Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File: pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier: uvYn9v+FCNVXP58gdpoPc+4gFfZ0sfG68XsGjGN2jmM=
Subject key identifier: AB:B4:D6:E9:41:D4:26:06:94:01:31:B0:AB:93:AB:46:8D:66:E9:3F
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer: /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial: 019CA97D4474B68FF74A12EF542F48742E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number: 09D4
Signing time: Sun 01 Mar 2026 13:01:24 +0000
Manifest this update: Sun 01 Mar 2026 13:01:24 +0000
Manifest next update: Mon 02 Mar 2026 13:01:24 +0000
Files and hashes: 1: 3jTH1h5dUYotQ6HSif98N43DNuA.asa (hash: sd2VnqkRw5U6ZlFZBJnlXiTwm3x3Tfojh0Hk8MPRlmE=)
2: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: kkCUFIT+q1ZTP6Xb5yFEe5CEquxqLkd+N51YCwuwGYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:44:74:b6:8f:f7:4a:12:ef:54:2f:48:74:2e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Validity
Not Before: Mar 1 13:01:24 2026 GMT
Not After : Mar 2 13:01:24 2026 GMT
Subject: CN=abb4d6e941d42606940131b0ab93ab468d66e93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:76:45:e3:d6:f3:88:5e:a0:53:12:0e:ad:
15:ef:7b:7e:1b:88:52:b6:5d:54:9e:34:17:56:20:
7f:03:b2:79:51:91:f5:ac:d6:7f:52:e7:63:d7:67:
c3:86:ea:45:46:3a:99:2f:63:b3:4b:48:e8:67:db:
b7:63:b4:9f:bd:d8:2b:4a:5b:d6:74:15:c5:ae:28:
03:62:15:7a:ff:25:c8:87:88:0f:46:fb:1f:0b:b0:
e0:a5:51:d8:cf:68:83:2a:08:68:e0:cb:cd:95:2d:
40:66:b1:45:35:97:31:ae:7a:ea:52:c8:0b:6f:6f:
5a:5f:54:39:3c:ee:4b:0d:d4:04:0a:59:fe:76:3b:
fe:78:fc:72:25:14:54:ec:81:05:32:a5:4e:1c:b2:
4c:45:8e:80:5d:53:cd:09:1f:f4:29:bf:3b:5b:46:
72:e7:52:42:cf:1a:27:0b:34:f7:2e:02:f1:03:07:
bb:60:10:00:f9:46:88:b7:1d:c2:8b:0e:ca:e9:b5:
b2:65:c8:eb:de:00:c5:e4:f5:d8:2a:8d:be:40:70:
34:88:3e:91:61:f3:25:b1:ad:d7:93:af:75:cf:b7:
d7:2a:bf:dd:87:52:36:19:b3:fa:f8:51:03:1a:d5:
05:34:aa:72:c5:ec:36:30:b5:0b:a2:74:34:d3:bc:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B4:D6:E9:41:D4:26:06:94:01:31:B0:AB:93:AB:46:8D:66:E9:3F
X509v3 Authority Key Identifier:
keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ba:6a:0e:4a:50:bd:90:f6:af:2c:ef:3a:e0:98:eb:7e:b5:
4b:9c:75:71:d3:dc:b9:b5:96:3b:6a:5b:7d:d0:7b:eb:e8:30:
ee:45:83:96:0d:74:dc:01:01:ff:8e:af:a0:ab:ae:36:e3:f0:
9f:c8:07:54:41:5a:b9:51:c7:59:da:b9:a5:30:d2:15:f9:30:
53:23:9e:6e:72:ad:b0:a2:dd:41:56:e8:30:c2:46:0b:71:e3:
8c:b3:31:c3:45:94:35:7e:a7:bf:e7:f5:8f:45:9a:20:9b:c8:
68:6b:89:bb:b8:03:81:d3:57:37:a7:a8:34:f9:d5:47:b1:aa:
b1:ec:cd:e6:33:05:a3:c9:9b:7b:9a:4d:2a:78:2e:87:22:39:
51:c8:da:0f:70:09:86:ad:9e:c1:0b:e7:be:4b:9f:c3:1b:0c:
1c:6b:a9:6f:98:18:ba:e9:dd:bd:ff:ba:a2:76:4f:0f:5d:f9:
3a:72:b7:f8:d6:b6:78:3d:2c:80:6e:b3:2b:f0:a0:e8:c2:bd:
37:f7:98:f8:b5:c5:b3:2a:0a:6c:84:96:d2:6b:03:76:0c:75:
b0:5b:11:2f:f3:5e:34:5d:31:77:5c:a7:02:ef:91:6e:bd:63:
c5:d0:95:2e:32:37:2c:2d:67:92:d2:7c:c0:d3:8d:5f:7f:0c:
f2:da:13:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:38:03 2026 by rpki-client