Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: V73UGUrJsfnrAi516Si7+fVa6VtQt67RUGwb8QCBQ0M=
Subject key identifier: D6:FA:A6:1D:A6:9A:E3:DF:A0:55:BA:34:09:0F:1F:C9:19:0B:E0:67
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 019F85320AF4F1F2F85ABD8C3A6D9A1526F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 19C1
Signing time: Tue 21 Jul 2026 15:01:17 +0000
Manifest this update: Tue 21 Jul 2026 15:01:17 +0000
Manifest next update: Wed 22 Jul 2026 15:01:17 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: f/f/85i2Wx20EFCdXeuIbG4SDsmprM2tPw+UYPbQiuY=)
2: S31jWM3wEsReURsulHI7U8Kz478.roa (hash: /Sp5r8Qxi7xeH5fyeueoA88dFZr2CShlD/FHWPU4Yh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:32:0a:f4:f1:f2:f8:5a:bd:8c:3a:6d:9a:15:26:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Jul 21 15:01:17 2026 GMT
Not After : Jul 22 15:01:17 2026 GMT
Subject: CN=d6faa61da69ae3dfa055ba34090f1fc9190be067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:8d:9d:7f:b8:3d:3b:87:b4:2e:8c:df:e0:
cd:78:35:35:4a:1c:9f:e7:05:09:eb:14:39:53:86:
01:3d:b6:63:31:e6:86:d6:6c:79:90:38:3f:da:80:
1c:3e:f8:2d:ac:b2:76:2c:48:97:55:4b:c6:7d:2b:
da:0e:1e:2b:f5:4e:1e:44:e1:6c:f4:d2:7d:a9:5f:
59:80:bf:87:6d:81:a3:75:ab:3a:ab:77:5b:bb:b0:
d4:84:ce:58:ff:6a:19:96:7a:c9:4f:4c:6e:60:b7:
64:fd:48:02:6d:88:76:d0:db:dd:46:42:51:f6:91:
71:9f:4e:c5:a6:81:19:2c:02:55:c5:29:e2:fa:0a:
61:32:1c:d3:29:62:21:c1:f0:1c:05:18:1a:18:c3:
27:80:b2:80:12:14:31:a4:7e:64:c1:54:c3:79:0f:
05:e5:67:67:55:27:e2:89:47:02:6d:32:fd:37:36:
06:46:c0:ee:72:fd:3f:f2:3f:1f:ea:fc:08:48:12:
a5:72:70:9a:e2:f3:20:c3:a5:7d:07:f2:66:b8:61:
21:03:07:d2:43:1a:04:b6:81:1f:3e:e5:4d:9a:19:
ce:5f:4e:6a:3e:8a:e1:dc:bf:f6:be:cd:ce:e7:df:
6f:34:fc:03:ca:c1:ae:f0:85:1a:fe:9d:4f:4f:ba:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FA:A6:1D:A6:9A:E3:DF:A0:55:BA:34:09:0F:1F:C9:19:0B:E0:67
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:40:42:27:1e:b6:50:e8:16:b0:4b:f3:b8:52:2f:c3:29:72:
67:18:03:fc:9b:84:84:77:1c:33:4b:40:50:cd:f2:fe:1b:e2:
8a:79:16:6a:08:6a:73:0e:55:9b:e4:80:0a:dc:8c:f5:70:78:
5b:ab:c6:90:62:ec:9d:ef:53:34:63:01:d0:9b:07:09:22:4c:
8d:1f:28:8d:f0:f5:d6:a3:35:c6:18:92:88:b8:b9:db:71:cd:
aa:79:07:2b:1a:a8:04:17:c1:5b:e4:5e:bc:56:7f:59:26:54:
f4:36:a5:6a:36:5a:56:68:04:c6:6a:ab:3f:90:e0:aa:9c:cb:
13:d5:b2:07:63:09:5c:e5:7e:50:80:e8:22:43:ef:23:d5:4b:
37:ce:cd:79:57:fa:8f:51:91:51:8f:66:b6:fd:bc:f3:13:31:
55:95:c9:d8:65:13:3e:38:19:cc:80:8a:03:e6:6b:2a:ba:49:
86:ff:e2:8e:99:9f:c5:1d:a7:e4:e3:d4:ff:b3:30:62:59:79:
5a:cf:6b:e0:de:d9:33:70:4b:e0:54:16:32:9a:9a:7f:6b:2d:
6c:5e:68:28:fd:cd:d7:d7:d2:85:f5:26:8b:80:ee:16:f6:c9:
d8:bc:4c:c3:a5:b8:fc:ad:d3:54:34:50:9e:80:8a:df:72:09:
71:e2:e7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:24:43 2026 by rpki-client