Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: BewM6TbDv6c+t7SDy+ImDKbkhA7c3Uq8N9o/Zffosqw=
Subject key identifier: 8E:E8:14:8E:E3:29:FF:2A:75:10:BF:24:68:39:44:B6:FF:AD:6B:2A
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 019F8720800C8FEA7967EF8DFA9934304037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 19C2
Signing time: Wed 22 Jul 2026 00:01:21 +0000
Manifest this update: Wed 22 Jul 2026 00:01:21 +0000
Manifest next update: Thu 23 Jul 2026 00:01:21 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: XEPy4in1sHkLul1fbV7s4zDM6aQjEdjOkh3cpR2PVIo=)
2: S31jWM3wEsReURsulHI7U8Kz478.roa (hash: /Sp5r8Qxi7xeH5fyeueoA88dFZr2CShlD/FHWPU4Yh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:20:80:0c:8f:ea:79:67:ef:8d:fa:99:34:30:40:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Jul 22 00:01:21 2026 GMT
Not After : Jul 23 00:01:21 2026 GMT
Subject: CN=8ee8148ee329ff2a7510bf24683944b6ffad6b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:b6:fa:a6:76:87:b2:03:64:43:30:04:4c:
6a:2f:36:f2:e2:66:7f:7b:1b:1f:28:1e:e0:5c:be:
bd:ca:a9:55:8a:6a:52:2e:5c:c6:fa:18:8d:2c:84:
2e:6d:51:9a:cf:66:2c:ad:76:1e:2e:4d:41:fe:0d:
5f:95:f5:d0:00:6e:83:6e:7c:e0:40:2e:76:ce:93:
78:8a:30:fc:f0:00:ad:f4:fa:87:2a:ec:9d:d8:10:
9a:f1:e0:02:fe:97:d4:c5:b6:b7:c6:34:00:79:d4:
c8:f8:71:63:23:13:10:65:1a:47:59:9f:cc:f5:22:
68:52:3e:b8:42:70:0c:7b:16:f5:c1:d2:60:83:ed:
f4:98:05:6d:d7:71:aa:b3:94:12:29:e4:35:2c:dc:
ed:66:6e:5b:fe:7b:91:e0:24:bb:17:a8:9b:ec:b8:
84:d9:3b:19:87:04:d8:50:3c:7f:06:0c:ca:72:a7:
05:85:a5:ca:21:bc:4e:39:fe:fb:e2:c9:ae:5e:21:
32:99:84:1d:c4:8e:fb:5c:f5:ad:95:27:40:cb:3a:
84:da:f4:20:7e:97:5f:da:ac:c0:25:d4:de:7d:d7:
b7:07:43:57:9d:c2:37:f1:0a:8c:c1:f0:0e:d7:f9:
cb:f3:3f:8f:a1:c9:86:49:76:3a:a0:8c:54:c7:38:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E8:14:8E:E3:29:FF:2A:75:10:BF:24:68:39:44:B6:FF:AD:6B:2A
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7b:0e:98:89:a7:e7:46:0b:2d:0c:d3:58:e2:b6:ac:86:ab:
57:db:e6:b1:81:3e:ea:08:1c:43:e1:6c:d7:d6:24:7c:c4:ff:
09:4c:12:5c:07:13:fe:a0:b9:f0:ae:39:c5:af:62:33:52:ee:
b0:da:a7:45:c0:f6:9a:27:69:0a:94:1d:7d:2a:1e:ec:e7:4d:
51:78:d8:b3:cc:0f:8c:35:6e:0e:19:5d:cd:f6:c9:1b:b0:82:
eb:e2:f7:7f:f4:0a:64:2e:17:c8:c0:87:71:9f:ec:bc:e9:65:
19:9d:49:21:fb:f0:be:97:71:13:6a:6b:57:9e:e0:c0:67:b0:
af:c3:f5:a4:bb:03:d2:a6:43:e7:4f:41:93:b7:e6:27:eb:00:
b4:da:0a:35:1e:bc:ec:38:4b:2b:4d:ab:54:2e:f6:fa:a0:fb:
96:96:e9:a6:aa:23:c0:3e:a2:af:88:3a:e4:21:c1:e3:6f:ac:
5a:7e:7f:5e:7d:31:21:8c:57:ff:5d:d7:55:c9:22:55:b6:50:
b9:8a:cf:50:2a:93:db:df:69:51:2e:c7:a3:ce:25:8a:06:ee:
e8:41:09:ed:94:ee:71:e0:64:fd:96:48:89:7e:d9:b8:64:70:
63:ff:7c:c8:db:7f:74:c5:ba:73:90:3a:4d:fd:f5:05:e6:64:
f7:2f:93:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:17:45 2026 by rpki-client