Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: Jr1/MceZIHWModgbETUXt0//9E/gXkSpaodxDEV/FNU=
Subject key identifier: 70:0E:AE:16:6E:BD:AF:D9:1A:37:AD:87:54:38:E9:18:CB:89:6F:B0
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 019F94A4B8CC497C44228BAE203A1A88C46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 15:00:50 +0000
Manifest this update: Fri 24 Jul 2026 15:00:50 +0000
Manifest next update: Sat 25 Jul 2026 15:00:50 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: gKh29D6UMojWuzr/riomsTjRiEJKihhVsl+OiyOs4+g=)
2: S31jWM3wEsReURsulHI7U8Kz478.roa (hash: /Sp5r8Qxi7xeH5fyeueoA88dFZr2CShlD/FHWPU4Yh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:b8:cc:49:7c:44:22:8b:ae:20:3a:1a:88:c4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Jul 24 15:00:50 2026 GMT
Not After : Jul 25 15:00:50 2026 GMT
Subject: CN=700eae166ebdafd91a37ad875438e918cb896fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:fd:50:e1:74:70:c1:6e:ca:53:4d:77:5d:
b5:d2:39:0a:b9:62:40:e3:3a:c5:cd:59:43:27:7d:
3c:24:78:74:70:c9:ad:37:3e:6e:60:66:ed:28:4e:
3a:9a:d3:e0:ea:9f:02:44:cc:a4:ca:b2:fc:5c:c4:
cf:68:73:04:5a:a8:b2:07:3d:80:7b:67:a8:e2:27:
82:89:96:56:c7:0f:ed:68:c1:2a:74:89:05:7a:da:
58:95:5d:82:1f:6a:95:bd:c5:bf:76:9f:d3:3d:a6:
da:c0:9c:52:6d:4e:0b:8b:a4:2f:51:a7:14:ed:bc:
36:df:eb:6b:fc:5d:cb:a9:fb:70:7e:d1:74:aa:52:
f3:33:83:c3:d2:1c:55:1e:a7:a5:8f:b2:34:8e:8e:
41:b4:c0:70:ec:8e:af:9d:55:8e:4e:b7:13:73:ad:
0d:83:15:31:8e:c7:32:42:99:15:98:fa:48:59:6e:
d4:7d:13:fe:3d:90:1b:71:c0:85:48:26:21:44:a8:
c9:9d:43:b1:bd:ed:22:1d:24:61:81:46:37:a1:63:
b1:a6:38:b7:67:3e:d6:62:e8:3e:f4:6b:f5:cd:60:
00:f6:66:6b:46:76:4a:b3:92:ec:50:f8:a1:e9:9c:
c0:81:e2:f4:34:8f:cd:a9:77:21:2e:b8:14:b0:3f:
e9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0E:AE:16:6E:BD:AF:D9:1A:37:AD:87:54:38:E9:18:CB:89:6F:B0
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e5:93:e6:9a:bd:35:9a:92:1d:5a:34:19:8b:80:25:5a:a0:
f2:53:d9:f0:99:90:5e:36:ec:74:0f:6e:93:a8:2f:71:a6:97:
5d:fb:1b:6a:30:d7:0e:f0:c9:a1:ff:90:da:7c:e3:1a:3b:14:
3f:52:28:d3:b2:a6:f6:65:48:f4:7a:99:66:a7:67:5c:39:c2:
ad:4b:32:d8:d5:89:b4:32:5b:b6:fa:54:54:01:24:36:e4:5f:
c9:81:13:66:2e:6d:d3:92:8d:ef:2d:d0:95:fd:47:e1:bb:20:
19:42:a3:fd:15:cc:30:a4:4b:0b:84:a7:23:11:fb:eb:16:0e:
89:ea:84:a1:0f:e1:c6:d1:9c:b7:31:77:df:cb:57:d4:d0:f3:
74:40:0f:cf:59:4d:d0:8c:fc:5b:a4:e7:63:3c:fa:9c:e1:2b:
50:bd:7a:0d:84:a8:5c:f4:48:3c:81:73:43:57:e8:09:cc:c2:
99:f8:e9:1f:ba:f1:e3:77:60:5d:bf:37:a8:09:7a:a2:09:cc:
e2:c3:57:23:5d:9a:43:d2:61:37:f9:b4:01:f7:44:0d:19:49:
d9:22:74:59:11:9d:a8:16:41:1e:4e:19:09:16:92:23:f1:49:
ae:5c:50:22:21:bf:c9:9e:3e:ed:12:f0:e5:dc:c3:c9:3a:30:
7e:e5:c2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:32:43 2026 by rpki-client