Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: JtM9uG+vDtqNMyxkenuGIBrMzaqMzqLUqxzLls7hKAA=
Subject key identifier: 81:3F:68:E0:1C:30:AA:EC:BF:1B:A3:66:73:35:90:64:75:E9:2D:52
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 019CADC810C428E306950BD75E9E21303258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 09:01:35 +0000
Manifest this update: Mon 02 Mar 2026 09:01:35 +0000
Manifest next update: Tue 03 Mar 2026 09:01:35 +0000
Files and hashes: 1: GjpGm1v3wSRAaUtsjrHQn6aKiJ0.roa (hash: 4K7A1g6E595/Yprg9eFeVpmlN6yEQaZZKljRzX+WHN4=)
2: J72P5DI9aUZfHCEMMwWflr8uG8k.roa (hash: FIxoJFJimB9dMBCV9pC5bRPsPazZNP7zbfoE1WYrso8=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: 0whsblVoe/Np6mloJFCLGlHL47Z/5AxHgd8KXTp0deo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:10:c4:28:e3:06:95:0b:d7:5e:9e:21:30:32:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Mar 2 09:01:35 2026 GMT
Not After : Mar 3 09:01:35 2026 GMT
Subject: CN=813f68e01c30aaecbf1ba3667335906475e92d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ef:70:cc:b0:aa:fb:05:78:f7:34:b7:30:b2:
0b:8a:85:60:b5:a9:64:6f:05:35:ca:4c:eb:bb:b9:
0b:c6:b7:4a:70:7e:4d:86:a4:ee:ed:6b:35:a7:3b:
96:59:01:ca:b6:15:ec:3b:87:75:e4:ee:81:27:3b:
2b:11:5e:af:bb:8f:c2:1e:7c:f3:f6:7d:e7:2c:89:
25:d3:6f:ae:a4:d6:65:ee:03:a8:24:32:87:3d:13:
d6:0b:68:9c:17:06:44:4f:e5:9e:43:76:ea:05:ad:
6b:2f:da:ac:c9:0a:7b:2a:30:7c:5c:38:62:61:c2:
cc:cf:50:0f:9e:95:d6:83:f1:46:0c:95:96:6e:d5:
3d:a0:ee:52:91:94:c0:ee:42:e9:38:c8:64:b5:46:
17:9b:43:63:f3:c2:a1:08:d0:4d:c4:5e:0f:8d:a5:
24:63:0b:82:7f:11:8e:40:28:f7:54:54:c3:65:75:
11:a4:af:35:1a:2a:32:2a:e0:fd:83:d4:1c:75:07:
8d:4b:78:79:8a:df:b2:2e:72:e5:9d:69:10:0a:30:
c5:37:c5:0b:98:30:ce:9a:02:70:7e:70:c8:54:a8:
8e:ac:00:46:27:ce:0f:d1:15:22:16:2e:d8:80:5c:
10:e9:26:9d:83:87:19:b2:18:80:3c:86:99:0c:b6:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3F:68:E0:1C:30:AA:EC:BF:1B:A3:66:73:35:90:64:75:E9:2D:52
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:11:1f:70:39:a0:e9:5d:0d:14:b6:06:8b:a4:61:c3:88:a7:
35:3e:06:a6:6e:4f:8b:cb:5d:bf:70:12:81:70:29:9f:5d:0e:
f2:47:90:49:84:07:41:73:7a:22:63:30:78:db:cb:9a:ae:43:
3b:34:eb:d4:ff:73:a8:aa:c4:79:e2:fe:c7:37:88:9a:36:34:
1d:f7:9b:27:f2:fb:1e:a7:a6:7f:06:4e:8a:de:28:4c:8d:28:
c6:c4:28:eb:36:20:74:1e:cb:d3:70:39:2c:3d:42:a6:ba:8d:
af:05:36:d7:40:ff:3c:cd:59:3c:49:ac:64:31:d4:ac:e9:43:
ca:5b:b1:08:bd:06:f0:46:01:0c:61:da:d4:97:30:ad:00:4d:
f0:51:27:c0:16:10:76:de:70:58:d3:b7:22:ff:b2:80:a3:88:
e4:51:e5:20:de:33:6a:56:4f:53:6c:c6:7b:54:b3:3b:a5:b8:
b9:01:73:97:01:ac:03:0b:26:18:ea:ef:91:f8:63:1c:70:37:
a7:96:89:ac:f8:ae:e7:85:72:b8:c7:a0:ca:13:3e:6e:04:51:
6d:5f:58:b9:25:ac:d9:bf:e2:8d:d4:4d:37:87:5a:8b:f2:91:
15:38:86:ad:cb:23:a7:16:20:48:20:df:3e:13:50:3d:63:80:
83:83:09:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyBDEKOMGlQvXXp4hMDJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMzlkZDdiZDczYzNlMWJhMjdkMTc4ZDU1YzI2ZjhhOTZj
ZGI0YTkwHhcNMjYwMzAyMDkwMTM1WhcNMjYwMzAzMDkwMTM1WjAzMTEwLwYDVQQD
Eyg4MTNmNjhlMDFjMzBhYWVjYmYxYmEzNjY3MzM1OTA2NDc1ZTkyZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu9wzLCq+wV49zS3MLILioVgtalk
bwU1ykzru7kLxrdKcH5NhqTu7Ws1pzuWWQHKthXsO4d15O6BJzsrEV6vu4/CHnzz
9n3nLIkl02+upNZl7gOoJDKHPRPWC2icFwZET+WeQ3bqBa1rL9qsyQp7KjB8XDhi
YcLMz1APnpXWg/FGDJWWbtU9oO5SkZTA7kLpOMhktUYXm0Nj88KhCNBNxF4PjaUk
YwuCfxGOQCj3VFTDZXURpK81GioyKuD9g9QcdQeNS3h5it+yLnLlnWkQCjDFN8UL
mDDOmgJwfnDIVKiOrABGJ84P0RUiFi7YgFwQ6Sadg4cZshiAPIaZDLbHbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIE/aOAcMKrsvxujZnM1kGR16S1SMB8GA1UdIwQY
MBaAFD853XvXPD4bon0XjVXCb4qWzbSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMt
MDRmOWU2MTZhZjYwLzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMtMDRmOWU2MTZhZjYw
LzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhEfcDmg
6V0NFLYGi6Rhw4inNT4Gpm5Pi8tdv3ASgXApn10O8keQSYQHQXN6ImMweNvLmq5D
OzTr1P9zqKrEeeL+xzeImjY0HfebJ/L7HqemfwZOit4oTI0oxsQo6zYgdB7L03A5
LD1CprqNrwU210D/PM1ZPEmsZDHUrOlDyluxCL0G8EYBDGHa1JcwrQBN8FEnwBYQ
dt5wWNO3Iv+ygKOI5FHlIN4zalZPU2zGe1SzO6W4uQFzlwGsAwsmGOrvkfhjHHA3
p5aJrPiu54VyuMegyhM+bgRRbV9YuSWs2b/ijdRNN4dai/KRFTiGrcsjpxYgSCDf
PhNQPWOAg4MJ4Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:36 2026 by rpki-client