:00:05:C6:DD:D9:9E:E5:C8:84:B2:20
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer: /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial: 019D38666D3435A9B529931AAC7EA5EB1F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number: 0A1E
Signing time: Sun 29 Mar 2026 07:02:09 +0000
Manifest this update: Sun 29 Mar 2026 07:02:09 +0000
Manifest next update: Mon 30 Mar 2026 07:02:09 +0000
Files and hashes: 1: 3jTH1h5dUYotQ6HSif98N43DNuA.asa (hash: sd2VnqkRw5U6ZlFZBJnlXiTwm3x3Tfojh0Hk8MPRlmE=)
2: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: 4ldf4GonfqBCQmPsVWElyKq4TmyKXd+3snUhAZEwJEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:6d:34:35:a9:b5:29:93:1a:ac:7e:a5:eb:1f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Validity
Not Before: Mar 29 07:02:09 2026 GMT
Not After : Mar 30 07:02:09 2026 GMT
Subject: CN=5a3a53c17a6a85d6b80005c6ddd99ee5c884b220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:47:90:13:46:00:37:5b:a8:fb:e6:a7:15:
2e:8c:d3:be:41:f6:92:bf:ae:eb:d3:8a:a1:ea:ec:
2d:38:fc:6a:9b:e4:fd:d0:1e:7b:2a:d9:6d:02:1e:
dc:da:69:05:0a:e7:be:a4:14:3f:a0:e2:82:e9:31:
15:2a:ca:b7:99:a5:ff:37:5f:6e:61:fd:d2:95:47:
b8:8b:15:eb:2c:b4:36:4f:ac:66:35:b0:be:c2:20:
5a:32:49:80:c7:43:83:eb:92:d5:d8:3b:5c:fd:dc:
02:2d:6c:5a:24:3a:8b:7e:4a:8d:aa:15:70:4a:34:
a0:d7:68:00:b5:b7:13:d5:bd:62:65:2d:ec:4a:e0:
56:24:b6:1f:0e:ef:e7:8a:dc:03:d1:a3:4a:cd:06:
4a:8f:ab:c4:5b:34:c6:8c:f7:32:57:c4:ff:fa:1b:
73:b3:2b:1d:86:be:1e:71:21:30:a3:a6:67:55:82:
3b:f1:15:9b:29:c4:b0:6b:e5:19:09:30:8c:a3:cc:
4c:c1:68:e1:35:00:36:e7:f0:1e:60:22:74:4d:ec:
e1:c1:21:33:74:82:e1:66:5b:0d:48:e9:b7:b3:ae:
48:1c:2c:6b:de:4d:97:f7:cf:49:c9:c1:20:b1:fc:
30:39:56:45:e5:91:9c:9c:0c:28:fb:04:07:b5:0b:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3A:53:C1:7A:6A:85:D6:B8:00:05:C6:DD:D9:9E:E5:C8:84:B2:20
X509v3 Authority Key Identifier:
keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a9:2f:f3:c8:93:79:43:7c:1f:a6:ed:64:95:16:a3:7b:85:
f5:bf:25:11:c0:57:03:85:06:e4:e9:95:d1:b3:ce:46:e2:93:
a9:fb:80:fd:14:a9:48:e2:44:6a:e9:68:b2:1d:3c:91:3b:85:
0d:59:f1:fa:16:84:06:a0:63:ae:da:d8:d8:0f:50:4a:f1:19:
a1:f6:07:fe:6d:5a:41:4b:56:7b:71:48:f7:5e:94:6f:f0:18:
c3:40:d0:dc:1e:09:c8:ca:54:7d:7a:aa:a5:42:26:97:37:1b:
8d:2d:5a:ab:64:5e:46:62:99:0d:fc:49:58:41:93:fa:e7:89:
03:93:1c:36:fd:da:79:e1:2f:ae:c1:63:69:e7:d7:78:06:fe:
fe:3c:1b:3d:b0:32:ee:18:ea:6e:b9:3b:24:94:64:38:77:4b:
09:c4:0d:c2:d2:91:e2:bb:7c:c8:c4:67:15:88:48:ac:01:5c:
2d:20:89:16:43:9d:ee:61:b2:17:46:1d:cb:e6:49:bf:ce:4d:
4d:e8:32:ab:79:17:fa:93:e9:26:7e:70:6b:9b:41:c5:df:c1:
6a:91:38:65:76:d7:dd:1d:0a:ab:3a:4a:be:ef:7c:db:be:15:
31:a0:8c:9c:ab:3f:d2:54:67:bc:3d:2e:d4:82:e8:43:95:5e:
cb:3e:21:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:43 2026 by rpki-client