Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
File: PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json)
Hash identifier: b3GgYJEAO4qcXKaP3N0rriHPIdjq8kXtvIZb0CL1Yic=
Subject key identifier: F5:CE:6E:AB:40:AA:F3:14:F9:E4:36:0B:C0:FB:E4:2B:DE:9B:94:D2
Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Certificate serial: 019D9962180367E3B4A974E8A49989F7B21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
Manifest number: 11B1
Signing time: Fri 17 Apr 2026 03:00:35 +0000
Manifest this update: Fri 17 Apr 2026 03:00:35 +0000
Manifest next update: Sat 18 Apr 2026 03:00:35 +0000
Files and hashes: 1: 3I6LNJN6PPsiFBXmOu2FHBnIjRw.roa (hash: 7S75Cr0RAlxkkgtmqpz1YNkkzHYPGceCTqlkYTBVOv4=)
2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: +qpRY7iS0dRYj6HZSYFJKVKuFwYlyFvjTeEflPwaylw=)
3: RHL3XX7_eL5Sd7PtgFRm8c0mqx8.roa (hash: iXzaXbJN/wQTFbRM2yp/OOeZq8dsLS6ERqyx8upKLQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:18:03:67:e3:b4:a9:74:e8:a4:99:89:f7:b2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Validity
Not Before: Apr 17 03:00:35 2026 GMT
Not After : Apr 18 03:00:35 2026 GMT
Subject: CN=f5ce6eab40aaf314f9e4360bc0fbe42bde9b94d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:64:45:43:9f:d4:30:89:61:bc:26:90:4e:
83:db:7e:b2:20:76:b8:68:d5:ed:d4:90:a9:34:a7:
20:5b:44:c5:d7:ac:ff:e0:ec:08:cf:f0:09:27:2a:
74:2e:4f:8d:b6:c9:8e:28:51:77:0f:ef:80:2c:a2:
8a:a5:d1:99:db:72:7e:35:fc:b8:05:22:12:ef:9c:
c9:f0:73:96:d9:37:84:2f:4a:5c:91:17:19:6b:a3:
2a:83:cf:0a:a5:23:4c:a9:a5:77:aa:fd:75:81:21:
5e:af:c7:c6:d9:28:63:e2:32:bc:b6:74:b1:61:03:
06:4c:8b:f6:4e:ae:9a:9f:cd:04:97:f5:3f:cb:33:
02:19:8a:ce:c9:a7:bd:e1:b6:6c:4a:b3:6e:db:2f:
8c:31:f5:92:58:bc:98:45:d0:df:ed:88:59:74:16:
6c:4d:d6:a0:1c:e7:6c:dd:43:eb:8c:d7:0d:49:d2:
95:0c:a4:5a:24:da:9a:47:62:18:56:f6:0f:44:00:
2d:55:26:12:0a:f0:ae:ae:30:87:83:a3:bd:41:c1:
f3:95:e5:1c:2c:0f:9f:ce:80:d4:84:b6:7e:60:3c:
6d:b7:19:f4:87:09:84:c6:73:55:94:25:63:f2:db:
6d:67:1b:2a:9f:94:4f:38:d2:22:66:a6:84:d1:7e:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CE:6E:AB:40:AA:F3:14:F9:E4:36:0B:C0:FB:E4:2B:DE:9B:94:D2
X509v3 Authority Key Identifier:
keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a0:28:dc:70:08:4b:fc:ad:ef:b9:61:d1:e0:49:fc:41:c8:
ee:60:74:d7:85:71:45:8b:ea:01:42:65:c0:99:c5:8d:ae:a9:
40:b6:14:d0:9d:05:f4:8c:55:6e:21:d9:bb:88:20:d1:57:73:
ce:5c:25:a9:0f:79:fe:87:d9:41:c7:0a:c0:62:95:f7:34:82:
cd:a3:be:24:3d:28:ef:12:a1:a0:c1:5d:64:9a:8a:da:e8:b6:
be:79:86:4b:8f:52:af:d0:2b:66:31:26:a9:6b:32:ae:89:7b:
c6:d0:be:28:a5:c7:e2:68:80:f2:4e:7d:4b:ce:43:7b:ff:ba:
4c:e9:3d:23:d1:ba:c8:18:c8:eb:f1:9a:a1:79:e1:88:13:33:
8d:59:a4:6d:60:74:07:58:85:24:4a:33:77:e2:ea:29:43:37:
1c:03:c8:2e:ed:1d:9c:86:a7:d2:7e:3d:1c:a9:44:83:71:30:
c7:72:52:96:2a:72:da:a9:1e:d5:72:b5:ce:40:c7:bb:8b:3a:
8a:c7:be:8c:e0:4f:0b:e7:be:f2:e6:84:72:51:4c:bf:ae:81:
4c:8d:3e:4a:a9:60:1f:e3:db:ef:da:8c:7a:df:e3:45:0b:86:
8f:a9:4c:f6:61:5b:99:63:ec:05:16:00:7b:37:53:c5:fd:02:
16:13:f8:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYhgDZ+O0qXTopJmJ97IfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOThhM2I2MmQ1YWJiMWRjYWY2OGFlMjNmNTMxZWU4MjI0
MGYyMDMwHhcNMjYwNDE3MDMwMDM1WhcNMjYwNDE4MDMwMDM1WjAzMTEwLwYDVQQD
EyhmNWNlNmVhYjQwYWFmMzE0ZjllNDM2MGJjMGZiZTQyYmRlOWI5NGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwBkRUOf1DCJYbwmkE6D236yIHa4
aNXt1JCpNKcgW0TF16z/4OwIz/AJJyp0Lk+NtsmOKFF3D++ALKKKpdGZ23J+Nfy4
BSIS75zJ8HOW2TeEL0pckRcZa6Mqg88KpSNMqaV3qv11gSFer8fG2Shj4jK8tnSx
YQMGTIv2Tq6an80El/U/yzMCGYrOyae94bZsSrNu2y+MMfWSWLyYRdDf7YhZdBZs
TdagHOds3UPrjNcNSdKVDKRaJNqaR2IYVvYPRAAtVSYSCvCurjCHg6O9QcHzleUc
LA+fzoDUhLZ+YDxttxn0hwmExnNVlCVj8tttZxsqn5RPONIiZqaE0X5esQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXObqtAqvMU+eQ2C8D75Cvem5TSMB8GA1UdIwQY
MBaAFD2Yo7YtWrsdyvaK4j9THugiQPIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hYzVmZGYtNWI2Ni00ODUwLTk2M2Et
ZjliNzNiM2UzZWVlLzEvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hYzVmZGYtNWI2Ni00ODUwLTk2M2EtZjliNzNiM2UzZWVl
LzEvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtqAo3HAI
S/yt77lh0eBJ/EHI7mB014VxRYvqAUJlwJnFja6pQLYU0J0F9IxVbiHZu4gg0Vdz
zlwlqQ95/ofZQccKwGKV9zSCzaO+JD0o7xKhoMFdZJqK2ui2vnmGS49Sr9ArZjEm
qWsyrol7xtC+KKXH4miA8k59S85De/+6TOk9I9G6yBjI6/GaoXnhiBMzjVmkbWB0
B1iFJEozd+LqKUM3HAPILu0dnIan0n49HKlEg3Ewx3JSlipy2qke1XK1zkDHu4s6
ise+jOBPC+e+8uaEclFMv66BTI0+SqlgH+Pb79qMet/jRQuGj6lM9mFbmWPsBRYA
ezdTxf0CFhP4og==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:54 2026 by rpki-client