Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
File: pz1kDZC_PWfySYE4zDcfZUZH3a0.mft (raw, json)
Hash identifier: o21u6GG8XGJbf/2yMtPBxKlq0zvV1eCwcDZpMc6ADR8=
Subject key identifier: 7E:96:DE:F0:08:8F:AC:A0:D0:BD:1C:34:A8:50:1C:62:5D:2D:18:06
Authority key identifier: A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD
Certificate issuer: /CN=a73d640d90bf3d67f2498138cc371f654647ddad
Certificate serial: 019FA0A8991E0F36F8843FE2006FB97AEEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
Manifest number: 13CA
Signing time: Sun 26 Jul 2026 23:00:31 +0000
Manifest this update: Sun 26 Jul 2026 23:00:31 +0000
Manifest next update: Mon 27 Jul 2026 23:00:31 +0000
Files and hashes: 1: 9Iq_uFn7lRh-tQAiHIkLmewE_1E.roa (hash: OJCXmXG7WwlTCrAqRIAIwma12baEae1VhFyXFu0RHaY=)
2: pz1kDZC_PWfySYE4zDcfZUZH3a0.crl (hash: onQ/+GOtc0pQOTDnQC68YdKeQa1ettB0dQ6BOrEU++s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:99:1e:0f:36:f8:84:3f:e2:00:6f:b9:7a:ee:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73d640d90bf3d67f2498138cc371f654647ddad
Validity
Not Before: Jul 26 23:00:31 2026 GMT
Not After : Jul 27 23:00:31 2026 GMT
Subject: CN=7e96def0088faca0d0bd1c34a8501c625d2d1806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:48:66:57:64:9f:ba:87:7d:06:f0:bd:be:
32:c4:20:a7:34:2d:db:f2:d1:6c:e1:eb:da:b7:a3:
33:bd:55:c1:c8:4e:a0:b9:a0:b7:6e:78:12:b3:67:
29:27:b7:b2:28:85:cd:b9:82:ef:ca:60:42:f3:bb:
fd:3a:e9:c9:fe:e9:63:c4:e9:43:be:04:cc:3a:08:
e6:34:53:57:94:51:7c:3c:11:f7:a5:e3:b6:cf:a0:
f3:7b:fd:31:f1:58:27:5e:da:a3:b5:bb:51:8d:4a:
f5:88:de:61:af:61:05:53:4e:53:cb:b5:e5:a9:2a:
14:28:f2:c8:e5:43:94:39:73:10:23:7d:7e:90:d8:
d2:20:1a:22:5a:02:63:47:03:4b:15:82:58:4e:4b:
6f:25:61:bd:ce:75:10:cc:7e:5c:0b:81:c8:cb:56:
57:a7:62:e5:00:b6:a1:d3:27:63:41:61:b6:45:12:
92:dc:72:6e:f4:1e:97:f4:d0:d0:b0:3a:e6:4e:15:
a1:d7:aa:52:17:8a:e1:96:9d:d4:1a:fa:05:f7:1a:
37:3c:95:eb:9f:40:d6:37:f0:76:72:07:23:00:49:
52:da:cc:76:76:fc:3b:a3:0c:00:e3:3d:89:4f:0a:
e4:20:0e:fd:69:a0:91:d5:34:0f:a7:a2:90:4e:a0:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:DE:F0:08:8F:AC:A0:D0:BD:1C:34:A8:50:1C:62:5D:2D:18:06
X509v3 Authority Key Identifier:
keyid:A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:48:3d:25:14:ec:3a:ba:82:fe:bf:25:4b:46:d2:9c:57:88:
86:a7:c7:ba:99:32:61:6f:c2:68:f6:17:e3:ba:f8:9f:b4:ad:
05:cd:48:90:1a:b8:31:c4:72:18:fb:84:6f:a7:29:47:cf:d0:
3c:f1:b1:b7:58:76:b8:58:22:2a:15:82:a7:10:d4:3e:34:50:
15:a8:86:5e:a3:c6:63:c9:bc:50:2a:ef:da:f1:c1:e6:f5:8b:
62:5b:16:b6:1e:19:2f:1a:05:72:5c:05:25:1a:a8:9b:5a:f8:
3a:a6:30:bd:31:17:13:b4:7b:07:9a:34:f1:28:22:9e:40:c9:
54:2c:13:7f:ce:fb:09:da:7a:04:cc:5b:87:5c:34:13:85:2a:
ab:43:24:3f:89:90:9c:03:e1:47:a0:bb:0c:d6:39:44:51:02:
6e:b4:44:ee:07:ca:97:d3:32:bb:01:76:a8:44:e5:5a:2e:a7:
cd:e2:5e:10:53:12:32:2f:9b:cf:d9:61:10:dc:50:fc:3c:32:
53:f0:b9:f1:4b:3a:1f:8b:6b:30:f4:a1:2a:89:af:c1:3a:ab:
9a:3b:c9:fe:e7:81:ff:9b:cd:9e:b8:cd:88:78:2e:37:f8:82:
37:f3:cd:aa:59:8e:27:8f:c9:08:77:03:21:1d:17:c0:c2:0a:
c3:8a:22:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:30:31 2026 by rpki-client