Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
File: pkzfoBYCORcDN7pgk0ugbkW4zRE.mft (raw, json)
Hash identifier: RhUS0J1jHaA5Sqrn1tNUQ4hbaHgfO6c/9mY8N/DGU9Q=
Subject key identifier: 82:27:FC:9C:36:AE:CD:EB:9F:97:E1:E3:BF:96:55:D3:77:AF:DB:8C
Authority key identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
Certificate issuer: /CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Certificate serial: 019FD195D384CFC478A6BBC3D718E24AEAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
Manifest number: 1912
Signing time: Wed 05 Aug 2026 11:01:24 +0000
Manifest this update: Wed 05 Aug 2026 11:01:24 +0000
Manifest next update: Thu 06 Aug 2026 11:01:24 +0000
Files and hashes: 1: AqHz4ObObmJOHQBW4WCBWZfbmUg.roa (hash: efamkoeeFHOmwsuQJrPBuAqi8mcE7pwYzSUiql9ZCTM=)
2: pkzfoBYCORcDN7pgk0ugbkW4zRE.crl (hash: 3nrR+1mEpQ4SRKi7e2hwuEB6tTJSir3VeJz+lqtdQkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:95:d3:84:cf:c4:78:a6:bb:c3:d7:18:e2:4a:ea:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Validity
Not Before: Aug 5 11:01:24 2026 GMT
Not After : Aug 6 11:01:24 2026 GMT
Subject: CN=8227fc9c36aecdeb9f97e1e3bf9655d377afdb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:c3:2e:86:8e:86:e6:57:d4:b5:f6:a6:11:
61:74:d9:54:f2:1a:09:83:0c:60:12:96:21:2e:d6:
b1:ba:93:76:a3:e9:bd:2a:a4:cd:7b:66:17:49:7c:
bf:bf:81:dd:16:be:e6:e5:6d:af:e0:88:fc:d5:5f:
d4:0f:70:0a:ab:94:28:23:69:61:a1:1f:c7:b9:91:
c1:f4:f0:97:75:31:a6:b1:85:a9:84:d5:94:6d:c1:
25:d4:55:33:9d:4a:2b:ab:71:db:e9:17:b1:7c:62:
95:88:fb:d1:a0:06:60:de:1e:21:1a:29:f8:98:32:
3e:98:d0:c9:58:69:e9:7d:70:e2:c7:6a:fe:7f:34:
c1:be:c4:28:5f:72:a4:00:aa:a1:a2:f3:79:fd:3d:
2d:62:30:75:4b:b5:a9:2b:28:2c:fe:9a:84:b5:90:
ed:36:10:25:f0:fa:3a:0c:10:a2:21:ec:71:26:ad:
d1:0d:32:94:44:38:55:51:48:70:9f:e3:55:7d:2e:
84:7c:d2:b9:06:71:3a:a8:e6:44:2b:11:3b:33:60:
63:25:89:ae:6d:7e:9d:db:09:8d:f2:99:fb:1e:58:
d3:d3:cf:51:e6:81:df:e9:69:9f:29:99:7d:5b:6a:
7b:9b:cb:a4:82:e5:52:6d:ec:f9:a9:84:9c:47:75:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:27:FC:9C:36:AE:CD:EB:9F:97:E1:E3:BF:96:55:D3:77:AF:DB:8C
X509v3 Authority Key Identifier:
keyid:A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f4:2d:19:44:a4:e7:9d:10:48:77:37:df:2b:8e:e9:c0:81:
e6:d9:78:b9:21:db:fa:1a:00:cd:f6:91:1a:01:62:43:e2:68:
95:4f:9e:de:fd:f6:21:04:74:ee:a5:73:1c:b2:cb:7d:01:ce:
68:aa:99:41:2f:27:32:33:bd:71:09:01:44:ea:30:ba:21:65:
8c:5e:dd:6f:14:a5:10:f1:24:2e:71:6a:5f:11:13:26:d0:3f:
84:a2:e7:e1:0e:2b:ba:22:ff:15:f7:0c:3b:65:37:d1:78:96:
cf:8a:8e:e3:38:71:9b:b4:fa:ca:96:76:dd:c1:f8:23:95:5a:
27:a8:88:b2:ca:37:42:d8:4a:b1:11:78:23:8b:e6:f9:b3:0f:
34:35:26:d6:ca:9d:da:4a:f1:9c:e4:ad:98:75:54:b1:59:c6:
0f:66:ac:c7:96:f4:d4:7c:97:a6:55:1e:43:ae:cf:39:1d:0d:
5f:37:98:e3:db:fb:a3:a2:fd:b7:b8:cf:8d:64:39:a5:30:3b:
64:2d:47:0b:03:0c:07:54:fa:9f:ce:78:1f:f7:3d:2e:15:17:
95:c2:41:14:bb:6f:f2:06:60:39:2f:21:15:13:34:e9:e1:28:
99:b1:99:a4:3e:34:3b:59:7e:3c:d1:75:de:5e:21:44:b9:fc:
c4:73:97:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 20:09:11 2026 by rpki-client