Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: NezYajkpV/5uqVKvMg2vnvfoMVcI9FCJrT5SpMj6UII=
Subject key identifier: E2:13:C4:56:D6:BA:51:DF:77:53:F1:9F:FD:BC:F7:B3:77:3B:0B:56
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 019D996275481863D8C0D7E4532441B20328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:00:59 +0000
Manifest this update: Fri 17 Apr 2026 03:00:59 +0000
Manifest next update: Sat 18 Apr 2026 03:00:59 +0000
Files and hashes: 1: GjpGm1v3wSRAaUtsjrHQn6aKiJ0.roa (hash: 4K7A1g6E595/Yprg9eFeVpmlN6yEQaZZKljRzX+WHN4=)
2: J72P5DI9aUZfHCEMMwWflr8uG8k.roa (hash: FIxoJFJimB9dMBCV9pC5bRPsPazZNP7zbfoE1WYrso8=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: ZW3JzhHKKSb7+FZoKBFKqCQL8anU3qzPwsOAuIOM+x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:75:48:18:63:d8:c0:d7:e4:53:24:41:b2:03:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Apr 17 03:00:59 2026 GMT
Not After : Apr 18 03:00:59 2026 GMT
Subject: CN=e213c456d6ba51df7753f19ffdbcf7b3773b0b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:12:3d:bd:51:18:f0:1f:dc:53:65:5f:a0:
82:81:e3:b6:06:c7:f9:8f:f9:33:b3:a4:c8:7c:db:
2c:7a:de:d1:cb:77:da:ac:4d:9b:c8:ac:64:2d:73:
3f:a2:c0:4a:b3:dc:94:87:aa:a5:0c:4f:4b:67:ba:
0f:ce:79:ac:8d:9c:48:01:af:f3:5d:ad:4a:e3:b1:
c4:5a:a5:2e:63:72:50:9f:ed:1b:36:41:14:60:45:
41:f7:70:4c:d5:6a:86:46:04:28:19:4f:ce:d8:49:
88:7f:a5:ec:29:06:aa:50:d8:6f:57:6c:d0:03:51:
88:26:67:00:4f:28:a5:dc:9c:64:8c:06:ef:f1:c6:
3d:02:17:19:e6:0b:89:ea:bc:70:ee:8d:30:89:6e:
5a:1e:45:4f:9c:98:a0:c6:9e:8d:77:53:ca:2b:ad:
99:a8:79:08:30:24:dc:84:7b:80:b6:b9:b1:66:71:
e6:d5:30:8f:ff:ac:8f:98:06:8b:cd:2e:6c:d4:e7:
77:cb:88:be:c8:0b:bf:d7:00:4e:57:cf:20:b3:32:
44:90:91:c4:f6:56:fa:16:1e:77:25:56:98:39:03:
b8:49:bf:b4:50:df:06:fb:25:ac:21:17:17:d6:39:
63:d1:b4:95:8e:29:9a:a5:ba:f8:0d:15:8a:ac:4d:
15:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:13:C4:56:D6:BA:51:DF:77:53:F1:9F:FD:BC:F7:B3:77:3B:0B:56
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d8:16:9e:c1:42:2a:d8:51:a7:77:92:13:72:66:9d:fa:b6:
4d:c1:b1:5e:d5:06:99:7d:44:8f:63:c6:2e:dd:e1:b6:f9:cd:
38:9f:fd:83:29:8b:5f:0d:0a:f1:9a:ba:67:bd:c9:20:d2:2e:
d6:ab:80:da:66:b7:94:65:20:16:ba:27:2a:61:f1:a5:78:b6:
05:6c:a8:f0:14:2a:cd:ea:56:bc:3c:ab:d4:38:e7:73:7b:a4:
1f:f0:dd:1c:d7:bb:41:96:5c:b6:b0:ce:99:54:59:c2:32:38:
04:84:c0:f4:04:f6:5b:66:a8:b6:b9:2b:30:95:3e:51:c1:ec:
64:87:26:fd:da:ea:10:a6:42:61:4f:10:c9:7f:4f:90:6c:f9:
96:88:0c:9b:e6:ee:18:cd:25:ce:8c:0b:fe:fc:5c:76:77:bd:
04:a4:79:61:4a:6b:44:29:4d:5c:b2:4e:77:40:6e:ef:71:b8:
30:28:0e:d4:c2:a9:88:a7:96:4b:90:dd:cc:e6:ea:b2:da:41:
38:f9:76:e7:d9:e6:a3:81:0e:f1:b4:9f:bb:a8:6c:14:79:4d:
3f:39:fa:83:fe:f6:f5:b0:4e:7b:f8:6c:c7:78:98:97:7d:2f:
a3:ae:9c:7e:9a:6c:cd:d2:e2:7e:bf:68:e1:df:35:40:b6:98:
8e:9b:66:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:37 2026 by rpki-client