Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: NlqTkvMnnB+07OBQTRKpdmcW244svjc4gOqF+RGTvhQ=
Subject key identifier: 70:2C:F0:F8:89:74:D7:E6:18:1C:1F:0A:AC:6C:B8:9C:82:87:9A:78
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 019E9D73350EBCEED6CAF6AA2C28F9D766DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 1949
Signing time: Sat 06 Jun 2026 15:00:33 +0000
Manifest this update: Sat 06 Jun 2026 15:00:33 +0000
Manifest next update: Sun 07 Jun 2026 15:00:33 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: 614YEBBmznRAQgpgnZFWHRpfiH4IYr1kbMVfFUZxuQ0=)
2: S31jWM3wEsReURsulHI7U8Kz478.roa (hash: /Sp5r8Qxi7xeH5fyeueoA88dFZr2CShlD/FHWPU4Yh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:73:35:0e:bc:ee:d6:ca:f6:aa:2c:28:f9:d7:66:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Jun 6 15:00:33 2026 GMT
Not After : Jun 7 15:00:33 2026 GMT
Subject: CN=702cf0f88974d7e6181c1f0aac6cb89c82879a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:7d:0c:18:be:60:30:3a:0b:89:1a:6f:8f:
63:72:48:66:86:79:a0:1a:a8:52:ac:6c:5e:df:1f:
50:3d:e5:23:d7:5f:1e:c4:cb:56:a7:5a:41:95:b9:
1f:a6:49:1e:ff:a9:76:56:01:77:1d:f3:6b:b3:9d:
09:55:41:f7:fa:c3:f5:b8:02:66:52:5a:17:8f:ce:
9d:f3:f0:8c:20:d3:86:7b:ca:0f:11:41:a9:91:49:
8e:ae:cc:f3:c6:17:08:39:10:8e:37:88:ae:72:2f:
99:a9:11:aa:d2:23:3c:86:c5:2c:9c:e4:d9:34:e6:
6e:31:43:b0:07:d5:9f:1a:2e:5b:b4:f0:50:7b:07:
35:09:7f:97:a0:36:c5:05:40:6c:1e:e3:da:44:6a:
14:e2:7d:6b:68:16:4b:2c:6c:8a:b3:2f:2a:32:b0:
24:bf:fa:29:9a:94:b3:47:8f:79:2a:d8:10:29:66:
e8:b5:4c:0b:6d:66:fe:cc:28:f0:d4:26:fc:c4:32:
ca:f2:b0:6f:66:1c:62:f0:9c:5d:03:94:f5:2d:25:
0a:64:7b:79:15:61:83:fe:16:86:1f:f2:09:d5:b4:
fd:5b:b8:ef:75:13:f8:22:ed:84:ca:3d:4b:af:cb:
c8:54:18:eb:23:db:f1:2e:5a:3d:99:fe:14:05:63:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2C:F0:F8:89:74:D7:E6:18:1C:1F:0A:AC:6C:B8:9C:82:87:9A:78
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7a:87:ea:3d:06:f7:fd:d7:b0:10:3b:59:dd:2a:70:6b:18:
2a:45:e1:64:74:7a:2c:4a:53:4a:f3:fa:f0:97:48:44:f1:f8:
e6:52:b8:01:1f:75:a8:b8:43:ba:6d:08:bd:d2:94:b4:fc:02:
23:e1:a8:77:43:49:de:7c:2b:bb:88:63:38:cc:97:d4:c6:8a:
f9:fe:ad:f6:68:bc:61:2a:c7:01:5b:71:28:10:d1:b0:3e:cd:
5e:52:aa:09:8e:41:c7:d7:3b:bc:cc:30:bd:85:b2:26:08:36:
1a:c6:f8:43:47:6d:86:82:83:8b:19:6c:48:09:fb:6d:23:e5:
70:3f:14:20:7d:ba:09:1c:23:06:d0:e5:b6:79:c7:b5:09:80:
fc:85:55:0e:63:0c:75:cc:ee:3d:1d:94:44:19:f4:36:7c:f1:
03:3c:80:87:73:82:44:49:ff:75:46:b6:1a:f8:05:ab:ef:11:
b9:7b:75:32:1a:49:0f:fc:6c:1c:f0:af:a3:d4:dc:d0:7d:92:
9f:f8:06:b5:36:02:e2:fe:b6:21:25:81:dd:9a:a0:ee:d9:d9:
cd:cd:a8:55:41:24:7c:d4:3c:97:c5:1c:5c:59:a0:bf:d8:ea:
50:42:7e:7c:be:63:64:f8:fa:2d:b0:d1:5b:78:65:ba:ea:58:
ad:be:73:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:26:23 2026 by rpki-client