Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier: hbgeR8qyJKWvxez24ZnNS9hb3QMVMnmBcknNW234BPI=
Subject key identifier: 3F:FE:7D:6C:C6:8C:4D:30:35:44:E0:C5:4E:F6:BF:54:7F:0C:7A:4F
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 019CAD5A28EA12EC88EEFFE9BC0F8A9DB247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number: 0779
Signing time: Mon 02 Mar 2026 07:01:32 +0000
Manifest this update: Mon 02 Mar 2026 07:01:32 +0000
Manifest next update: Tue 03 Mar 2026 07:01:32 +0000
Files and hashes: 1: EyOWK8XRTj4QM3sd-U5Fu8pd9R0.roa (hash: s7z9jMoOORsHVb0/YBYQ3nLHIuOn+yJ/rTvI7HFxr7M=)
2: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: FBpCdNfRw3tk/fw1AsLmQYW58POUYDeNqKdDu9gZ6CM=)
3: VnRtMDF4gysmlZSb59wJ0quLjuA.roa (hash: 43Q8juPKAzS/kUi0MJPxgQYqYa6H7Jrksy06nYJpgec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:28:ea:12:ec:88:ee:ff:e9:bc:0f:8a:9d:b2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Mar 2 07:01:32 2026 GMT
Not After : Mar 3 07:01:32 2026 GMT
Subject: CN=3ffe7d6cc68c4d303544e0c54ef6bf547f0c7a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:3c:ea:25:22:cd:de:bd:06:0a:28:e5:83:
ce:8e:80:4e:36:17:7a:98:19:ae:3a:57:21:c4:ed:
04:62:5a:df:31:ef:95:94:ed:fc:44:ba:67:35:43:
bb:45:b1:26:be:0e:62:a3:bd:97:a4:92:22:2f:92:
65:1b:87:cf:98:62:77:3d:bf:72:c1:2a:ba:49:80:
9e:97:c4:fa:27:14:86:64:15:cc:fa:98:70:7c:75:
b6:04:39:92:11:27:0f:66:28:ac:34:84:57:2b:c8:
70:92:90:31:39:5c:10:f2:47:ab:10:61:bd:c2:1b:
9d:03:dd:7d:eb:96:68:f9:05:68:49:f5:c9:9e:8c:
e6:49:85:57:72:c7:db:b4:01:37:f8:79:d9:01:c3:
c1:2c:d4:de:96:a6:85:2c:02:60:d1:0d:bd:0b:af:
6f:e3:33:c2:60:37:5f:13:d1:fa:23:2f:c9:6b:80:
a7:79:70:16:7d:c2:d7:0a:c7:23:f4:30:85:c6:36:
dc:16:de:0f:17:40:55:4b:94:1c:60:b3:9c:05:24:
29:2f:ac:33:a5:9a:f2:32:b2:71:ee:28:78:2d:1f:
ed:07:a2:bd:46:ef:9c:ba:e9:a9:8d:5d:d3:d8:f1:
d7:4b:0c:5f:88:c3:e2:2c:fd:07:ff:76:1a:a9:0c:
78:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FE:7D:6C:C6:8C:4D:30:35:44:E0:C5:4E:F6:BF:54:7F:0C:7A:4F
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7e:4c:f3:74:b2:dd:dc:72:4f:e3:05:01:21:50:2b:8b:bd:
59:d0:a2:7f:a2:c9:1c:f2:88:7b:72:f4:73:9d:50:24:3f:72:
85:fb:7f:60:45:9d:5d:0c:ca:16:2c:8e:e2:35:b4:a2:2a:df:
97:2e:f2:3a:a9:b1:d6:9f:a9:d6:12:8f:36:4a:6a:93:31:43:
ff:d6:c3:55:0d:66:44:26:69:5c:92:da:7d:81:d1:da:94:45:
e2:d1:e0:c0:97:b6:df:c5:4a:d1:29:10:09:f7:27:af:55:a9:
98:43:b2:87:33:3a:62:b3:f2:a5:09:28:1b:31:e8:bb:cf:20:
78:a0:99:46:f4:61:7f:55:01:af:bb:35:62:e5:5c:77:d3:1f:
58:90:f8:cf:87:df:06:ea:78:86:44:e3:78:4e:14:38:82:f1:
e0:89:80:59:84:86:c5:bc:ca:6a:6a:fe:ac:fe:c4:1c:3d:18:
e0:4d:d1:18:12:28:39:97:77:74:7c:52:ed:5d:10:a3:d4:e0:
82:3b:72:47:b1:56:61:80:db:c8:ea:ef:52:ee:ef:45:16:7d:
1f:58:61:39:06:d4:b5:91:40:64:b0:b5:d8:cc:35:10:82:3f:
12:8c:25:28:2a:81:a8:e1:fb:4f:44:0a:d8:0e:a5:46:92:51:
f5:de:54:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:11:57 2026 by rpki-client