Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json)
Hash identifier: Fla3C9WfH9lgXT+UhclqYZ6+bkEJm2ZgntnLZG2Tj6w=
Subject key identifier: 63:EE:B4:3D:2A:3B:D2:0E:FE:24:8C:2D:00:88:40:2D:98:F5:48:49
Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Certificate serial: 019D9D3EC1525BC116A3F2D372BE662E221D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
Manifest number: 0385
Signing time: Fri 17 Apr 2026 21:00:28 +0000
Manifest this update: Fri 17 Apr 2026 21:00:28 +0000
Manifest next update: Sat 18 Apr 2026 21:00:28 +0000
Files and hashes: 1: G0P5WlNlZGFjbEhb_R1Zn2df2xs.roa (hash: CL8qT2kYIrJ9NwJgE0Acghs3urkbaGANrFWydwL2iRg=)
2: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: u+GN8wNK1G63RDEGIX5W9DKLeJQTr/545wuaq3msxw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:c1:52:5b:c1:16:a3:f2:d3:72:be:66:2e:22:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Validity
Not Before: Apr 17 21:00:28 2026 GMT
Not After : Apr 18 21:00:28 2026 GMT
Subject: CN=63eeb43d2a3bd20efe248c2d0088402d98f54849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:83:1e:a0:1c:57:57:ef:cd:7f:e7:6c:13:
9a:22:25:9b:bb:03:9c:13:7e:11:cf:17:93:dc:58:
c2:f6:f6:aa:92:15:de:cf:27:67:ba:81:53:3d:56:
d8:2d:73:e9:8a:16:f6:74:b5:51:e3:05:43:d0:79:
ce:e5:b8:ab:60:37:3d:ac:e2:73:1c:66:1b:df:67:
b7:2a:8d:7a:ae:9e:97:96:50:73:7e:f6:ff:4f:e3:
f1:fd:b4:6e:ce:e2:de:ce:ea:ae:8c:48:76:bf:0e:
da:47:0c:f7:b1:c5:a6:e4:ae:4d:44:c6:f2:7b:bc:
02:79:19:0c:ec:26:0e:62:c1:d8:a6:e7:a6:1c:9f:
07:5f:9f:9a:70:7a:25:03:a2:95:88:30:f5:1d:69:
c0:f1:a1:f9:e1:24:5a:e4:d4:28:a0:7c:ce:b3:59:
56:75:a0:7c:a3:08:6a:0c:34:b5:a8:ea:b4:4a:51:
43:1f:74:2c:fe:6a:f5:d2:61:4f:8f:86:72:71:f8:
04:6a:c8:72:73:0a:e9:23:c9:00:2f:67:e6:32:f8:
a5:a8:0e:f7:b3:fb:0c:59:33:e3:b6:f9:ca:39:e2:
7c:07:67:ca:7c:1a:90:04:35:7d:22:06:4a:8d:c6:
14:5d:84:d5:75:81:bd:c7:3b:a7:a4:70:23:d3:6d:
c5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EE:B4:3D:2A:3B:D2:0E:FE:24:8C:2D:00:88:40:2D:98:F5:48:49
X509v3 Authority Key Identifier:
keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d5:8c:e0:c0:e3:6e:d6:22:33:22:75:ac:87:e3:b1:1d:63:
88:4c:48:12:8a:b2:80:b2:cd:ef:2b:78:71:18:bd:25:2c:c7:
39:32:a1:2e:e2:5c:e2:83:06:1c:a6:74:b9:15:74:14:ee:76:
2a:fc:0a:d4:72:28:dd:0a:db:0f:0d:d2:c4:c0:4b:0f:a4:46:
34:fd:f7:d2:1a:0e:95:41:0f:7a:82:86:8a:12:32:07:fe:b6:
e5:05:cc:b9:7f:55:7f:49:be:aa:64:91:4b:82:96:f4:6e:c1:
5b:7f:68:cc:7b:30:5e:b8:6a:bf:71:f2:dd:f7:14:38:2a:8f:
35:78:71:86:40:d0:9c:27:eb:06:0c:c8:1a:c0:da:ad:0d:40:
4a:09:0e:9b:4e:7f:6f:7d:3a:74:67:a4:c8:37:1d:11:e7:d5:
56:2b:da:af:68:c1:15:04:ae:91:36:d6:b9:a3:66:d7:23:e6:
34:e6:60:bd:cd:d7:3d:f7:cb:67:b4:4d:cc:c8:5c:51:9f:fd:
18:43:91:f8:b8:23:39:65:61:4d:4f:02:de:6c:99:a5:b2:24:
c6:bd:86:20:dd:f2:9e:de:c6:d2:58:7c:17:b8:d9:61:0c:de:
54:ee:71:8a:52:34:5d:e5:f9:e1:c0:9a:27:8d:df:df:d6:bd:
63:76:15:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:36:05 2026 by rpki-client