Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: 6WYsNTQWkgOEBP/f8PgYePHYmY6lDmUP1MFz37EPO7U=
Subject key identifier: 5D:C0:55:AD:D6:64:38:3D:EE:46:25:74:A8:78:68:51:E2:C4:A1:34
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 019ED42B508B0B8093113EA6A919371C36A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 1967
Signing time: Wed 17 Jun 2026 06:01:08 +0000
Manifest this update: Wed 17 Jun 2026 06:01:08 +0000
Manifest next update: Thu 18 Jun 2026 06:01:08 +0000
Files and hashes: 1: GjpGm1v3wSRAaUtsjrHQn6aKiJ0.roa (hash: 4K7A1g6E595/Yprg9eFeVpmlN6yEQaZZKljRzX+WHN4=)
2: J72P5DI9aUZfHCEMMwWflr8uG8k.roa (hash: FIxoJFJimB9dMBCV9pC5bRPsPazZNP7zbfoE1WYrso8=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: wu5LpiabZK2j5aCbrXFGqrzdxe5jc+8VuDFmil7QAv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:50:8b:0b:80:93:11:3e:a6:a9:19:37:1c:36:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Jun 17 06:01:08 2026 GMT
Not After : Jun 18 06:01:08 2026 GMT
Subject: CN=5dc055add664383dee462574a8786851e2c4a134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:dc:a3:91:b3:f6:a2:09:e8:74:1c:4e:0f:
64:6b:1d:9c:1a:30:13:34:42:e9:70:19:88:0d:23:
36:19:c6:af:d7:88:5d:5c:1b:05:f5:4d:47:f0:c7:
16:ec:65:d7:0c:b9:ff:d3:09:32:e9:ef:a9:82:13:
a5:b3:ca:9d:70:ad:01:bd:5e:0a:70:f1:a4:51:86:
86:c0:49:b0:0d:96:20:ea:33:ee:88:18:fe:ec:ea:
83:08:ba:51:29:81:d9:53:c3:4b:10:63:64:b3:70:
a6:9d:2f:11:2f:dc:c2:07:f8:5f:02:e4:43:df:0f:
d3:80:9b:db:83:e8:6f:97:2a:97:9b:97:bc:b7:95:
a6:9c:4c:bf:98:95:4a:c8:7e:ad:92:20:e9:7b:24:
4d:3e:66:ee:aa:4a:04:5b:4d:84:92:78:ba:e4:c9:
ac:e5:9c:c8:a2:c6:bd:97:2e:42:8c:09:f0:cd:81:
c9:dd:07:b0:ed:0b:24:c5:2c:33:e9:ae:35:1e:54:
b1:ac:23:04:82:e9:4c:af:86:51:93:05:31:31:86:
d3:28:54:0a:57:ee:d8:ef:eb:b4:4c:68:c4:aa:2d:
51:a6:e2:4d:d3:6d:78:24:94:8e:24:f8:73:7d:92:
b3:1e:c8:ef:0b:2f:fd:e7:e6:f7:40:24:98:19:fe:
6c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C0:55:AD:D6:64:38:3D:EE:46:25:74:A8:78:68:51:E2:C4:A1:34
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8c:dd:3a:95:2e:00:b8:3e:f5:65:8e:36:19:26:a1:c7:b0:
8f:2d:0e:05:b2:b5:9c:f8:2e:32:25:10:d5:20:64:26:6d:99:
36:a1:ea:d4:44:79:fe:b2:c7:20:79:ef:12:f3:26:6e:17:3d:
dc:ff:de:7d:90:d3:64:8d:c4:a1:9a:9d:c1:5b:56:55:fc:02:
57:65:f3:1a:98:47:f4:83:cd:23:c4:30:18:3a:57:ca:4b:39:
92:35:6a:7b:e0:19:29:ee:f0:2a:60:13:2e:39:7a:24:35:52:
eb:3d:1f:5d:54:e6:a2:10:20:4a:7d:d8:cf:9a:7c:8c:ed:fa:
8d:f9:89:88:09:fa:0d:4d:3f:2c:b4:f5:5d:9b:67:05:fe:c2:
0c:23:be:01:c8:96:56:2c:79:9c:30:a8:47:6c:8e:90:b8:89:
79:af:46:6f:16:23:d6:be:47:ab:df:03:dd:ec:c7:4a:e8:a9:
56:ff:d5:40:44:d1:50:dc:ea:99:12:b9:59:20:77:30:de:80:
fa:3e:ed:df:96:2d:2e:57:21:5b:1c:81:73:4a:a8:45:61:77:
13:57:c9:e6:d4:56:9f:ec:65:97:e5:69:44:29:38:86:a3:14:
3f:68:a8:83:64:d8:99:5b:76:1a:dd:c3:d8:60:45:ff:0c:00:
02:1b:9c:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UK1CLC4CTET6mqRk3HDahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMzlkZDdiZDczYzNlMWJhMjdkMTc4ZDU1YzI2ZjhhOTZj
ZGI0YTkwHhcNMjYwNjE3MDYwMTA4WhcNMjYwNjE4MDYwMTA4WjAzMTEwLwYDVQQD
Eyg1ZGMwNTVhZGQ2NjQzODNkZWU0NjI1NzRhODc4Njg1MWUyYzRhMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj7co5Gz9qIJ6HQcTg9kax2cGjAT
NELpcBmIDSM2Gcav14hdXBsF9U1H8McW7GXXDLn/0wky6e+pghOls8qdcK0BvV4K
cPGkUYaGwEmwDZYg6jPuiBj+7OqDCLpRKYHZU8NLEGNks3CmnS8RL9zCB/hfAuRD
3w/TgJvbg+hvlyqXm5e8t5WmnEy/mJVKyH6tkiDpeyRNPmbuqkoEW02Ekni65Mms
5ZzIosa9ly5CjAnwzYHJ3Qew7QskxSwz6a41HlSxrCMEgulMr4ZRkwUxMYbTKFQK
V+7Y7+u0TGjEqi1RpuJN0214JJSOJPhzfZKzHsjvCy/95+b3QCSYGf5sDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3AVa3WZDg97kYldKh4aFHixKE0MB8GA1UdIwQY
MBaAFD853XvXPD4bon0XjVXCb4qWzbSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMt
MDRmOWU2MTZhZjYwLzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMtMDRmOWU2MTZhZjYw
LzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYzdOpUu
ALg+9WWONhkmocewjy0OBbK1nPguMiUQ1SBkJm2ZNqHq1ER5/rLHIHnvEvMmbhc9
3P/efZDTZI3EoZqdwVtWVfwCV2XzGphH9IPNI8QwGDpXyks5kjVqe+AZKe7wKmAT
Ljl6JDVS6z0fXVTmohAgSn3Yz5p8jO36jfmJiAn6DU0/LLT1XZtnBf7CDCO+AciW
Vix5nDCoR2yOkLiJea9GbxYj1r5Hq98D3ezHSuipVv/VQETRUNzqmRK5WSB3MN6A
+j7t35YtLlchWxyBc0qoRWF3E1fJ5tRWn+xll+VpRCk4hqMUP2iog2TYmVt2Gt3D
2GBF/wwAAhucZQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:33 2026 by rpki-client