Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
File: pzfikBac_OajOKZrykXP5jXRVEY.mft (raw, json)
Hash identifier: 5lWQ8k4FBY9IyITV3Ps+zA1Ixo64gRUWCB10lfp4YZk=
Subject key identifier: 37:59:E2:01:21:37:B8:8A:9A:78:56:86:6E:A9:27:47:6E:D5:3F:65
Authority key identifier: A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46
Certificate issuer: /CN=a737e290169cfce6a338a66bca45cfe635d15446
Certificate serial: 019D2772B8D8F30E2A111AECE1A460D72B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 00:02:02 +0000
Manifest this update: Thu 26 Mar 2026 00:02:02 +0000
Manifest next update: Fri 27 Mar 2026 00:02:02 +0000
Files and hashes: 1: pzfikBac_OajOKZrykXP5jXRVEY.crl (hash: 8Q1577lyVBz0sDFvqL4W+XgyALYazLwjtR0VF+9oDxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b8:d8:f3:0e:2a:11:1a:ec:e1:a4:60:d7:2b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a737e290169cfce6a338a66bca45cfe635d15446
Validity
Not Before: Mar 26 00:02:02 2026 GMT
Not After : Mar 27 00:02:02 2026 GMT
Subject: CN=3759e2012137b88a9a7856866ea927476ed53f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:89:8d:77:ee:62:56:8a:ae:60:4c:0f:ed:d4:
f2:ce:db:2d:6e:59:28:54:cb:f9:c0:5f:02:26:13:
5b:cd:55:6a:1c:4b:b3:42:38:e3:85:34:ab:62:4a:
a3:d7:30:d0:b8:02:67:55:78:8d:76:c0:a3:c1:a1:
25:2d:b6:31:3d:78:a6:0f:35:79:d2:20:69:ec:f7:
db:01:86:9d:d9:58:c0:d2:06:d8:d0:60:da:5b:e7:
33:52:92:c4:45:2b:df:97:f6:3c:3b:f3:f4:da:ac:
03:db:f5:e6:c7:5e:bc:e0:bc:de:9d:e1:2e:03:84:
5b:0f:54:91:62:49:d3:83:59:71:43:f3:89:04:95:
b8:7d:36:28:bf:b7:b8:1b:48:00:5e:18:dd:c3:4f:
08:f3:1e:89:c6:ba:5b:f5:ef:be:62:21:f4:f4:c6:
30:aa:fb:19:88:ab:f8:63:7a:5f:cd:1c:04:a6:f0:
d3:95:ba:6a:35:26:da:7e:b6:09:78:07:5f:52:e9:
b2:e2:57:5f:0a:0f:d2:a8:0a:3e:63:d4:35:46:bf:
dd:91:e8:4c:e2:88:0b:63:06:05:dc:16:76:8d:ae:
48:e8:9d:35:08:c6:ca:b9:23:84:5c:bb:7f:d0:87:
8c:84:9c:6c:d6:a4:f1:5f:19:6d:b8:4b:17:e7:90:
eb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:59:E2:01:21:37:B8:8A:9A:78:56:86:6E:A9:27:47:6E:D5:3F:65
X509v3 Authority Key Identifier:
keyid:A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:19:6f:ce:c0:98:bc:3f:91:4a:3b:60:23:63:0f:1d:46:11:
6a:d5:93:fb:8d:e0:fa:db:68:4e:2b:26:be:92:0b:f8:e4:2e:
cc:2f:d4:c6:75:2e:a8:9c:2c:fe:1a:38:64:76:5f:12:06:55:
7d:04:c3:37:9f:97:40:c5:b8:98:6d:98:ae:db:5c:37:da:13:
ca:95:15:a1:da:32:cb:f6:8b:94:d0:db:7e:9d:f7:46:62:94:
1f:6b:77:6a:52:5f:95:a4:13:7e:ce:d7:fd:c0:d5:f5:af:ab:
33:7e:b6:7f:bd:8c:60:f0:1f:fe:c1:9f:23:0c:58:45:e6:7b:
26:9b:c1:39:ae:cd:15:03:1e:1a:33:2a:2d:b5:14:ee:c5:0e:
26:7c:b4:a4:40:88:9a:ff:ff:9e:54:bd:dd:5d:38:2f:9a:2d:
b1:4a:11:4d:f8:b0:77:a8:27:3f:2b:71:a3:84:e4:37:52:ab:
d0:d6:2c:ac:dd:e2:f1:bc:1a:11:5d:e4:0b:52:d5:ac:69:ba:
37:2e:5f:30:e7:40:ff:1d:31:40:09:34:71:5d:38:73:05:c2:
76:af:06:ca:e0:65:17:0b:5d:b1:62:42:a2:cb:b7:b6:4d:e5:
5e:87:8b:49:e4:27:56:7d:00:bc:c9:58:a0:bc:06:8a:cb:2e:
ce:a6:18:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:52 2026 by rpki-client