Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
File: pkzfoBYCORcDN7pgk0ugbkW4zRE.mft (raw, json)
Hash identifier: 1zVDtKWeMBLQlH4QUkyU0UtC6R8Lw8oe0LAoGPEls4E=
Subject key identifier: 34:A9:89:0D:43:BE:D8:1C:19:6B:DB:D8:8B:73:A0:73:01:1E:E3:C5
Authority key identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
Certificate issuer: /CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Certificate serial: 01A1C5C39823ED9E301F7A8DB4BC8A1DA532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
Manifest number: 1A15
Signing time: Tue 10 Nov 2026 14:01:32 +0000
Manifest this update: Tue 10 Nov 2026 14:01:32 +0000
Manifest next update: Wed 11 Nov 2026 14:01:32 +0000
Files and hashes: 1: AqHz4ObObmJOHQBW4WCBWZfbmUg.roa (hash: efamkoeeFHOmwsuQJrPBuAqi8mcE7pwYzSUiql9ZCTM=)
2: pkzfoBYCORcDN7pgk0ugbkW4zRE.crl (hash: 1Tu3Y5p1w6JW2U+ILCa1dfDj0niTDbmbZChVC9J1khI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:c3:98:23:ed:9e:30:1f:7a:8d:b4:bc:8a:1d:a5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Validity
Not Before: Nov 10 14:01:32 2026 GMT
Not After : Nov 11 14:01:32 2026 GMT
Subject: CN=34a9890d43bed81c196bdbd88b73a073011ee3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:ab:78:54:08:e1:d5:00:3c:30:7b:72:a0:
1a:3a:07:cf:f8:96:ef:70:4b:f7:65:15:db:4c:e7:
98:a7:c1:0f:30:e7:d0:f1:3a:52:92:be:f1:1c:09:
f6:c7:c0:c9:30:3f:df:32:57:d8:54:be:e1:ef:87:
78:cc:e5:e9:44:f2:ea:78:13:c3:69:64:81:95:33:
99:cb:8e:bd:4a:6d:35:66:ad:74:4f:a4:3a:78:85:
81:ad:e3:5f:a6:e9:bd:af:9f:65:c2:12:78:c5:67:
26:40:ca:2e:cf:78:90:6f:ad:5c:c1:96:ca:12:6c:
a4:1d:9b:ff:48:0e:2c:28:df:a3:48:3a:a9:11:e4:
53:f3:f1:c9:d5:73:7f:d2:e6:76:42:a1:96:f5:64:
5d:e9:8b:ec:d7:49:49:fa:26:23:6c:0b:19:8f:18:
ca:11:fe:7b:86:2d:3c:c4:17:d4:f2:33:93:f2:5b:
fc:bc:a0:ed:c2:9d:aa:c5:5a:5d:78:31:d7:72:56:
7f:a6:e4:34:8e:c5:15:4f:77:0c:cc:22:34:8f:2d:
9a:f5:a4:59:c9:eb:3d:11:46:d7:5e:b6:04:70:92:
d6:19:1c:12:01:0b:52:1b:5f:67:c1:39:72:22:9e:
84:d3:0d:cc:a9:42:b1:a3:d2:d1:24:7c:a7:35:32:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A9:89:0D:43:BE:D8:1C:19:6B:DB:D8:8B:73:A0:73:01:1E:E3:C5
X509v3 Authority Key Identifier:
keyid:A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0d:3d:52:86:41:c7:0f:25:96:5e:87:de:69:b3:67:66:2c:
cb:a0:4b:9b:56:50:4a:7b:b0:e2:b5:48:bd:b6:8b:c0:c4:f5:
9d:40:c5:62:11:b7:25:f2:17:d0:0b:1c:f4:ea:c8:18:4e:72:
ac:16:27:87:2d:5e:a2:0c:c4:fd:89:9c:07:97:13:dd:ab:59:
f8:cc:e6:54:9b:76:cc:38:22:ad:5b:9b:e8:d7:d6:82:c3:58:
15:87:28:d6:96:6c:f7:e9:34:4d:0b:c4:00:6c:30:25:c9:8e:
85:c9:58:41:40:c1:f2:7a:e9:4e:9b:97:58:b3:00:1a:06:6e:
17:2e:99:82:be:69:2f:f0:e3:c4:f0:03:85:9d:15:e5:9a:f6:
53:61:84:17:e3:1a:38:6c:b2:74:5f:c6:5a:18:8f:0d:dd:fe:
84:d4:31:13:b7:a1:98:8a:13:86:6a:fb:cf:dc:6e:1b:c5:29:
9e:86:0b:93:cc:51:c2:e4:cf:a6:4a:7d:d1:73:ff:c0:7b:7a:
25:73:5f:c9:1b:58:f2:16:07:25:34:6f:92:aa:fd:77:bc:9e:
31:dc:07:bd:0c:98:a9:46:63:f2:c9:d2:27:36:d4:56:4a:98:
bb:c0:9f:72:41:48:d6:8f:14:98:e8:3a:47:01:68:83:45:af:
8d:c0:00:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 22:42:59 2026 by rpki-client