Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier: Q3gzUaOcCYFEax3gzpM+d1eO5eC1yfhcd56IQb01SOc=
Subject key identifier: 6D:CE:DE:69:1F:2E:E3:00:A1:DF:96:AD:6B:1A:E6:35:67:2A:BB:A5
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 019D9705E0F803020F338E92E6A4CF45A4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number: 07F2
Signing time: Thu 16 Apr 2026 16:00:38 +0000
Manifest this update: Thu 16 Apr 2026 16:00:38 +0000
Manifest next update: Fri 17 Apr 2026 16:00:38 +0000
Files and hashes: 1: EyOWK8XRTj4QM3sd-U5Fu8pd9R0.roa (hash: s7z9jMoOORsHVb0/YBYQ3nLHIuOn+yJ/rTvI7HFxr7M=)
2: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: zjx39ayqm+4a3n2UcmLdu16HnDW2PgPSsyHAyD+336s=)
3: VnRtMDF4gysmlZSb59wJ0quLjuA.roa (hash: 43Q8juPKAzS/kUi0MJPxgQYqYa6H7Jrksy06nYJpgec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:05:e0:f8:03:02:0f:33:8e:92:e6:a4:cf:45:a4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Apr 16 16:00:38 2026 GMT
Not After : Apr 17 16:00:38 2026 GMT
Subject: CN=6dcede691f2ee300a1df96ad6b1ae635672abba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:b8:3d:12:b4:ba:d6:87:d3:2e:b9:a3:9f:
7f:13:7e:5c:1e:8c:0e:d8:55:53:87:f4:0e:bd:a5:
74:5f:56:8f:cf:14:4f:22:f8:ff:41:fb:cd:c5:30:
59:cd:fb:21:b4:5c:0b:4f:92:f6:ad:d5:4d:81:4b:
79:ac:f8:2a:87:29:1a:d4:f6:e3:c5:a0:10:12:f4:
c6:6d:71:d1:8d:bc:6a:2b:32:d0:de:f9:e6:d2:63:
c4:81:ec:97:fb:15:85:75:6e:18:79:cf:ba:e7:ce:
64:4f:4d:3d:81:4a:b4:98:7e:a4:b6:13:1d:57:9a:
f6:f8:05:55:02:e8:e7:a7:b3:b2:79:69:c1:23:60:
40:3c:7a:de:0d:69:5c:64:31:a8:e4:28:48:7b:1f:
79:bc:19:8c:57:78:a9:5f:41:96:ac:e8:aa:51:1b:
02:85:ed:26:81:b5:1f:7d:2a:73:40:5f:86:00:f8:
8f:0d:13:96:6e:36:37:49:aa:ab:d7:d5:1b:d3:7c:
68:57:fd:3c:af:58:72:7a:8d:94:e0:43:87:e9:34:
16:8a:fc:9e:b6:8c:cc:7b:53:56:58:d1:17:45:2d:
83:34:fa:ce:05:02:8e:7e:49:1d:2c:4d:67:88:a3:
1f:f8:4b:5d:1a:3c:17:e3:b3:d3:20:42:95:b6:47:
f7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CE:DE:69:1F:2E:E3:00:A1:DF:96:AD:6B:1A:E6:35:67:2A:BB:A5
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:60:b7:2c:5b:0d:59:98:d3:d9:fc:bf:5f:27:42:ce:a8:18:
a2:f5:91:bb:c2:60:2e:10:91:6c:7a:bc:23:74:b4:4e:ec:83:
af:09:6d:07:4b:17:7d:ac:58:b3:34:d1:be:f8:e8:20:d7:42:
96:5b:04:21:75:b0:7a:9a:d5:1e:b7:2c:9c:78:0a:a6:18:41:
28:ce:e1:c5:6b:4f:ea:81:f8:83:6b:3b:8f:a0:72:a1:9a:9f:
1a:c1:88:dd:9f:78:93:56:90:46:b8:e6:27:b2:8f:ec:08:cd:
2b:f4:e7:af:9c:1f:c5:a0:ce:9b:08:8a:36:82:50:3a:d6:e5:
10:5f:8c:7f:fc:ff:27:ef:2c:dd:27:ea:3c:ad:f8:32:1f:c2:
87:fc:d4:01:bc:ac:d9:a9:d7:08:1b:ac:31:da:e0:ca:fb:8e:
33:30:e1:86:8e:68:cb:4d:03:fb:59:91:83:89:a5:78:70:06:
6e:36:24:ca:ab:29:99:2c:d7:19:17:54:4a:f3:87:04:14:92:
22:92:9e:b3:c9:63:84:5f:0e:0e:2c:c4:b3:75:25:f8:6d:2b:
6e:c6:56:25:e3:95:7b:8d:de:75:ef:38:fb:0f:77:f7:64:e7:
88:ee:3e:dc:1b:41:5b:36:06:b1:2a:60:8a:b3:f9:96:93:8b:
57:34:f4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:06:04 2026 by rpki-client