Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
File: pZyqKnNoBpiyyeGmyWQadPPOdug.mft (raw, json)
Hash identifier: oX2pATryboQk/9u0vBiaC6xdyKDmdee/1zpS3dLi8zU=
Subject key identifier: FF:91:9D:6D:A3:E7:B7:D8:4B:90:C4:2C:B1:C3:C5:25:AF:FE:9C:C0
Authority key identifier: A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
Certificate issuer: /CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Certificate serial: 019D9A74A48D8D460F009947AD6F5E8C2E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
Manifest number: 0D58
Signing time: Fri 17 Apr 2026 08:00:28 +0000
Manifest this update: Fri 17 Apr 2026 08:00:28 +0000
Manifest next update: Sat 18 Apr 2026 08:00:28 +0000
Files and hashes: 1: JJSQMWmlP-hmf_UubL_WpQCZF8Q.roa (hash: OJi0/wbd6qNneWhUcrjaUy/6eCpENBifwPxsWzlBoT4=)
2: pZyqKnNoBpiyyeGmyWQadPPOdug.crl (hash: FTvtD6+RSCs768OYp2m//AkgfWl92mQeSw2rPiNBcl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a4:8d:8d:46:0f:00:99:47:ad:6f:5e:8c:2e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Validity
Not Before: Apr 17 08:00:28 2026 GMT
Not After : Apr 18 08:00:28 2026 GMT
Subject: CN=ff919d6da3e7b7d84b90c42cb1c3c525affe9cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:b0:de:ed:df:4f:21:1c:49:10:d8:32:70:
4c:b9:79:53:e5:c4:21:39:cb:f6:0c:38:60:72:ef:
7c:02:d0:0c:b6:bb:25:3f:81:7e:66:41:39:9a:ff:
74:f1:92:fe:d8:bd:ab:23:0b:2f:02:28:c5:82:38:
13:0e:e1:ab:de:02:f7:f8:11:0f:d1:38:b7:48:ad:
e5:d8:93:27:16:11:62:ee:01:fa:2c:8c:88:86:7e:
e3:77:a6:08:2c:24:80:c1:4d:80:a4:a3:ee:06:fa:
bd:0f:09:c5:fb:cc:0f:8d:20:a8:1b:53:7b:5c:6e:
34:e2:0c:d2:cf:06:50:5a:7f:e8:37:8a:c6:e7:64:
86:e1:43:ed:f5:9d:72:5f:28:f0:e9:2b:35:53:ff:
12:ca:94:fa:32:69:b4:dd:6b:26:d2:63:83:b8:23:
32:3a:d7:86:35:3b:7b:f5:9c:c5:df:20:87:5e:37:
9f:9c:ab:42:ba:76:d0:61:3d:d3:be:b5:75:e7:45:
e5:26:d6:4e:c6:b8:c3:dd:58:d9:8d:dd:b0:b9:00:
db:4b:fb:7d:ff:74:6c:48:e9:a6:39:a9:05:2f:40:
0e:76:a5:d6:23:46:cc:ed:05:10:b0:2c:97:f1:71:
50:d7:71:96:e7:f5:eb:8e:df:23:da:8f:3c:d2:fd:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:91:9D:6D:A3:E7:B7:D8:4B:90:C4:2C:B1:C3:C5:25:AF:FE:9C:C0
X509v3 Authority Key Identifier:
keyid:A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:55:92:8b:28:b5:6f:6d:77:6d:df:3d:11:25:54:b9:de:42:
e9:cc:a3:c6:5f:5d:90:62:51:c2:ce:42:fd:57:81:61:a7:24:
b1:87:ff:e3:3b:ac:23:90:86:2d:29:ff:b8:26:b7:1d:c1:bd:
96:0d:db:e7:3f:2c:f4:5f:72:50:d2:e7:de:ca:74:0f:35:d1:
92:3a:73:84:92:69:91:52:94:75:6b:9f:3f:03:bd:63:40:d5:
e4:b6:13:43:4e:ca:c8:a4:39:af:0b:e4:95:81:cc:d0:9e:af:
02:c4:08:cd:77:ae:b8:25:08:80:24:01:97:4c:01:1a:f1:fe:
50:1a:7c:f2:56:7f:d7:a6:f1:a9:31:0f:18:23:a7:ce:79:99:
ad:95:6c:35:45:84:21:e3:9b:fd:d6:07:f6:1f:02:bb:9a:20:
f3:06:a5:4c:80:bb:3e:4a:69:2c:6a:2e:63:44:da:13:55:57:
46:78:2a:ac:c2:80:14:de:9e:73:e3:76:62:82:2b:0f:7b:09:
78:e9:c3:92:5e:ff:fe:c8:6e:b6:62:e4:63:9e:05:98:05:c2:
e5:08:ea:d2:86:31:24:56:e3:9b:87:f3:2d:c1:01:45:c3:e0:
f8:97:ab:e1:4a:a8:bf:7d:d2:29:63:bd:bc:b9:0c:59:4b:9f:
d9:14:d1:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adKSNjUYPAJlHrW9ejC4nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWNhYTJhNzM2ODA2OThiMmM5ZTFhNmM5NjQxYTc0ZjNj
ZTc2ZTgwHhcNMjYwNDE3MDgwMDI4WhcNMjYwNDE4MDgwMDI4WjAzMTEwLwYDVQQD
EyhmZjkxOWQ2ZGEzZTdiN2Q4NGI5MGM0MmNiMWMzYzUyNWFmZmU5Y2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspqw3u3fTyEcSRDYMnBMuXlT5cQh
Ocv2DDhgcu98AtAMtrslP4F+ZkE5mv908ZL+2L2rIwsvAijFgjgTDuGr3gL3+BEP
0Ti3SK3l2JMnFhFi7gH6LIyIhn7jd6YILCSAwU2ApKPuBvq9DwnF+8wPjSCoG1N7
XG404gzSzwZQWn/oN4rG52SG4UPt9Z1yXyjw6Ss1U/8SypT6Mmm03Wsm0mODuCMy
OteGNTt79ZzF3yCHXjefnKtCunbQYT3TvrV150XlJtZOxrjD3VjZjd2wuQDbS/t9
/3RsSOmmOakFL0AOdqXWI0bM7QUQsCyX8XFQ13GW5/Xrjt8j2o880v3q0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+RnW2j57fYS5DELLHDxSWv/pzAMB8GA1UdIwQY
MBaAFKWcqipzaAaYssnhpslkGnTzznboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFp5cUtuTm9CcGl5eWVHbXlXUWFkUFBPZHVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kZDY3MmYtNTMzNi00ZjM1LWIzZWYt
YWU5MWFiMzQyYmUxLzEvcFp5cUtuTm9CcGl5eWVHbXlXUWFkUFBPZHVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9kZDY3MmYtNTMzNi00ZjM1LWIzZWYtYWU5MWFiMzQyYmUx
LzEvcFp5cUtuTm9CcGl5eWVHbXlXUWFkUFBPZHVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVWSiyi1
b213bd89ESVUud5C6cyjxl9dkGJRws5C/VeBYacksYf/4zusI5CGLSn/uCa3HcG9
lg3b5z8s9F9yUNLn3sp0DzXRkjpzhJJpkVKUdWufPwO9Y0DV5LYTQ07KyKQ5rwvk
lYHM0J6vAsQIzXeuuCUIgCQBl0wBGvH+UBp88lZ/16bxqTEPGCOnznmZrZVsNUWE
IeOb/dYH9h8Cu5og8walTIC7PkppLGouY0TaE1VXRngqrMKAFN6ec+N2YoIrD3sJ
eOnDkl7//shutmLkY54FmAXC5Qjq0oYxJFbjm4fzLcEBRcPg+Jer4Uqov33SKWO9
vLkMWUuf2RTREQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:05:29 2026 by rpki-client