Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
File: PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft (raw, json)
Hash identifier: vmHN1S1HUW62WmkeIe9zXFPf7LkKwMriIJMX4qWUc3I=
Subject key identifier: 38:9E:0A:A7:EB:29:46:B9:5E:75:90:B9:21:B9:E8:AB:7D:8D:3D:41
Authority key identifier: 3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
Certificate issuer: /CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Certificate serial: 019F8FB4E823891CA316CF30D1F7D9EEADCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
Manifest number: 0EE2
Signing time: Thu 23 Jul 2026 16:00:25 +0000
Manifest this update: Thu 23 Jul 2026 16:00:25 +0000
Manifest next update: Fri 24 Jul 2026 16:00:25 +0000
Files and hashes: 1: PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl (hash: FpqYRiKIOJvCinK1Wg3egF3/LalR0G9xlY5taIqSdU4=)
2: TLFiEoQRGLVMCGc46Mn0G99fC5U.roa (hash: gDFtNWXwzA45vosk76KSuCgqR0QSeN+bVcyur4756BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:e8:23:89:1c:a3:16:cf:30:d1:f7:d9:ee:ad:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Validity
Not Before: Jul 23 16:00:25 2026 GMT
Not After : Jul 24 16:00:25 2026 GMT
Subject: CN=389e0aa7eb2946b95e7590b921b9e8ab7d8d3d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:99:16:d3:82:41:01:c8:94:f2:a8:fb:ad:
32:59:71:89:39:83:a4:df:99:28:8e:74:7a:46:5a:
ab:45:23:17:d0:fd:88:67:e4:48:e6:62:fe:94:15:
c3:6b:bc:c7:58:1c:24:3b:f9:3f:b5:69:96:cc:85:
34:5e:d9:d3:8a:e5:31:a2:dc:ea:4b:9e:e0:08:80:
a9:3a:d3:1a:dd:0d:6b:28:3e:98:41:5d:90:ad:af:
c0:05:0d:0c:73:64:8d:d7:2a:7c:ca:6c:14:f2:81:
78:89:5c:d6:64:b0:ae:0d:71:db:b1:56:5c:9e:0c:
eb:8c:a7:e1:00:96:fa:90:3e:6c:63:d9:af:e0:8e:
95:62:b3:7f:d1:88:15:23:1a:07:6d:1c:86:cd:f8:
7a:43:75:fe:bf:fe:74:b7:41:f8:17:7f:01:99:63:
78:65:7e:9d:27:6f:2e:0d:25:8d:ba:19:ee:4c:7a:
23:03:a8:45:16:a8:89:c7:36:e9:60:50:be:08:49:
e1:31:93:df:16:02:ed:09:d1:82:72:d6:4d:11:fb:
7e:37:9a:78:1a:c0:39:61:b7:4f:d4:53:6c:fc:38:
35:2b:c2:48:85:63:25:50:f6:1d:3b:48:bc:5b:48:
aa:9e:d4:90:87:9b:2e:83:91:a8:0e:7f:71:1c:63:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9E:0A:A7:EB:29:46:B9:5E:75:90:B9:21:B9:E8:AB:7D:8D:3D:41
X509v3 Authority Key Identifier:
keyid:3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:19:9b:e1:f3:e8:60:27:7d:2b:af:1d:1d:d5:88:66:13:dd:
f7:6c:0c:49:e8:00:5a:d8:67:c5:d9:34:42:33:3e:bc:cf:a1:
d2:a6:7e:88:82:d6:f9:c7:36:f3:c4:14:ab:c0:62:5f:25:6c:
a2:2d:b5:cb:4e:2b:f8:7f:e0:4b:30:22:ac:87:15:d1:7b:22:
d5:a6:16:dd:16:60:dc:f3:48:61:f2:90:a7:61:0c:bb:6c:d8:
53:ea:ec:28:3b:06:8a:cc:2c:cc:70:9d:f4:95:ac:0a:72:77:
5d:55:89:6e:1e:5e:04:db:65:fa:2a:88:c2:b7:ca:07:ae:4b:
ba:3c:d6:dd:1a:62:9b:2c:bc:fa:7d:cd:b5:bc:38:ca:35:d9:
0c:18:b3:40:f9:e3:91:93:22:2c:6a:47:54:17:ef:63:88:a5:
2f:df:2e:9e:2d:dc:85:21:88:8f:58:01:7a:9d:f1:38:df:ab:
6a:fd:f1:44:15:b5:c0:2f:95:b1:30:cd:5f:03:9a:0f:7b:f7:
f9:de:19:0c:1a:84:1c:9d:4a:65:07:ca:e6:60:a4:ce:62:fb:
c9:2c:10:26:11:4f:e0:38:8c:8e:07:53:d9:4b:3e:50:b5:f2:
2a:23:d4:0a:23:23:de:92:b0:2d:d4:6f:87:4f:87:b3:61:51:
00:2c:16:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:25 2026 by rpki-client