Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: xL4Wtxr+JKfjc1qyoWH4bk67KypQUXbPfaZNywKEBA0=
Subject key identifier: 8E:3B:FA:1D:16:4F:DA:24:72:A3:93:BC:36:E5:BA:40:6F:E8:5F:65
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 019D984FBB3EF437DA569AE76C1516F897E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 1360
Signing time: Thu 16 Apr 2026 22:00:55 +0000
Manifest this update: Thu 16 Apr 2026 22:00:55 +0000
Manifest next update: Fri 17 Apr 2026 22:00:55 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: mX55iBxevdzz5POxwZPJJZlh+XQR1pH2qEVaIFa+iJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:bb:3e:f4:37:da:56:9a:e7:6c:15:16:f8:97:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Apr 16 22:00:55 2026 GMT
Not After : Apr 17 22:00:55 2026 GMT
Subject: CN=8e3bfa1d164fda2472a393bc36e5ba406fe85f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:61:c3:d2:6a:a6:ac:0d:d4:d2:8a:86:07:
3a:66:89:37:f1:52:d3:19:77:f2:6b:e2:93:b7:5c:
98:d2:17:52:db:af:f4:7e:95:e9:ef:b4:c7:43:65:
25:52:f8:33:7c:5f:e2:fe:01:ca:22:ef:2d:9b:7e:
d6:6c:53:f9:3c:75:5d:93:77:ab:df:7b:1f:8d:ca:
c5:66:78:64:b9:94:f7:0a:1d:3b:db:94:f0:20:6e:
dd:94:82:0a:23:ca:3b:01:b6:48:cb:91:6a:a4:01:
96:53:6b:d5:c0:75:6f:54:7e:d8:a4:ce:aa:6f:5f:
9e:a5:76:67:47:15:d7:d9:5b:02:94:c8:99:a7:8b:
17:80:1c:c5:5d:8b:be:2e:52:9f:89:de:06:2a:5a:
6f:ed:c8:2d:11:7a:92:2b:96:b0:ad:aa:4c:12:62:
3d:8e:da:7c:d0:64:6d:2a:b9:f2:fc:65:98:04:05:
42:35:cc:f9:7f:87:c5:61:1e:88:a6:45:b2:cd:0b:
c7:60:2f:13:82:60:7d:af:70:7e:2e:05:82:cb:b6:
bd:25:76:f0:12:4b:de:1f:9a:c6:d6:1e:39:b8:7a:
c4:8b:8a:32:d2:de:57:22:3e:89:f4:7b:80:15:b4:
59:b9:08:db:07:b9:1d:df:80:ed:c6:a5:d6:21:c7:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3B:FA:1D:16:4F:DA:24:72:A3:93:BC:36:E5:BA:40:6F:E8:5F:65
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5a:4b:df:1e:27:4f:37:26:64:d2:a0:0e:f0:c5:d1:1f:cc:
84:cb:37:6e:03:fb:b3:20:2a:f2:86:c1:89:68:52:b9:33:df:
21:dc:38:d1:0d:1d:06:ec:00:9c:2b:d3:04:c4:fa:c3:f5:e4:
47:de:57:fa:f2:76:c7:37:37:7f:7c:a6:a6:85:fd:30:b5:70:
d4:44:af:d4:7f:f8:22:40:b3:7a:0d:b4:9e:90:ac:65:eb:24:
9c:45:bc:d4:b2:4d:db:d0:0d:da:47:b7:a5:21:21:c0:e2:80:
5a:05:65:07:a9:e2:2c:62:16:c0:b8:80:9b:81:5a:10:20:86:
25:11:f1:13:30:ec:93:bb:30:71:ef:7e:0a:9d:38:bc:03:b8:
6c:af:ef:d7:68:e9:a2:04:f1:7c:86:57:19:f5:5c:7d:b1:ae:
63:d2:4a:52:03:5c:02:4f:8e:7e:52:a3:aa:9b:0e:c6:9a:23:
ed:5a:39:64:f7:2f:e7:48:cf:bd:00:54:31:b4:41:66:2e:70:
f3:ac:b0:27:28:b9:0a:c0:e6:54:4b:3f:a6:a4:6f:2b:8d:e4:
94:45:be:a4:28:86:f3:6e:eb:e7:da:4f:2f:e1:1a:d8:c5:f1:
c6:b1:07:e7:7b:ff:ea:2c:10:5a:03:ae:74:05:43:2c:8c:79:
1a:01:9a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:31 2026 by rpki-client