Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: jQy681YeYVW4vkJbBpQKd5Snj+OdZ8Zx+2oJR+4FQus=
Subject key identifier: F4:7C:5D:DB:CC:BF:3C:FC:D1:F6:7F:C4:79:8D:FC:EB:DA:76:2A:0B
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 019CAAC621D76B2BB47AA801792BD467DB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 12E5
Signing time: Sun 01 Mar 2026 19:00:37 +0000
Manifest this update: Sun 01 Mar 2026 19:00:37 +0000
Manifest next update: Mon 02 Mar 2026 19:00:37 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: XDwZm7OwIbBDjIZYMGZKcgeCVTUi0mGb8VnB2wouZHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:21:d7:6b:2b:b4:7a:a8:01:79:2b:d4:67:db:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Mar 1 19:00:37 2026 GMT
Not After : Mar 2 19:00:37 2026 GMT
Subject: CN=f47c5ddbccbf3cfcd1f67fc4798dfcebda762a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:71:2c:d9:b9:b6:ab:f4:a7:7b:59:d9:29:
14:bc:41:f0:ae:20:ae:18:1e:1b:74:ea:72:8c:11:
0e:77:82:b2:d9:d4:24:32:6b:47:a7:4c:ac:34:73:
c8:50:b3:87:f9:68:91:3a:48:0b:98:32:41:67:29:
37:45:1b:25:57:b9:d6:51:32:91:2a:5d:e5:92:28:
55:b8:2f:f4:00:68:3d:d2:b5:03:42:d8:33:4d:32:
9d:38:a1:d6:0a:b3:fe:0a:d7:f4:6a:1d:1e:3d:19:
8f:b7:fa:61:e1:06:18:92:b0:75:7d:af:06:14:6a:
9f:b8:be:3b:eb:b8:6d:ad:ad:6c:e6:d2:13:9c:48:
41:98:8a:f7:a9:24:ab:7e:90:65:50:55:e0:e4:61:
64:a7:08:e4:f9:62:70:df:55:dd:ef:ad:65:d1:72:
5e:5c:f3:20:79:c8:64:50:6a:41:67:d7:29:ef:1e:
23:a1:cf:cf:e0:1e:b3:66:22:ed:47:4f:a7:73:05:
c1:7d:06:34:a9:c3:6a:02:27:d9:9a:ea:2d:70:31:
3c:93:b6:f2:b3:93:95:a3:23:ac:74:ad:1e:ff:14:
78:41:15:68:c8:1d:a8:d5:ba:d2:9e:e5:53:17:ba:
6c:e3:92:6f:97:12:da:28:e8:8d:ae:16:6a:cc:0c:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7C:5D:DB:CC:BF:3C:FC:D1:F6:7F:C4:79:8D:FC:EB:DA:76:2A:0B
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e2:66:c7:e6:4e:e4:62:32:a9:b0:cc:0b:29:9e:ea:a6:59:
2a:2e:c9:ca:ef:0b:75:0d:49:a3:54:1c:01:85:b9:cf:41:b9:
1c:f6:1f:ad:e5:6b:5a:40:3b:b5:4a:5d:9d:89:ff:0b:8a:41:
9f:60:87:6f:7b:c0:f7:04:14:f7:0a:d6:5c:7a:fd:bb:90:71:
5e:cf:d3:f3:d5:dc:c7:4a:d6:08:f7:62:dd:c2:f2:ff:5a:4d:
59:f9:a1:58:ab:25:b1:3d:59:23:47:13:75:0e:fe:c1:bd:9c:
80:cb:bd:69:66:ff:9d:a5:59:be:09:84:c1:41:d9:6a:b3:1b:
12:af:b9:4a:85:1d:43:5e:d7:56:1d:58:47:29:35:9f:aa:7b:
06:e8:9c:e7:aa:12:9a:32:10:e9:20:61:74:34:cf:3a:32:ea:
44:df:03:e6:61:ec:bb:26:e3:de:8e:6d:d0:a5:2c:36:b4:cb:
8d:1f:f5:21:7a:95:d4:80:92:0e:21:50:19:63:94:48:f8:0e:
a2:d6:fc:c7:15:10:3d:f1:0a:26:9b:40:45:be:1d:78:87:3f:
e4:33:fa:cc:62:73:c5:74:7f:e9:21:3d:c3:4e:08:3d:da:cf:
a4:5f:4d:4e:41:89:55:46:78:1a:39:70:8b:55:6e:03:87:29:
b4:ff:e2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:04 2026 by rpki-client