Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: R0AtnQZlWHQMx49UHe2+Hz9LHDK/cQvkHjIg9oE3Ico=
Subject key identifier: F8:55:05:17:79:5C:64:86:7C:9F:0C:C7:25:66:DD:BA:8B:36:03:71
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 01A0F042982A1BD533B2AB0F8ACBE7EA4DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 1A7D
Signing time: Wed 30 Sep 2026 03:01:31 +0000
Manifest this update: Wed 30 Sep 2026 03:01:31 +0000
Manifest next update: Thu 01 Oct 2026 03:01:31 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: awqDmsiihg4fbCXpYfllvedsuVByliKSTf348kD5mtw=)
2: S31jWM3wEsReURsulHI7U8Kz478.roa (hash: /Sp5r8Qxi7xeH5fyeueoA88dFZr2CShlD/FHWPU4Yh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:42:98:2a:1b:d5:33:b2:ab:0f:8a:cb:e7:ea:4d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Sep 30 03:01:31 2026 GMT
Not After : Oct 1 03:01:31 2026 GMT
Subject: CN=f8550517795c64867c9f0cc72566ddba8b360371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e4:bc:43:11:2e:cc:b0:b1:26:3e:ab:a3:cb:
d3:d1:88:aa:f4:b0:d2:b9:aa:1f:69:ca:dd:98:37:
3e:6c:90:af:58:83:9e:0b:c5:37:3e:50:20:42:14:
40:0c:4d:5e:6b:59:99:c3:58:e4:64:34:95:71:25:
42:fc:f5:9d:ee:3c:cf:f2:5d:36:f7:3b:04:79:62:
a8:93:49:c6:8f:9e:4b:5c:ae:d2:53:c8:18:23:71:
a1:16:fb:4d:e9:20:67:3a:d9:0e:82:b3:12:1a:a7:
84:68:9d:75:65:e0:98:c6:a1:c8:39:df:59:c2:99:
10:e9:54:6c:bf:8f:4d:60:f0:83:cb:a7:73:f5:e9:
52:bf:be:d5:db:4e:d3:a8:bd:46:46:f9:db:c6:1d:
fe:da:58:9b:c4:04:80:8d:00:cd:d8:d2:fd:26:d1:
f3:f0:44:f2:92:84:48:7b:99:35:8e:17:ef:91:dc:
38:68:19:79:2f:6c:65:45:cc:42:c3:70:19:66:86:
6e:41:c9:ca:ef:84:0e:59:6f:0c:96:50:0f:28:8e:
9c:4e:5d:55:f3:fc:7b:30:29:14:9e:67:51:54:79:
4e:da:6f:fb:7a:f6:77:28:ec:6b:a6:c7:cc:a7:c3:
ef:c7:58:10:ad:23:b0:76:d1:e0:b5:ab:d8:6a:17:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:55:05:17:79:5C:64:86:7C:9F:0C:C7:25:66:DD:BA:8B:36:03:71
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:98:31:2f:d3:57:80:b2:0d:bb:8b:77:67:d3:22:41:17:69:
a9:d7:d2:47:8a:dc:f7:e9:88:9d:ea:b4:af:9f:42:2d:89:ae:
2f:d7:c1:ef:b2:29:d0:36:ca:9b:b8:bf:1d:24:06:63:2f:a9:
a5:1f:3b:36:a1:17:4f:79:a4:88:ad:af:47:72:9d:7a:89:10:
aa:5c:3b:cf:7d:7f:b7:6a:de:20:8d:fc:1c:98:a0:c9:df:15:
53:ca:bf:a6:1b:8b:94:c3:52:cd:98:84:cb:1f:42:47:92:4f:
44:85:6f:4b:86:77:b1:e4:87:5b:d6:30:b7:04:47:d1:6d:33:
dc:3d:a3:6e:7c:ff:d9:f8:43:df:3d:03:97:95:06:d7:fe:d6:
a2:ef:f9:81:f1:46:e9:74:33:cc:05:cd:3e:38:7a:9f:fa:cb:
12:ee:e1:88:73:59:09:b3:98:2d:b9:9c:eb:2b:7d:10:83:41:
31:c0:be:cc:63:7b:7d:ae:a9:3c:f3:c6:6c:14:10:1f:20:3c:
a6:28:6d:de:dc:f2:40:13:0a:12:1b:aa:30:46:23:11:e5:6e:
ad:d4:de:ba:0c:53:b7:c7:00:82:73:f4:1b:0a:ff:47:70:cc:
1d:ec:f6:93:98:e9:17:48:97:b2:b5:f7:c3:dc:05:f2:02:26:
ea:30:7e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 10:23:18 2026 by rpki-client