Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier: /TAO12Jw/OOirtjjPNUgnD5qYT1zlLFS7wV4KcqVQh0=
Subject key identifier: 5D:7A:98:CD:1C:D5:13:F5:E2:3D:7C:20:76:10:81:34:CD:87:E3:AD
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 01A1298CC9C5E6E060A644EB56B270E72C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number: 09CE
Signing time: Sun 11 Oct 2026 06:00:54 +0000
Manifest this update: Sun 11 Oct 2026 06:00:54 +0000
Manifest next update: Mon 12 Oct 2026 06:00:54 +0000
Files and hashes: 1: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: 8qwd5UHp9CA1tUfiaoFv5rY/Qnu/g+ZPqWhKEatALHk=)
2: zWU-Qy4G8iGTz8MTeqz8dHClz-s.roa (hash: 8KOZgKpI/1oW0YXilP2w8pzWvf8E4JdNQvX0Tq7OYNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:8c:c9:c5:e6:e0:60:a6:44:eb:56:b2:70:e7:2c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Oct 11 06:00:54 2026 GMT
Not After : Oct 12 06:00:54 2026 GMT
Subject: CN=5d7a98cd1cd513f5e23d7c2076108134cd87e3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:10:b6:cc:a9:5c:1c:6d:f9:30:29:64:23:
55:a0:58:79:45:3b:1f:2a:d2:3f:59:71:2f:42:d2:
20:eb:99:e4:66:9f:0e:8f:70:38:cf:1d:a2:46:06:
80:99:06:b0:6f:d0:83:75:7f:78:53:93:2e:83:75:
35:bb:82:6f:a1:10:90:17:c8:6d:b6:f4:de:5b:f8:
c3:b9:23:b5:a5:27:33:70:17:08:4f:d8:1c:db:1d:
11:17:3a:87:4b:5b:4b:95:77:db:77:91:ca:06:f2:
e9:68:55:bd:3e:78:c0:11:20:c7:22:00:83:cd:c9:
cd:ba:88:97:bf:f2:91:40:0c:35:0a:23:8c:11:90:
3d:83:38:62:ae:a1:5a:db:b7:4c:e1:18:b0:f8:9f:
06:61:73:84:19:bf:9e:97:8b:b5:d9:bd:49:b2:3b:
c7:03:12:4e:17:fd:37:45:b0:35:c2:33:7f:7d:8f:
a1:34:8d:d6:ec:2a:41:1c:33:9f:9b:1a:ad:85:3b:
60:86:c6:8a:dd:2e:fe:39:8f:3f:50:55:7e:f7:77:
14:99:70:21:9c:14:c4:32:87:c6:df:f7:6f:dc:6c:
34:fa:1b:d8:81:90:98:20:83:2b:55:d1:cd:f2:e7:
ce:a2:fd:4c:6b:7c:21:06:dd:49:64:7a:4f:8e:9a:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7A:98:CD:1C:D5:13:F5:E2:3D:7C:20:76:10:81:34:CD:87:E3:AD
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:da:ed:37:dc:11:10:3c:1d:da:0c:1c:fc:5d:d6:e3:01:97:
6c:3e:67:4d:55:94:28:3e:ed:cf:6d:20:90:b3:70:d3:87:76:
4b:96:b4:97:35:d9:6c:40:ee:b8:32:15:8e:96:ab:69:da:cd:
b5:5b:5e:0f:5a:2a:d3:f7:42:88:95:61:3d:02:8a:07:35:4a:
8c:10:8a:6f:69:63:db:63:2e:d8:b1:5b:56:80:d7:e8:f9:24:
d3:1d:64:9e:eb:80:91:b5:ea:61:43:7d:2a:98:b9:69:f3:e0:
ce:e6:2e:c8:6a:16:25:1f:b6:52:35:70:77:a3:38:af:01:74:
03:ec:5b:e4:d5:30:07:81:54:fb:d4:59:55:e8:6b:6a:56:5d:
9e:6e:cf:83:a0:9c:c4:2c:c8:6b:50:80:97:3d:d6:7d:1d:ff:
91:17:b5:3b:5c:5e:62:1f:70:6c:13:b5:23:e3:d0:3a:b5:cc:
a1:00:21:11:1a:d0:63:74:25:d3:a9:69:90:f7:26:de:c3:35:
36:10:f6:34:48:bf:7b:2e:cc:2b:61:e2:6e:d0:c8:be:8a:57:
e7:58:c7:3c:82:b8:b2:f5:6a:81:8c:16:10:c0:b6:8a:5e:8f:
5d:37:36:4c:b4:a1:77:53:4a:04:ff:a0:06:66:58:9b:30:a4:
f7:77:d3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:51:47 2026 by rpki-client