Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: lfUUvI3GVR4rDQEyrx+MrPnjRTt2b+3l9ITnOYqaSB4=
Subject key identifier: D7:F9:81:34:AE:C9:D7:90:7C:A1:BF:C2:15:7B:17:8E:74:E7:3C:DB
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 019D26CCD15138D3413CE60206E1FF1A1E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:50 +0000
Manifest this update: Wed 25 Mar 2026 21:00:50 +0000
Manifest next update: Thu 26 Mar 2026 21:00:50 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: nF4w+MZtGMBgP/Lha1z/krvT+EsQvyd/toA7yURn9B8=)
2: S31jWM3wEsReURsulHI7U8Kz478.roa (hash: /Sp5r8Qxi7xeH5fyeueoA88dFZr2CShlD/FHWPU4Yh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d1:51:38:d3:41:3c:e6:02:06:e1:ff:1a:1e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Mar 25 21:00:50 2026 GMT
Not After : Mar 26 21:00:50 2026 GMT
Subject: CN=d7f98134aec9d7907ca1bfc2157b178e74e73cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:90:0d:d4:7a:29:0b:e2:f0:d4:ce:f5:d1:
c4:12:c9:f1:4e:00:4e:31:3a:d2:c9:92:b0:2a:5c:
87:69:91:7e:f1:c3:4c:2b:c3:53:6f:3f:89:48:38:
6e:85:ae:d9:d0:d2:23:42:5f:2c:86:34:ae:99:33:
fb:3a:cf:48:1b:ae:e0:90:ad:e2:dc:f1:62:69:59:
ca:7b:99:63:d2:a7:be:4b:08:06:c1:15:82:8d:7c:
20:fa:46:48:83:91:26:71:19:17:e5:88:63:9c:50:
bf:28:46:fd:a5:b4:07:42:de:7c:f2:ba:8c:96:bf:
f4:69:b9:02:d8:d4:af:54:fc:9e:33:63:9a:06:be:
83:5a:10:4c:db:71:ff:2d:3e:6c:8c:fd:5c:67:b1:
44:fb:ce:1e:05:95:de:87:de:17:95:17:f2:68:01:
97:02:26:c0:71:ce:d8:95:62:6f:e9:65:a4:c6:5f:
d7:93:74:58:c5:dc:69:8a:84:1b:07:c1:63:d4:47:
b9:6f:d2:2c:9a:65:f6:98:cf:5a:2b:3c:ee:7c:1a:
2b:fd:62:ab:40:ce:6e:6d:4d:89:9b:25:eb:90:d9:
87:58:8f:b2:f0:aa:fc:4b:3c:fe:85:fe:06:43:80:
7f:b5:ba:fc:8c:85:ca:18:f6:97:46:01:40:4e:be:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F9:81:34:AE:C9:D7:90:7C:A1:BF:C2:15:7B:17:8E:74:E7:3C:DB
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:aa:94:d1:eb:f9:fb:b6:c9:ce:2e:48:e9:c8:72:e2:5b:36:
59:9d:f8:d4:e9:9c:d6:c3:8a:a5:3b:05:d5:78:ee:50:ab:27:
97:c5:34:31:cc:43:87:a0:26:d6:e0:95:7f:1c:ec:08:60:cd:
da:b5:e8:1a:85:36:23:38:a7:9a:ed:ef:13:7b:5d:fb:59:0b:
4e:3c:01:7e:38:be:57:85:db:2a:bb:72:45:f4:3d:f9:f1:18:
b0:71:29:3c:ec:74:f5:71:db:35:0f:37:2f:aa:2e:ab:20:b1:
9a:84:0b:df:41:1c:9a:6d:3d:3e:bd:89:e4:6a:b1:4b:5e:9b:
33:cd:f7:2a:ff:9d:b4:4f:9e:ef:5b:0d:c8:e5:7d:0d:04:47:
90:b9:f1:a8:cb:6e:e8:72:e9:10:64:11:15:e9:15:cb:75:43:
0d:a2:95:32:ef:7b:e5:3a:ec:ac:71:06:61:c1:61:e6:74:09:
3f:d6:8c:89:b2:41:e8:da:61:19:cb:8c:94:0e:e2:72:43:74:
e4:8c:cc:e4:13:34:31:62:31:d8:fd:8d:37:d7:07:1c:b9:6a:
18:3a:08:6d:8a:33:46:a2:db:5f:2f:55:b3:0a:76:13:4c:16:
93:52:e3:53:b4:62:14:66:51:7b:b0:33:a5:3d:e6:8f:89:bc:
51:27:fc:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzNFRONNBPOYCBuH/Gh4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOTQyNGIzYzhlNzJmNzQ2YTU5ZWIxOTk0NTVhYTM2NDZh
M2E0NTcwHhcNMjYwMzI1MjEwMDUwWhcNMjYwMzI2MjEwMDUwWjAzMTEwLwYDVQQD
EyhkN2Y5ODEzNGFlYzlkNzkwN2NhMWJmYzIxNTdiMTc4ZTc0ZTczY2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz+QDdR6KQvi8NTO9dHEEsnxTgBO
MTrSyZKwKlyHaZF+8cNMK8NTbz+JSDhuha7Z0NIjQl8shjSumTP7Os9IG67gkK3i
3PFiaVnKe5lj0qe+SwgGwRWCjXwg+kZIg5EmcRkX5YhjnFC/KEb9pbQHQt588rqM
lr/0abkC2NSvVPyeM2OaBr6DWhBM23H/LT5sjP1cZ7FE+84eBZXeh94XlRfyaAGX
AibAcc7YlWJv6WWkxl/Xk3RYxdxpioQbB8Fj1Ee5b9IsmmX2mM9aKzzufBor/WKr
QM5ubU2JmyXrkNmHWI+y8Kr8Szz+hf4GQ4B/tbr8jIXKGPaXRgFATr489QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNf5gTSuydeQfKG/whV7F4505zzbMB8GA1UdIwQY
MBaAFD2UJLPI5y90alnrGZRVqjZGo6RXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEt
NmE4MDMzZGNiZTFjLzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEtNmE4MDMzZGNiZTFj
LzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaqU0ev5
+7bJzi5I6chy4ls2WZ341Omc1sOKpTsF1XjuUKsnl8U0McxDh6Am1uCVfxzsCGDN
2rXoGoU2Izinmu3vE3td+1kLTjwBfji+V4XbKrtyRfQ9+fEYsHEpPOx09XHbNQ83
L6ouqyCxmoQL30Ecmm09Pr2J5GqxS16bM833Kv+dtE+e71sNyOV9DQRHkLnxqMtu
6HLpEGQRFekVy3VDDaKVMu975TrsrHEGYcFh5nQJP9aMibJB6NphGcuMlA7ickN0
5IzM5BM0MWIx2P2NN9cHHLlqGDoIbYozRqLbXy9Vswp2E0wWk1LjU7RiFGZRe7Az
pT3mj4m8USf8IQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:20:24 2026 by rpki-client