Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier: D2IlLisPQA63vAfyjJpMcNsqevp1UgWBxEneAt/zPcQ=
Subject key identifier: 3B:4B:DC:FA:22:61:9C:6B:11:22:3D:54:F5:4D:62:59:80:57:4F:09
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 019D386688443DCB63EBBF81063498766DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number: 07C1
Signing time: Sun 29 Mar 2026 07:02:16 +0000
Manifest this update: Sun 29 Mar 2026 07:02:16 +0000
Manifest next update: Mon 30 Mar 2026 07:02:16 +0000
Files and hashes: 1: EyOWK8XRTj4QM3sd-U5Fu8pd9R0.roa (hash: s7z9jMoOORsHVb0/YBYQ3nLHIuOn+yJ/rTvI7HFxr7M=)
2: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: MjaHnqkR81DNLVIKM24gMVw3NYufwmcYyttIUKhVQ+8=)
3: VnRtMDF4gysmlZSb59wJ0quLjuA.roa (hash: 43Q8juPKAzS/kUi0MJPxgQYqYa6H7Jrksy06nYJpgec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:88:44:3d:cb:63:eb:bf:81:06:34:98:76:6d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Mar 29 07:02:16 2026 GMT
Not After : Mar 30 07:02:16 2026 GMT
Subject: CN=3b4bdcfa22619c6b11223d54f54d625980574f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:66:cc:bf:53:3c:96:56:d9:12:2e:0b:e4:65:
e8:9a:8e:1b:c6:30:31:79:ae:06:55:32:a0:5f:52:
d1:30:46:55:10:6d:38:86:3d:e8:75:76:ed:83:7c:
a8:7f:84:59:e9:6e:0b:41:c5:b8:e8:af:40:fc:13:
29:cd:73:11:f8:56:b5:82:44:ae:33:27:6c:43:e3:
2a:ea:09:25:3f:69:db:fe:c4:bd:be:2f:2c:d2:79:
1a:65:bf:c0:43:46:b9:f5:25:34:54:06:f5:14:44:
23:6b:1c:81:ad:36:9c:4a:3b:ab:d8:37:b0:69:3d:
c4:9b:60:6d:f3:f4:09:21:ef:0f:19:90:0e:74:40:
ac:f6:00:4a:c1:03:97:8c:c1:e2:56:90:2b:c4:52:
be:5f:09:8d:22:91:c3:e0:93:d7:05:dd:8a:b4:0a:
61:df:3b:f7:e3:d7:38:1d:52:f5:eb:54:64:c1:88:
0c:3a:00:8c:22:ef:0c:bd:55:fb:9b:fe:c4:e5:9a:
8f:a6:ff:f4:d0:cc:8f:04:2c:11:31:89:fb:db:47:
e9:07:11:ee:5e:67:9f:36:1d:47:22:4d:61:a7:4b:
1f:2c:fe:93:87:9d:e5:e2:ff:05:23:dd:c2:4d:fa:
fa:cf:91:a9:a8:e2:27:b0:ef:7f:f1:fe:bb:17:dd:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4B:DC:FA:22:61:9C:6B:11:22:3D:54:F5:4D:62:59:80:57:4F:09
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:72:11:20:b3:8b:b7:58:69:eb:10:59:3f:be:7b:18:ab:ac:
e7:f7:15:de:2e:0e:94:93:e9:70:37:3d:ab:ab:03:5e:52:c8:
d9:14:12:53:c9:df:9b:b3:07:f0:33:e9:48:d7:37:39:a8:e6:
d2:f2:fa:ad:90:51:a1:c7:f8:02:e4:d6:e2:7e:2e:79:44:a5:
23:3e:24:75:09:8e:25:71:8d:4d:92:70:a2:f6:41:91:02:33:
9a:a3:32:bc:fd:b4:86:16:a7:0b:5e:5a:5b:bf:27:83:e2:52:
b7:42:a2:83:cf:2d:16:6a:c3:33:7a:d5:24:96:55:6e:ab:f4:
f4:74:19:5c:a0:24:2b:7e:b0:15:ee:5e:ba:a9:26:5b:43:eb:
f5:12:b7:4b:e4:0f:7c:7a:b7:26:82:b3:16:73:9f:7e:f9:e0:
e8:e9:2e:5f:ca:30:e2:f7:27:84:fe:0d:1f:95:a8:0c:c1:40:
a9:46:7b:52:b2:45:a3:d7:a7:be:fc:b1:3f:d7:51:92:91:de:
87:cc:25:a5:07:4d:52:f3:6a:52:af:8a:37:25:1c:7b:5b:6d:
7b:71:db:da:6a:a5:c4:f3:64:86:d1:15:cd:5d:28:31:fb:ee:
22:ed:bb:23:f2:97:19:71:a3:07:e9:dd:c0:c2:42:1f:69:b0:
76:9e:46:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:13 2026 by rpki-client