Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
File: PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json)
Hash identifier: rLUQTsmf7UAab+OZRzMQKutZIvDQHGb7sIc3HmaQoUg=
Subject key identifier: 42:4A:C8:37:26:35:50:3C:7B:FF:43:49:C1:57:60:55:C6:4F:EA:60
Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Certificate serial: 019CABDA0D7801043D6D737D3DC6FAC64DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
Manifest number: 1136
Signing time: Mon 02 Mar 2026 00:02:00 +0000
Manifest this update: Mon 02 Mar 2026 00:02:00 +0000
Manifest next update: Tue 03 Mar 2026 00:02:00 +0000
Files and hashes: 1: 3I6LNJN6PPsiFBXmOu2FHBnIjRw.roa (hash: 7S75Cr0RAlxkkgtmqpz1YNkkzHYPGceCTqlkYTBVOv4=)
2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: 8GpOKa23PGTxqgt5pkqz8qHVGWf/1CGN15BzlEVPOgY=)
3: RHL3XX7_eL5Sd7PtgFRm8c0mqx8.roa (hash: iXzaXbJN/wQTFbRM2yp/OOeZq8dsLS6ERqyx8upKLQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:0d:78:01:04:3d:6d:73:7d:3d:c6:fa:c6:4d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Validity
Not Before: Mar 2 00:02:00 2026 GMT
Not After : Mar 3 00:02:00 2026 GMT
Subject: CN=424ac8372635503c7bff4349c1576055c64fea60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:1b:d9:5f:29:72:62:82:8e:0e:85:be:65:
10:78:c3:b2:9c:7d:42:a5:5f:f9:d0:3b:a4:89:58:
4a:a5:ed:f3:18:5f:b3:8f:df:8e:66:ee:0d:70:b0:
ed:7c:e3:8a:58:02:a4:ec:bc:51:56:9d:8c:ed:d8:
9d:43:5b:a7:60:22:5e:d1:9d:57:c3:60:18:81:36:
0b:0c:64:7b:51:56:b7:2a:db:0b:e9:48:74:c4:8b:
05:ae:ac:04:c2:42:9c:ff:6d:7e:a5:00:1c:59:9e:
3b:17:b8:0a:d1:68:93:d1:73:99:10:cb:58:dd:fa:
f3:7b:2a:59:c0:df:ac:53:94:c4:29:dc:09:cb:56:
fa:0c:f3:b4:b6:70:3f:8f:c0:c6:3b:a5:1d:07:be:
73:bc:7c:39:22:52:7e:62:9e:18:a8:b1:79:ab:28:
0a:a2:d5:b7:df:d8:a7:69:24:60:5a:92:14:1c:aa:
d5:07:17:22:84:fe:d9:39:40:a7:b5:11:17:4a:43:
2e:dc:41:42:3d:34:17:c7:4b:bf:d3:ea:9f:c9:50:
73:53:e4:09:6c:47:cd:d8:ef:5e:95:06:94:f8:dd:
e2:fb:de:a5:a6:6c:96:27:c2:e8:c7:ab:7a:e7:b0:
a1:79:3c:fc:d5:44:56:a7:32:a2:1b:02:69:17:4a:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4A:C8:37:26:35:50:3C:7B:FF:43:49:C1:57:60:55:C6:4F:EA:60
X509v3 Authority Key Identifier:
keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:44:1c:89:d3:cc:94:21:4b:22:08:44:f4:39:c4:5d:8f:27:
c8:30:f4:a0:0a:82:87:d9:bd:9b:67:93:d5:23:12:16:26:9b:
1a:3c:92:af:e4:48:d0:4f:1c:84:4d:51:bc:1a:c7:1c:fd:6d:
73:d7:a8:91:6a:7b:83:7a:9e:b7:b3:13:96:d0:14:a0:8b:6a:
ea:ac:e7:0e:1b:41:64:61:c0:02:4d:23:8d:d3:c9:41:96:96:
d8:5c:dc:78:4c:5b:d1:f5:66:e8:a3:44:a5:a4:b4:e0:68:72:
80:31:db:f5:23:5e:4c:32:a9:61:d4:fc:6d:3f:e8:8d:3b:42:
04:84:4b:74:25:6f:48:6b:85:48:64:22:58:90:d6:58:55:b3:
a6:ee:94:c1:08:99:a7:7b:98:74:45:93:fb:54:33:24:16:0d:
b5:99:fe:1d:1a:78:1a:d7:ad:24:a9:45:94:d4:65:9d:9e:39:
a3:68:3f:7a:e1:9a:01:3d:96:73:da:97:cc:46:57:3c:d1:ba:
44:da:92:5a:b7:ee:b6:df:27:ae:72:a9:71:b5:e2:a2:e7:08:
08:f9:30:27:06:a9:b7:1a:97:68:65:42:d6:c0:6b:c5:e9:b7:
34:23:f5:35:d4:89:f2:22:5a:1f:ca:70:69:ed:38:9d:27:2f:
8d:5e:37:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:44 2026 by rpki-client