Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
File: PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft (raw, json)
Hash identifier: AZzLoFi0nVvlwTeUbMgBJl4bnw/j0BIDlMu39HJFVy8=
Subject key identifier: 70:3B:41:B4:33:B9:8A:DA:E6:73:D4:2B:41:4F:C3:D9:0B:49:02:70
Authority key identifier: 3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73
Certificate issuer: /CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773
Certificate serial: 01A1317DA8B6E63DC5F3E394B268E046205E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
Manifest number: 0D65
Signing time: Mon 12 Oct 2026 19:01:21 +0000
Manifest this update: Mon 12 Oct 2026 19:01:21 +0000
Manifest next update: Tue 13 Oct 2026 19:01:21 +0000
Files and hashes: 1: 0kteYDEknBDxG9W3J3cL9QhFRvc.roa (hash: 1XWojZWd6G7wDLkk3o7HBTuYxtsrR+gEZcfWZE2ZhEU=)
2: PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl (hash: jAUdY2yLqeq/TI0fxYVNF3h3aLJbfNnBEOun2QfzK0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:7d:a8:b6:e6:3d:c5:f3:e3:94:b2:68:e0:46:20:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773
Validity
Not Before: Oct 12 19:01:21 2026 GMT
Not After : Oct 13 19:01:21 2026 GMT
Subject: CN=703b41b433b98adae673d42b414fc3d90b490270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:f0:9a:5f:83:b1:0e:c9:32:c3:10:f1:f6:
5a:f9:86:3d:c4:1b:eb:59:8e:8b:34:7b:c1:53:d8:
8b:58:2d:d5:5c:10:06:01:a2:ae:3c:b0:47:4d:5a:
98:0c:92:b0:cc:01:67:aa:95:73:49:44:8b:04:b8:
0d:b1:5c:d3:13:69:42:7c:59:93:2e:b6:a3:13:0d:
ce:2c:75:b8:2e:e0:d9:b9:4a:31:28:c1:87:1f:3b:
1d:8c:2e:ba:d9:d7:cb:10:07:ce:b9:5e:4a:bc:1a:
d0:da:27:2a:9e:6f:34:fe:af:c9:6e:b8:32:ee:1a:
f5:ae:f8:16:ff:98:76:b0:0c:6a:5b:76:9d:1c:6b:
14:f0:d7:2a:19:ff:5e:78:96:ec:9b:51:06:61:09:
ba:8d:2f:d5:64:cf:bd:d6:a5:9e:07:b6:45:27:23:
50:86:e2:28:50:56:19:66:98:bb:2d:a3:e5:67:b6:
c9:f5:20:50:24:ec:9c:50:bb:5c:35:33:56:ad:48:
ac:27:2e:02:f7:0a:ce:20:d1:46:15:4e:f0:a3:8c:
65:78:dc:69:e0:32:15:20:c5:51:34:cb:aa:49:5b:
08:b8:b3:23:32:62:5d:78:2c:2b:85:c6:85:47:98:
5c:77:9d:ae:fa:21:a4:cc:4b:ed:c3:e7:eb:30:41:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3B:41:B4:33:B9:8A:DA:E6:73:D4:2B:41:4F:C3:D9:0B:49:02:70
X509v3 Authority Key Identifier:
keyid:3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0c:86:89:1b:93:1c:39:77:99:35:56:c4:25:01:ea:ec:c6:
4f:8e:c0:d8:96:a1:e2:78:a7:a5:66:6d:b8:b2:37:45:9e:a2:
10:b7:9f:ad:ae:c8:a3:75:44:9e:a2:b9:1d:b7:a3:ba:47:98:
d0:9f:7f:34:5d:11:71:91:e4:c0:63:5f:e7:a1:6a:97:49:c6:
d5:70:69:50:f3:6a:9e:e7:cb:41:74:87:e3:09:ce:7f:8b:80:
58:de:2e:1f:88:12:e1:8a:36:1c:a7:63:4c:31:46:c4:0c:be:
fc:c0:9c:31:b7:dd:57:54:9f:26:0a:17:2f:f4:23:93:28:51:
79:35:45:40:bf:c3:4d:ba:18:b9:c0:90:fb:bc:5b:c2:3d:46:
78:3e:f6:5a:2d:23:e3:33:c1:ab:5b:cc:e6:ca:6b:e4:6f:9d:
72:c6:b9:1e:5c:dc:88:57:4b:6e:5e:a2:45:d9:28:c5:48:46:
a7:c6:66:50:fe:e0:c1:7d:db:8b:06:ac:2d:70:63:50:32:6b:
e8:cc:f8:c9:93:0d:48:99:31:da:74:91:a4:dd:5e:b3:24:bc:
bf:39:07:ed:30:b0:7b:69:49:a1:1b:37:bb:6c:ae:de:f9:05:
3a:fb:e8:c5:1e:0f:34:ce:32:c6:1b:f7:5f:62:e4:5d:b6:57:
c2:69:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:05:21 2026 by rpki-client