Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: wp5bwzTRJ2NWQQnNjeKucmb/nFbz0H+UPkr/DyxNkV0=
Subject key identifier: 12:15:90:6B:D5:49:D4:7D:C0:E9:CD:16:CC:27:FC:A5:0B:78:1D:4B
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 01A06EDE1DAEDD1A73C59619E1AD96B5471B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 1A3A
Signing time: Sat 05 Sep 2026 00:00:45 +0000
Manifest this update: Sat 05 Sep 2026 00:00:45 +0000
Manifest next update: Sun 06 Sep 2026 00:00:45 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: qr0NdSxIJbymO8kOQic45aVKrbMWlLIdHdLulmoYtZI=)
2: S31jWM3wEsReURsulHI7U8Kz478.roa (hash: /Sp5r8Qxi7xeH5fyeueoA88dFZr2CShlD/FHWPU4Yh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:1d:ae:dd:1a:73:c5:96:19:e1:ad:96:b5:47:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Sep 5 00:00:45 2026 GMT
Not After : Sep 6 00:00:45 2026 GMT
Subject: CN=1215906bd549d47dc0e9cd16cc27fca50b781d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:47:d1:fa:f6:e5:fe:c3:fe:41:d3:f2:19:
01:77:8b:63:3e:a1:db:98:48:0e:3a:f8:87:62:b2:
da:b2:0d:d0:58:a2:3f:dc:5b:74:2f:c2:e1:3d:16:
32:c1:5e:70:5a:61:fb:aa:ec:7e:bf:8e:97:53:ef:
f9:86:dc:a7:34:f8:57:ea:be:b1:26:d3:f0:b7:88:
8f:90:b8:bb:a4:dd:c1:82:9f:83:87:87:fc:fc:61:
80:fe:99:b6:95:2d:46:42:2e:9e:13:8b:3c:95:17:
20:58:0e:2a:60:54:39:05:6e:99:42:00:49:54:35:
95:88:d3:dd:6d:b3:5c:8d:7d:b9:a4:53:42:be:63:
fe:40:6f:51:0b:0b:86:ec:52:56:2e:e2:da:76:f0:
aa:ef:de:8b:b2:fd:f9:3b:d3:ed:3f:d0:72:6b:89:
62:f5:12:4f:85:a1:f1:41:0d:57:0b:47:c1:78:84:
dc:b8:e0:d6:92:7e:d1:86:b0:ae:fa:05:d5:ba:fc:
23:36:66:e9:e0:a3:3b:4d:aa:96:87:ab:80:90:31:
34:fc:0d:a6:ed:59:d0:58:e4:aa:1f:c5:1e:ff:b8:
3e:a6:73:6a:79:fb:14:fb:08:08:a4:4d:09:4d:a0:
a4:48:38:6a:49:98:33:4e:23:c1:32:32:c4:ae:7a:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:15:90:6B:D5:49:D4:7D:C0:E9:CD:16:CC:27:FC:A5:0B:78:1D:4B
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ec:37:56:80:e9:89:c5:c2:97:4b:c7:33:96:60:83:af:37:
52:45:01:49:d0:4a:9a:39:fa:bd:0d:82:b9:bb:51:a2:1f:f6:
cf:05:19:78:e8:f6:cb:9f:80:17:55:5a:38:18:b9:88:c8:69:
d9:dc:89:15:49:25:a9:6c:00:97:cd:18:2d:39:e4:e2:25:bb:
a5:d2:b4:f5:04:1e:3c:dd:8b:3b:de:92:54:97:c2:3e:4c:49:
e7:aa:cd:bc:f9:ae:55:e8:18:61:8d:f0:b5:00:21:b7:b6:ed:
bb:db:cf:7c:4e:ee:27:f4:61:a1:db:14:ee:08:b3:97:f2:db:
a0:0d:55:bb:5e:99:ac:6d:2b:65:6d:44:47:60:e8:3e:4e:ec:
4d:fb:26:1f:50:7b:8d:b5:fa:38:2f:5f:66:e4:2e:30:3a:6e:
d4:db:bf:21:db:0e:3e:6e:e7:10:c5:fc:ff:d1:93:f9:a1:72:
f9:7f:4e:ef:bd:89:01:aa:d4:1d:b3:5d:da:ef:c9:ff:a0:d5:
15:e7:55:c1:41:12:85:5e:72:6a:59:7b:df:ba:90:65:45:8a:
fc:ac:97:aa:60:a0:8b:38:f3:ef:f0:29:c6:da:58:68:c1:a6:
ef:a5:3b:96:8b:7d:53:f2:69:89:13:8c:5f:3d:ad:af:2f:fa:
d9:e0:9a:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBu3h2u3RpzxZYZ4a2WtUcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOTQyNGIzYzhlNzJmNzQ2YTU5ZWIxOTk0NTVhYTM2NDZh
M2E0NTcwHhcNMjYwOTA1MDAwMDQ1WhcNMjYwOTA2MDAwMDQ1WjAzMTEwLwYDVQQD
EygxMjE1OTA2YmQ1NDlkNDdkYzBlOWNkMTZjYzI3ZmNhNTBiNzgxZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPxH0fr25f7D/kHT8hkBd4tjPqHb
mEgOOviHYrLasg3QWKI/3Ft0L8LhPRYywV5wWmH7qux+v46XU+/5htynNPhX6r6x
JtPwt4iPkLi7pN3Bgp+Dh4f8/GGA/pm2lS1GQi6eE4s8lRcgWA4qYFQ5BW6ZQgBJ
VDWViNPdbbNcjX25pFNCvmP+QG9RCwuG7FJWLuLadvCq796Lsv35O9PtP9Bya4li
9RJPhaHxQQ1XC0fBeITcuODWkn7RhrCu+gXVuvwjNmbp4KM7TaqWh6uAkDE0/A2m
7VnQWOSqH8Ue/7g+pnNqefsU+wgIpE0JTaCkSDhqSZgzTiPBMjLErnpN9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIVkGvVSdR9wOnNFswn/KULeB1LMB8GA1UdIwQY
MBaAFD2UJLPI5y90alnrGZRVqjZGo6RXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEt
NmE4MDMzZGNiZTFjLzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEtNmE4MDMzZGNiZTFj
LzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOw3VoDp
icXCl0vHM5Zgg683UkUBSdBKmjn6vQ2CubtRoh/2zwUZeOj2y5+AF1VaOBi5iMhp
2dyJFUklqWwAl80YLTnk4iW7pdK09QQePN2LO96SVJfCPkxJ56rNvPmuVegYYY3w
tQAht7btu9vPfE7uJ/RhodsU7gizl/LboA1Vu16ZrG0rZW1ER2DoPk7sTfsmH1B7
jbX6OC9fZuQuMDpu1Nu/IdsOPm7nEMX8/9GT+aFy+X9O772JAarUHbNd2u/J/6DV
FedVwUEShV5yall737qQZUWK/KyXqmCgizjz7/ApxtpYaMGm76U7lot9U/JpiROM
Xz2try/62eCa1Q==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:11:50 2026 by rpki-client