Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json)
Hash identifier: +a/A1EK4HKiSPFxmggmG2S3GHjguZIOs5rzAt2p27yc=
Subject key identifier: FC:2D:C4:D4:45:53:C4:4E:90:DB:A0:23:C2:6C:D1:45:54:75:0C:9D
Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Certificate serial: 019D2771D0FF43F5B3433C9749C457F25464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
Manifest number: 0348
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: G0P5WlNlZGFjbEhb_R1Zn2df2xs.roa (hash: CL8qT2kYIrJ9NwJgE0Acghs3urkbaGANrFWydwL2iRg=)
2: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: h1nrKuvXD5L9xKH/9A15O04kOJ9zFsXWKpIDnAqUpV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d0:ff:43:f5:b3:43:3c:97:49:c4:57:f2:54:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=fc2dc4d44553c44e90dba023c26cd14554750c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:ad:7d:0c:9c:94:7a:cb:36:ab:d7:89:6e:
26:d3:81:f9:58:61:17:b2:9a:5e:46:8f:37:a2:12:
bf:65:b5:52:a9:9a:a1:5e:69:a8:80:39:ee:e7:c9:
c2:9e:55:f7:6e:ab:3a:dd:40:e4:15:58:ed:ac:37:
20:be:7e:53:9b:ee:bf:ca:53:0e:8a:8c:9a:ff:bf:
b2:ae:84:49:c3:32:5d:4d:40:f0:e7:f8:37:19:aa:
b0:c6:50:16:52:71:0b:7d:4b:ab:b6:95:3a:08:19:
7a:4c:5b:01:5b:19:37:94:dd:c4:16:77:cb:ec:64:
a5:d4:86:5c:1c:a4:31:63:ef:95:e9:af:84:c3:11:
95:7a:15:ec:db:84:c8:98:fe:46:d6:c6:ab:d8:c1:
4f:cb:78:8b:c5:2e:0d:b2:73:ec:92:a5:10:79:a5:
f7:fb:43:7e:d9:bc:d6:ea:3f:e1:12:c9:18:6f:3b:
8d:1f:27:c1:31:14:eb:c6:dc:b2:75:79:ea:6f:95:
45:32:09:ac:ff:24:45:9a:82:41:84:38:c4:74:82:
36:47:54:b9:46:33:0e:3d:35:62:29:ab:a4:5d:1d:
f4:1e:fe:f8:f8:97:10:b3:61:12:fe:6b:9f:1b:91:
89:ab:e2:5f:c8:9d:52:78:f4:4c:58:82:e5:fd:77:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2D:C4:D4:45:53:C4:4E:90:DB:A0:23:C2:6C:D1:45:54:75:0C:9D
X509v3 Authority Key Identifier:
keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cd:6b:6e:32:1f:e7:13:ee:46:63:4d:0d:d8:e9:f6:d8:3a:
1f:30:9c:31:96:f6:be:96:0a:76:c2:25:b6:1b:92:96:27:39:
98:7e:98:8c:42:c1:49:37:5e:d3:49:73:08:2e:a1:07:11:ad:
f7:60:b8:97:e8:68:8e:b0:84:20:06:94:8b:9b:c5:89:91:75:
c3:b4:1a:bb:6c:a8:71:79:7f:98:df:79:38:8d:fe:cf:ba:43:
02:a0:d3:a3:be:65:7e:40:c3:c5:cc:6b:ab:dc:0f:43:6c:aa:
95:84:3c:ad:00:23:91:c6:2f:c4:7b:1a:2e:e6:d1:70:44:3c:
89:ca:d8:9c:1d:00:e9:33:de:73:61:42:e2:dd:ed:ee:36:c9:
d4:4d:58:e0:cb:e8:95:c2:e2:90:b5:8e:2d:07:df:34:a5:fa:
7b:14:90:a5:df:ff:61:c6:f7:6d:5b:f5:d5:b4:f3:fc:ec:7a:
1f:7c:5e:56:71:e9:41:a8:aa:df:d0:7b:e0:ca:8e:db:41:96:
10:d7:b4:d6:a0:62:1d:19:85:26:61:da:a2:2c:77:45:2f:3c:
0a:1e:39:9a:bb:df:1d:9e:3f:9a:c4:fe:00:79:a6:cf:91:1b:
1f:93:1d:98:d0:34:11:5e:9e:d2:34:d6:a1:6b:2b:9c:2e:19:
a9:a5:af:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:17 2026 by rpki-client