Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: fO+Ijqdasl6Gvf0RRnlfbITa4lZkGHMnarJYH7fHQRo=
Subject key identifier: 9E:34:23:15:85:35:3B:73:20:55:91:F7:71:47:A7:80:94:7F:B2:29
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 01A128E87BBAE0716DB0ACF95050A7F87F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 03:01:27 +0000
Manifest this update: Sun 11 Oct 2026 03:01:27 +0000
Manifest next update: Mon 12 Oct 2026 03:01:27 +0000
Files and hashes: 1: GjpGm1v3wSRAaUtsjrHQn6aKiJ0.roa (hash: 4K7A1g6E595/Yprg9eFeVpmlN6yEQaZZKljRzX+WHN4=)
2: J72P5DI9aUZfHCEMMwWflr8uG8k.roa (hash: FIxoJFJimB9dMBCV9pC5bRPsPazZNP7zbfoE1WYrso8=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: ny/S8lT2Ts2rCero8fZmZYS3u+RvM0pDNk/N9iXZHFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:7b:ba:e0:71:6d:b0:ac:f9:50:50:a7:f8:7f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Oct 11 03:01:27 2026 GMT
Not After : Oct 12 03:01:27 2026 GMT
Subject: CN=9e34231585353b73205591f77147a780947fb229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:a6:4f:8a:f9:fb:52:ea:c3:c7:f5:9d:2b:
17:e8:02:5c:e9:33:85:07:51:a8:10:49:ed:3e:1e:
3a:a5:d3:ce:0c:c2:f9:94:07:fd:8f:7a:18:36:10:
ed:bf:e7:ec:6f:0f:93:e8:2d:cd:28:c3:6d:96:d4:
42:43:1c:23:21:12:ad:b0:9b:18:c0:27:f6:66:05:
a0:0f:69:53:67:21:a3:4c:a1:40:09:39:41:b2:3a:
54:d5:55:e7:bd:2f:d9:88:a8:71:4e:63:a4:6a:31:
b6:c7:25:ba:24:78:af:fd:55:63:17:29:56:71:87:
7f:7d:32:71:41:20:6e:20:27:14:9c:c1:9c:f9:93:
51:e2:59:48:92:82:0c:f6:50:ce:e1:3e:e8:1b:71:
bd:7d:22:8d:26:b0:1e:51:3f:45:c8:99:d2:ec:98:
af:27:18:1f:9b:c2:57:cd:cd:82:43:24:81:96:53:
32:30:a4:6d:4b:16:b1:62:88:66:c0:c0:f2:e9:fb:
e9:61:43:4d:0d:c9:b0:5e:e6:32:6b:6f:23:fd:16:
4f:a5:af:74:fd:3b:39:43:ae:5c:c8:d7:ba:5f:08:
2a:d2:5d:68:5d:a1:ee:85:48:22:89:b6:b0:ff:b3:
dc:1c:dd:bb:35:5d:1c:b7:58:c4:2d:8b:d9:48:ee:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:34:23:15:85:35:3B:73:20:55:91:F7:71:47:A7:80:94:7F:B2:29
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7a:ef:99:0a:cb:46:04:9c:b7:37:8f:c6:16:17:7d:84:7e:
2c:05:0a:75:4a:cb:22:89:d2:55:57:90:90:7b:a2:64:3f:77:
f7:c2:b6:d4:ea:87:64:5c:06:5a:1f:93:d8:ca:4b:02:e9:c0:
04:45:7a:c8:18:08:18:a1:17:ce:c8:78:2b:b2:0c:e4:12:ea:
15:c3:bf:81:73:63:e9:a4:1b:97:c1:0d:1c:3b:dc:22:1a:f2:
0c:0a:60:46:00:34:a5:f8:95:f1:24:8c:94:bd:ea:86:9b:fc:
c6:de:6f:31:a6:da:b7:0b:e1:4f:ae:4c:1e:3e:13:d1:5e:3a:
d0:76:7a:5a:50:2b:bb:c9:c0:6c:f2:71:e2:3e:01:14:45:dd:
30:3c:10:f2:91:2b:ff:fe:5b:6a:a7:8c:79:6f:af:76:87:c5:
dd:c3:5c:1a:7e:66:c7:f5:99:36:4e:51:62:6b:88:d0:21:54:
17:24:6a:7b:ed:68:71:6e:88:02:5d:8e:24:6e:25:3e:18:03:
22:16:b1:48:64:52:c9:0d:0a:81:85:c0:20:36:70:56:34:b8:
99:df:76:e9:6a:7b:93:93:84:57:30:29:e0:c5:50:62:f7:fb:
1e:a7:37:92:46:bf:a3:5b:72:7a:06:38:a5:d3:2f:07:9d:37:
1a:d0:09:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:34:32 2026 by rpki-client