Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json)
Hash identifier: JX6b1F20xFfCVbjFZSHWspQlLsKNHxwHmRAX7RdzIIU=
Subject key identifier: B6:12:CF:73:A3:57:F7:EC:E9:A0:F3:B9:19:E3:56:C6:EB:1A:24:04
Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Certificate serial: 019CAFB686C537A0E4E6B385C8AA84B656D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
Manifest number: 030A
Signing time: Mon 02 Mar 2026 18:01:40 +0000
Manifest this update: Mon 02 Mar 2026 18:01:40 +0000
Manifest next update: Tue 03 Mar 2026 18:01:40 +0000
Files and hashes: 1: G0P5WlNlZGFjbEhb_R1Zn2df2xs.roa (hash: CL8qT2kYIrJ9NwJgE0Acghs3urkbaGANrFWydwL2iRg=)
2: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: XzmPkMfAaq3CZMV72uTWKN2jjssdZPasdVf9SlODrzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:86:c5:37:a0:e4:e6:b3:85:c8:aa:84:b6:56:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Validity
Not Before: Mar 2 18:01:40 2026 GMT
Not After : Mar 3 18:01:40 2026 GMT
Subject: CN=b612cf73a357f7ece9a0f3b919e356c6eb1a2404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:68:cc:e3:83:4a:cd:06:5d:55:51:92:46:8c:
43:43:8a:c7:27:36:d3:1d:06:ef:31:a1:19:bc:b5:
d5:12:a1:26:15:ed:de:a9:f8:03:57:30:0e:e8:34:
53:2b:e5:59:91:b4:aa:1f:a0:d0:17:15:c4:8e:e5:
67:82:11:8c:9c:03:52:e4:31:3a:95:5d:f7:57:fb:
a3:71:4a:b7:50:8f:02:bd:12:0e:78:d3:30:c1:3a:
b7:a0:f6:16:0e:16:81:cc:ba:90:ce:59:83:71:db:
d5:cb:39:42:55:d4:e9:a8:69:a0:dc:99:67:2f:4d:
23:85:6c:cd:b0:b4:cd:f7:5c:4a:7e:25:26:7d:2f:
9d:d7:8e:7e:46:53:c7:1d:2d:04:42:6f:b5:2f:fa:
a8:b3:53:9b:32:d5:19:6b:a1:64:4d:25:98:e2:a4:
ac:f8:1a:34:50:a5:98:38:1f:fc:81:81:ed:eb:14:
20:95:c3:69:96:3b:16:d1:73:1e:34:c6:68:2a:b0:
df:ec:fd:8c:4d:55:84:22:0f:31:52:bc:a0:06:04:
3a:c5:6a:94:d0:bb:e8:9e:49:5b:be:37:d5:85:70:
dd:f5:23:ff:42:57:23:b8:d2:bd:64:ca:47:f4:22:
91:47:2c:ec:ca:d5:69:b2:24:8f:75:f9:4b:97:41:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:12:CF:73:A3:57:F7:EC:E9:A0:F3:B9:19:E3:56:C6:EB:1A:24:04
X509v3 Authority Key Identifier:
keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f8:c8:c6:26:2c:5c:41:f1:10:90:37:5e:3f:d3:82:22:fe:
e2:89:df:de:ea:39:eb:77:5d:e6:e5:ac:9e:63:d8:d7:3c:0c:
4f:32:23:7c:a0:34:5b:e3:61:b8:37:5d:12:67:fa:67:23:07:
08:c7:30:70:4a:66:3c:01:02:e6:45:ba:22:d8:38:90:b1:9d:
8f:44:be:60:ac:46:2c:8c:a0:52:6b:77:73:7d:8f:09:5d:fd:
4a:a7:f5:72:93:68:fb:6d:86:7e:3c:e0:26:39:16:5c:4e:30:
cd:80:bc:1d:eb:22:52:39:ff:f0:be:d2:d6:fe:01:46:c2:a3:
70:d8:ea:b3:8b:b4:5a:2a:ed:62:1e:04:8b:8b:6c:92:ac:8b:
55:6a:81:f5:6f:fc:fc:33:bb:a4:c9:ff:a4:9e:04:95:e2:3f:
81:e4:23:89:8a:02:99:fe:59:e5:24:ef:4f:0d:de:09:10:af:
65:e9:ef:32:af:d3:b1:da:d0:c2:f6:35:cf:53:9d:41:09:c6:
85:fd:ce:53:a5:8f:8a:f3:69:27:e9:3b:48:c1:9e:61:8d:1d:
9f:63:a0:3b:be:72:98:d5:23:9d:a6:79:b8:24:7e:e3:bc:bc:
d5:7c:29:1e:24:ef:7c:a4:bb:8d:6c:0b:17:76:03:3c:2e:dc:
91:c0:76:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:58:17 2026 by rpki-client