Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
File: pkzfoBYCORcDN7pgk0ugbkW4zRE.mft (raw, json)
Hash identifier: 9FUm1QSDKuI6VLLDLRneUEjQsbHEPGeTC5cjowx71Oc=
Subject key identifier: 7E:42:DB:90:E8:97:5D:89:C2:F2:81:15:DF:32:A8:75:78:1B:E3:BD
Authority key identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
Certificate issuer: /CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Certificate serial: 019D27DFD4D2E6B1CEB10C8DA17736A4B869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
Manifest number: 17B1
Signing time: Thu 26 Mar 2026 02:01:13 +0000
Manifest this update: Thu 26 Mar 2026 02:01:13 +0000
Manifest next update: Fri 27 Mar 2026 02:01:13 +0000
Files and hashes: 1: AqHz4ObObmJOHQBW4WCBWZfbmUg.roa (hash: efamkoeeFHOmwsuQJrPBuAqi8mcE7pwYzSUiql9ZCTM=)
2: pkzfoBYCORcDN7pgk0ugbkW4zRE.crl (hash: YDfBCFbJDMBgp1csnRlbOp3nuMxWkjza58RyniSN/Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d4:d2:e6:b1:ce:b1:0c:8d:a1:77:36:a4:b8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Validity
Not Before: Mar 26 02:01:13 2026 GMT
Not After : Mar 27 02:01:13 2026 GMT
Subject: CN=7e42db90e8975d89c2f28115df32a875781be3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:1e:b1:c1:c3:de:34:ce:bf:ba:71:f2:72:
e2:42:42:a0:3e:31:70:15:b7:29:c6:a9:d2:68:08:
b2:d4:60:15:5a:66:f0:6f:15:9c:9b:d8:6b:af:16:
10:13:19:9b:d9:8f:f4:85:27:7f:98:38:bd:6a:6f:
31:41:66:98:83:bc:34:0a:cd:96:56:a4:4a:a3:1b:
dc:3d:8c:98:dc:03:ed:71:6b:ea:52:27:7c:10:28:
e0:9b:ec:11:55:25:71:19:b2:b3:f8:0d:48:d4:d1:
1e:b7:88:d3:e4:7a:99:de:87:9f:a7:05:5e:11:29:
01:54:f6:5e:1c:58:56:d2:53:21:72:26:87:4f:0c:
60:90:ed:e6:9f:bd:1d:dd:f3:c2:00:af:d2:0e:15:
af:b4:38:be:33:03:a1:81:e8:2d:3e:07:ef:a2:cb:
90:df:95:8e:29:b4:67:12:85:55:5a:cf:28:72:2f:
fa:86:3b:71:e3:cc:fc:a5:89:9f:e8:d4:0d:91:3c:
fe:b1:5f:87:76:d7:e3:8b:28:3e:67:c4:46:9a:14:
5e:de:72:d2:56:c0:c5:3a:51:25:6a:6a:da:c9:42:
d8:78:e1:38:0d:e0:48:30:a7:ec:d1:24:78:28:b0:
e0:cf:8f:09:f0:49:c6:53:0c:84:a2:82:6e:a5:37:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:42:DB:90:E8:97:5D:89:C2:F2:81:15:DF:32:A8:75:78:1B:E3:BD
X509v3 Authority Key Identifier:
keyid:A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bb:85:63:b2:3b:06:cc:9d:40:9b:f8:5c:4e:f9:ef:56:de:
13:c9:ec:65:92:5f:f4:4e:4c:25:10:c9:29:18:6f:ae:05:be:
39:b0:6c:bd:16:23:01:ab:03:b4:65:00:05:e4:73:ed:35:6e:
2c:0d:c8:2a:24:c5:be:0b:15:1e:fb:17:4a:93:da:40:8a:c8:
1d:ea:2c:9d:c5:5d:df:66:3c:29:35:e1:60:9c:8c:a2:9b:57:
2d:e2:64:95:4c:13:b1:79:4e:88:8b:13:7c:0b:85:9b:c5:d0:
13:db:20:b6:70:19:12:cb:f8:18:23:0d:f4:71:48:f5:f7:8c:
95:f0:db:28:17:66:a7:83:9c:95:e9:6c:77:30:64:9a:b7:cf:
50:15:4c:f5:cc:db:a0:f9:0b:27:79:c9:af:14:44:a5:1e:80:
f8:ed:06:80:3f:48:6c:f5:ea:db:05:66:14:f6:c1:13:5f:94:
c7:89:f1:d5:ae:20:2c:62:0d:13:e3:3a:4d:7f:c3:7e:2a:b4:
42:1d:a9:8d:f2:78:44:7e:5f:f8:e4:f9:75:9b:da:d1:bb:60:
da:5b:46:a3:5b:f9:ec:ed:dc:13:70:31:87:fc:ff:80:b5:39:
b3:86:59:a2:5e:2d:2f:bc:07:e2:5d:eb:d3:cc:53:8e:4a:db:
ed:bf:fb:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n39TS5rHOsQyNoXc2pLhpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NGNkZmEwMTYwMjM5MTcwMzM3YmE2MDkzNGJhMDZlNDVi
OGNkMTEwHhcNMjYwMzI2MDIwMTEzWhcNMjYwMzI3MDIwMTEzWjAzMTEwLwYDVQQD
Eyg3ZTQyZGI5MGU4OTc1ZDg5YzJmMjgxMTVkZjMyYTg3NTc4MWJlM2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF0escHD3jTOv7px8nLiQkKgPjFw
FbcpxqnSaAiy1GAVWmbwbxWcm9hrrxYQExmb2Y/0hSd/mDi9am8xQWaYg7w0Cs2W
VqRKoxvcPYyY3APtcWvqUid8ECjgm+wRVSVxGbKz+A1I1NEet4jT5HqZ3oefpwVe
ESkBVPZeHFhW0lMhciaHTwxgkO3mn70d3fPCAK/SDhWvtDi+MwOhgegtPgfvosuQ
35WOKbRnEoVVWs8oci/6hjtx48z8pYmf6NQNkTz+sV+Hdtfjiyg+Z8RGmhRe3nLS
VsDFOlElamrayULYeOE4DeBIMKfs0SR4KLDgz48J8EnGUwyEooJupTcYcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5C25Dol12JwvKBFd8yqHV4G+O9MB8GA1UdIwQY
MBaAFKZM36AWAjkXAze6YJNLoG5FuM0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGt6Zm9CWUNPUmNETjdwZ2swdWdia1c0elJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83NTQzOWQtZmIwNi00YjYzLTg0YTMt
OGJkM2M2YzcwNGRjLzEvcGt6Zm9CWUNPUmNETjdwZ2swdWdia1c0elJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC83NTQzOWQtZmIwNi00YjYzLTg0YTMtOGJkM2M2YzcwNGRj
LzEvcGt6Zm9CWUNPUmNETjdwZ2swdWdia1c0elJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLuFY7I7
BsydQJv4XE7571beE8nsZZJf9E5MJRDJKRhvrgW+ObBsvRYjAasDtGUABeRz7TVu
LA3IKiTFvgsVHvsXSpPaQIrIHeosncVd32Y8KTXhYJyMoptXLeJklUwTsXlOiIsT
fAuFm8XQE9sgtnAZEsv4GCMN9HFI9feMlfDbKBdmp4OclelsdzBkmrfPUBVM9czb
oPkLJ3nJrxREpR6A+O0GgD9IbPXq2wVmFPbBE1+Ux4nx1a4gLGINE+M6TX/Dfiq0
Qh2pjfJ4RH5f+OT5dZva0btg2ltGo1v57O3cE3Axh/z/gLU5s4ZZol4tL7wH4l3r
08xTjkrb7b/7pA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:58 2026 by rpki-client