Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
File: pZyqKnNoBpiyyeGmyWQadPPOdug.mft (raw, json)
Hash identifier: RLZxhkIin+VcSuZPkkIxRWe+XIJsGRv0d0nzM+Mi/yI=
Subject key identifier: 40:CF:F8:14:6D:2A:0E:A1:36:0A:EA:76:D9:63:E9:81:9A:29:5B:34
Authority key identifier: A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
Certificate issuer: /CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Certificate serial: 019CAC0FBC128F629A8FED71D91C21915937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
Manifest number: 0CDC
Signing time: Mon 02 Mar 2026 01:00:38 +0000
Manifest this update: Mon 02 Mar 2026 01:00:38 +0000
Manifest next update: Tue 03 Mar 2026 01:00:38 +0000
Files and hashes: 1: pZyqKnNoBpiyyeGmyWQadPPOdug.crl (hash: MoNk1mRIjl4pn9Kfket+S+abQtBxkGiWAuQttE8TQ1g=)
2: rRTCZ5FyRdDiK7BZGTzqpa0QNeg.roa (hash: mji6QPUv0yUiA70EcUkHQFZ0veAkRZWxgnDOQwOKKtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:bc:12:8f:62:9a:8f:ed:71:d9:1c:21:91:59:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Validity
Not Before: Mar 2 01:00:38 2026 GMT
Not After : Mar 3 01:00:38 2026 GMT
Subject: CN=40cff8146d2a0ea1360aea76d963e9819a295b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bc:75:39:07:8d:a9:9f:f3:e3:1f:46:4a:26:
4b:6e:78:77:00:54:14:b8:45:bd:d0:ea:96:12:17:
e8:49:2b:e5:4d:8c:75:27:ce:11:a3:08:a2:b3:6f:
fe:37:fa:10:ed:89:59:43:db:64:fb:d6:2e:4e:b0:
71:84:8f:0c:1e:95:50:7a:a2:cf:ce:84:d9:55:81:
30:c0:3a:6a:bf:01:1b:03:bb:c4:45:df:55:0e:50:
8b:3e:df:8f:24:a3:9e:38:62:e0:4f:ba:e4:26:f3:
65:2e:fe:1f:6f:54:b9:c9:5f:43:b8:31:00:91:0f:
67:70:27:1c:48:f2:42:48:a2:e7:e3:ea:8b:2b:0d:
3a:8b:07:b5:9a:e4:eb:c4:20:b3:19:aa:29:fa:91:
5b:0f:a4:82:68:d5:ca:78:95:a5:71:5c:ca:c2:9f:
23:58:df:2f:ae:ed:9a:cc:a1:0b:4f:fc:05:3b:68:
2f:d0:82:b0:4c:fc:04:7f:65:d5:58:87:b0:f7:11:
b7:cd:e3:3d:a1:f5:0a:ab:57:5a:30:a4:34:fa:8a:
69:82:51:6c:b6:be:ff:62:cf:6a:78:06:ef:58:3b:
8c:9d:ee:a4:3d:59:d7:3b:15:19:5a:fd:ce:07:04:
3d:f8:e1:c1:81:90:b3:1e:c3:06:4a:f6:77:90:94:
be:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CF:F8:14:6D:2A:0E:A1:36:0A:EA:76:D9:63:E9:81:9A:29:5B:34
X509v3 Authority Key Identifier:
keyid:A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8a:b0:6d:5a:61:17:46:b2:37:f1:a1:36:9d:f1:fd:b5:ff:
d0:eb:42:2c:d0:66:15:6a:f3:0a:e8:9d:57:77:76:7f:18:03:
23:80:6c:ca:2d:b2:da:e2:59:da:18:11:a3:cd:9a:b0:ec:5f:
28:d0:14:0c:6d:4c:b1:22:a0:1b:93:b0:3c:c6:7e:43:4b:a2:
9c:c5:dd:a1:1f:b4:f6:b0:5a:b1:4e:44:d2:67:e3:ec:73:29:
81:18:95:5f:b5:4a:09:e0:11:a4:15:fb:f8:b3:11:f1:45:aa:
72:fb:41:57:c6:ae:ac:39:4b:65:1b:23:58:8b:ed:23:d0:17:
dd:8f:00:20:9e:c4:9d:4e:da:74:07:eb:2f:10:fc:5e:5c:27:
14:53:17:f0:63:47:a2:48:6e:68:d1:3f:99:6b:ea:6c:1f:3e:
f5:f2:d8:75:10:f9:36:7b:70:53:42:63:c3:75:45:8b:69:84:
5d:8d:97:fd:15:18:9d:8c:5b:e0:d9:49:d0:42:07:44:f1:08:
99:fa:5b:9d:0d:3f:ca:b9:51:f9:53:4c:f9:0d:00:ac:1c:1a:
4f:5d:d8:fc:55:ec:65:bd:bd:8e:e2:17:e2:e1:35:2d:c0:4e:
88:47:54:d9:3f:78:7c:1e:88:27:6d:33:6e:50:7e:f4:e2:2e:
86:66:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:49 2026 by rpki-client