Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json)
Hash identifier: JbhaT1O8uQXOtZUSK5rOxMydE6MVJWGjtT5SculAYRk=
Subject key identifier: E6:02:FF:47:F1:40:7E:E1:04:EC:F4:26:43:F3:09:E8:E7:9F:FC:CD
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 019D984FB187E1690FB41BF637BED3F37945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:00:52 +0000
Manifest this update: Thu 16 Apr 2026 22:00:52 +0000
Manifest next update: Fri 17 Apr 2026 22:00:52 +0000
Files and hashes: 1: Fi1IL191MwjF0uM0fhIUPlVEg8w.roa (hash: i72yfWesdd9h7w8CX+H4BGBsgb7kiryYQ8GxW04bDw0=)
2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: jpoEglArb6TqFLGYlcniOv3OO4jA2nQCaq7sdwHUMmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b1:87:e1:69:0f:b4:1b:f6:37:be:d3:f3:79:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: Apr 16 22:00:52 2026 GMT
Not After : Apr 17 22:00:52 2026 GMT
Subject: CN=e602ff47f1407ee104ecf42643f309e8e79ffccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:eb:23:8f:7b:2b:ac:32:53:85:3c:9c:1a:
3a:6a:69:eb:2d:d2:b8:ce:93:fb:9b:6e:14:19:72:
4d:b1:c7:a9:03:2f:c0:e0:74:2f:67:1e:03:67:45:
fe:a2:34:70:86:ae:10:f1:64:f9:65:de:a7:fc:2e:
91:d6:09:0e:eb:f0:26:fc:27:d3:fa:76:6b:73:e5:
20:e5:48:59:cc:b5:29:3d:5a:7a:1b:c4:bc:c6:38:
eb:e1:f0:b4:18:fc:fa:12:4e:69:be:3d:ac:ae:44:
1a:86:b1:e6:15:c7:98:fd:36:cb:b7:c0:11:f9:de:
18:af:a4:93:e8:fc:c6:10:9c:82:bf:6c:c2:2d:82:
d1:e5:3a:c1:ff:f7:79:d0:21:f6:18:08:60:f5:96:
ec:60:b8:af:c2:7b:36:a0:1c:ba:fc:48:b6:3b:30:
64:56:c7:b8:d6:c4:5e:4f:de:a1:cf:3c:59:ba:4c:
55:2f:62:df:6e:e3:ff:62:c2:48:d2:d8:3f:6e:2b:
c8:8c:71:de:86:db:e1:21:c6:94:41:79:98:9b:80:
d5:fd:33:5a:0a:13:89:8a:23:42:83:ba:5b:2d:a8:
d8:70:eb:b7:45:c5:29:90:16:29:61:2f:36:61:9b:
9e:e1:4c:e6:ee:54:4a:0e:70:62:a2:40:44:ef:32:
5d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:02:FF:47:F1:40:7E:E1:04:EC:F4:26:43:F3:09:E8:E7:9F:FC:CD
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9c:f7:6c:c9:1a:ae:50:8e:f5:64:24:08:fa:84:3c:3a:8e:
df:10:6a:81:af:eb:9e:81:f8:12:e1:7e:f3:7d:a9:58:ce:eb:
89:01:49:8b:53:41:33:25:a8:70:d3:38:61:b7:4a:3c:95:32:
18:93:37:a9:7a:e3:9e:d0:ed:4a:79:08:88:d1:f3:be:5b:62:
15:ad:9b:bd:1a:6a:93:0e:f8:c4:71:ae:38:b1:53:8a:d8:78:
08:7f:10:03:03:30:88:9e:b9:eb:c9:07:67:40:a5:eb:03:12:
49:ff:06:66:74:ab:a2:8d:78:ce:6b:01:27:c4:55:0a:a4:0d:
2d:15:3b:34:f0:b9:4e:7d:a3:75:7b:6d:c8:4e:34:2f:8b:ee:
af:84:e7:73:00:88:2e:2d:55:9e:17:f7:16:af:59:6b:6c:24:
1e:79:ad:6a:1f:5b:7e:2c:e1:22:f3:d3:94:9b:a6:d1:93:10:
53:44:c6:d1:d6:57:6f:a9:4f:e1:4c:88:06:0d:86:0a:f1:26:
88:43:1b:de:5d:fa:8e:5f:8d:1a:32:d9:99:31:ba:0d:a1:37:
45:fe:90:8b:d9:22:75:f3:c0:4b:27:66:2a:ca:93:35:68:7c:
80:26:ee:b0:dc:2b:5a:46:f4:16:14:63:c7:02:f9:e3:a7:c3:
e4:2e:a6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:06 2026 by rpki-client