Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
File: pj_zsazNggGkEWyYdXM5I0KJgB4.mft (raw, json)
Hash identifier: /qEleknk4Z3BTd/2YYnXJLKfLwJ/VyL1olaAFQNTDOs=
Subject key identifier: 3A:D0:83:03:72:B9:E0:F9:26:D3:1D:04:6B:86:68:94:D3:DC:5A:0B
Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
Certificate issuer: /CN=a63ff3b1accd8201a4116c98757339234289801e
Certificate serial: 019D38D3D1C7A5C0CF632C789D2B2676B208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
Manifest number: 0756
Signing time: Sun 29 Mar 2026 09:01:39 +0000
Manifest this update: Sun 29 Mar 2026 09:01:39 +0000
Manifest next update: Mon 30 Mar 2026 09:01:39 +0000
Files and hashes: 1: 3z2E0B-6Qfimxbr8mMwcWrvKa8w.roa (hash: PBmait2/VPYqqZlhx49/ypGsNPZylOrkMZEsz5efntc=)
2: pj_zsazNggGkEWyYdXM5I0KJgB4.crl (hash: W9CRHIcwapvb0e2raNT95aZtF7IdP148WGqz4K6c7qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d1:c7:a5:c0:cf:63:2c:78:9d:2b:26:76:b2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e
Validity
Not Before: Mar 29 09:01:39 2026 GMT
Not After : Mar 30 09:01:39 2026 GMT
Subject: CN=3ad0830372b9e0f926d31d046b866894d3dc5a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:e9:c5:e8:cc:da:e3:85:9f:43:01:89:ce:
0c:a3:0f:87:71:49:a3:62:e1:0e:49:67:0d:3a:3c:
6d:2f:ec:cf:15:7c:ef:14:51:62:3e:97:24:91:b7:
ba:5c:28:5c:51:92:15:05:f6:41:00:6e:0c:b3:60:
f7:c5:65:de:1b:0c:8e:2a:6e:5a:34:20:37:88:24:
e0:34:ef:8e:29:74:78:d0:fe:56:27:9f:22:ee:ce:
7a:97:46:f3:86:1e:0e:be:a8:0f:ff:7d:ca:ed:77:
b7:a4:23:53:ba:e9:79:10:fe:01:0b:72:7f:51:7d:
36:07:88:c1:b3:e7:da:25:9f:a4:dc:27:fc:3b:8b:
46:78:07:37:b4:d8:81:f2:bd:3e:b1:ac:6e:57:4c:
4b:4d:bc:f8:ce:2a:e2:d6:b0:82:ad:fd:35:c2:4b:
e9:0d:ad:60:59:85:64:6c:22:9a:0d:f6:ba:54:e8:
4a:64:8a:59:a1:42:8d:91:1b:13:26:f1:bc:9a:10:
f4:cd:7b:13:1e:08:7e:f5:69:19:89:31:20:c2:17:
91:7a:72:62:85:f4:db:f9:00:6d:a9:05:e3:16:11:
d7:fd:be:4e:db:80:e0:54:c2:3e:05:c5:92:3d:2b:
a7:89:4f:d9:4b:2a:32:f1:be:c9:69:4d:21:1f:b8:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D0:83:03:72:B9:E0:F9:26:D3:1D:04:6B:86:68:94:D3:DC:5A:0B
X509v3 Authority Key Identifier:
keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b0:20:1f:b7:64:d7:9b:8f:09:75:b1:c5:80:ec:6e:02:4d:
7f:50:3a:87:35:f3:78:ba:48:01:80:22:30:a4:07:fe:c8:94:
f7:dc:d7:43:20:f5:35:07:41:4a:fe:74:98:d2:b1:37:87:a6:
ae:32:8a:e1:01:23:6b:e4:9e:c7:c3:d0:a0:97:23:44:80:b4:
c1:38:66:eb:99:7e:f0:42:8d:89:be:3a:8c:30:11:d8:89:c3:
e3:a2:1c:9f:94:ed:b8:5e:71:c2:ba:98:f2:dc:0b:ba:77:79:
9d:5c:d9:d7:99:82:34:67:6a:76:0b:d9:15:c2:9c:c9:fa:08:
fe:43:80:71:9c:f2:a0:1b:ea:9c:06:6c:06:94:e8:d7:17:84:
14:65:c0:f6:36:4b:ee:bc:f3:65:3a:3f:59:3a:a4:43:52:3b:
54:2c:50:ff:59:82:1b:ca:1f:55:7e:46:70:3e:1c:fc:5b:d7:
a9:d0:f6:5b:db:cf:c6:3b:52:5a:0f:17:0e:1a:1c:30:d8:8c:
1e:c7:ab:67:72:2c:5c:d7:e8:6a:70:53:39:bf:a0:ee:91:fa:
4b:3e:da:fe:83:87:14:11:5d:23:14:63:b8:a3:c4:ae:6a:8f:
5b:5f:1c:ed:fc:31:4c:b0:a2:38:6d:21:8f:c9:18:70:61:ae:
c2:ce:55:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:41 2026 by rpki-client