Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: eA35B78IAFvCvRZe+jwCaPjyj0X6Bskl9ehhbItl014=
Subject key identifier: 6E:02:09:D9:F9:FA:E8:80:4E:98:1B:52:C6:F0:7B:EA:A1:91:DD:07
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 019E1FEC50F550D04C6A4B00CC6290E22768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 06:00:41 +0000
Manifest this update: Wed 13 May 2026 06:00:41 +0000
Manifest next update: Thu 14 May 2026 06:00:41 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: 6NBagVX7RhPqTpBI/BDSwfUruMw5ksnU5GdWbBmpXz4=)
2: S31jWM3wEsReURsulHI7U8Kz478.roa (hash: /Sp5r8Qxi7xeH5fyeueoA88dFZr2CShlD/FHWPU4Yh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:50:f5:50:d0:4c:6a:4b:00:cc:62:90:e2:27:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: May 13 06:00:41 2026 GMT
Not After : May 14 06:00:41 2026 GMT
Subject: CN=6e0209d9f9fae8804e981b52c6f07beaa191dd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:4a:37:72:e4:10:af:64:9f:5d:81:9f:d6:
c1:ca:2e:c2:2f:d4:65:19:60:e5:46:17:0c:26:bf:
bc:f1:d5:8c:d7:b0:97:1f:f4:3f:0f:b0:03:9d:46:
9a:1e:0f:47:6a:e8:1f:86:13:23:47:2f:c0:a1:f4:
cf:17:e8:95:26:8d:bf:2e:7d:ff:ef:d6:1a:f1:99:
79:de:3e:5d:c7:c2:31:b6:cd:48:53:19:2c:cd:92:
e8:f3:13:d4:3b:0c:f0:6b:78:18:5b:6f:62:a5:e4:
3c:79:b2:ac:cf:51:77:c2:cb:f1:46:aa:b3:1f:d0:
53:0e:45:c8:0d:15:3a:60:1c:f3:20:ba:44:8f:7f:
f8:1d:d0:4d:68:16:3c:c4:92:7d:14:34:94:00:8a:
43:6e:10:b1:8a:8d:db:16:64:40:99:3f:a7:13:c8:
44:6b:d5:6f:a6:a8:5f:b1:43:98:bc:9a:e0:35:19:
b4:cb:be:48:20:bb:18:3f:0b:56:9e:92:6d:43:cb:
03:9f:8e:e3:dc:12:ee:84:30:53:6a:cc:9c:cb:1e:
6a:97:13:a1:dc:42:0f:13:3b:8a:91:4c:70:ad:6b:
b1:cb:b5:e6:c6:27:fb:f2:5b:ef:d0:d1:b8:bf:3c:
e0:b2:9f:a3:44:9e:e3:cf:6e:dc:06:97:19:3f:96:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:02:09:D9:F9:FA:E8:80:4E:98:1B:52:C6:F0:7B:EA:A1:91:DD:07
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:18:8f:20:50:24:7e:ca:df:43:8d:8a:b6:9a:f8:e7:19:79:
ce:22:c5:46:d8:1c:4c:7b:18:aa:60:5d:09:cb:2d:78:39:c7:
7c:83:d1:11:27:69:33:7d:b4:ca:40:c6:c1:d8:37:b8:a0:53:
df:2a:26:51:b4:55:93:23:c4:00:08:f6:5a:5d:50:a2:eb:7b:
ab:21:d9:7a:be:4d:bc:46:8b:22:29:e2:c9:db:49:2a:fc:41:
21:b4:c0:4c:54:e0:84:fa:f0:48:4b:a0:4e:f3:b8:b3:70:9a:
b8:76:67:b8:be:33:76:7d:3f:6b:ff:4e:89:b0:fd:26:24:15:
1e:d7:f1:07:96:9d:59:32:28:1f:b4:15:e2:11:2b:20:25:ba:
f5:1d:f2:52:d7:60:86:a9:c4:9c:cb:d5:f4:cb:f7:97:de:25:
b2:68:b8:f1:aa:08:e1:3e:5a:07:f7:4c:0e:7c:79:34:10:7e:
75:9a:68:73:3c:cc:90:30:ad:7c:53:2f:29:10:5f:91:6e:d6:
d0:a0:a5:44:01:d4:f9:98:f6:0b:1c:46:bd:90:39:04:8e:b7:
fa:95:8c:14:6f:38:a0:88:7a:6d:9a:1b:90:a4:ef:d5:1a:98:
58:09:ec:57:17:4a:2a:47:bf:55:2e:14:73:16:8e:8a:ff:c4:
32:81:29:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:15 2026 by rpki-client