Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: i3LczRMOINVLdvgyjIEOm8mkRCGYGQ9th8CMwA8uA3I=
Subject key identifier: B5:E8:B1:7B:BA:0D:3D:32:03:03:AA:74:C2:E6:04:9F:85:9D:D3:46
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 019CAD22BA70300FA1F7A76033D171DBCEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 06:01:00 +0000
Manifest this update: Mon 02 Mar 2026 06:01:00 +0000
Manifest next update: Tue 03 Mar 2026 06:01:00 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: GYde1zE4gXgmVbkZF9GmcpFrxd67Ful7EwXNqLEXTTA=)
2: S31jWM3wEsReURsulHI7U8Kz478.roa (hash: /Sp5r8Qxi7xeH5fyeueoA88dFZr2CShlD/FHWPU4Yh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:ba:70:30:0f:a1:f7:a7:60:33:d1:71:db:ce:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Mar 2 06:01:00 2026 GMT
Not After : Mar 3 06:01:00 2026 GMT
Subject: CN=b5e8b17bba0d3d320303aa74c2e6049f859dd346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:98:49:21:d8:67:6d:38:6c:ed:5f:f4:c6:ad:
8b:b8:70:6b:cb:23:35:e1:b4:9f:5f:d9:77:a9:70:
07:91:e9:5d:9f:76:00:11:7a:06:b1:b2:69:b6:7f:
84:1a:fc:2f:86:e7:43:61:a0:c9:8e:e7:db:de:a6:
0b:7b:a1:fd:c6:83:5d:13:24:48:a7:29:0f:a7:84:
29:22:00:a5:3a:2d:a5:83:ab:4e:dd:46:0f:c9:bf:
fb:69:bb:48:bc:1b:69:1f:b8:e2:fb:b5:00:d4:db:
cf:37:59:6f:4b:38:05:0b:4c:81:20:01:a8:f5:9e:
83:20:b8:d4:c7:4d:b6:d9:a0:77:24:05:66:12:e2:
a3:35:cc:70:5f:c0:68:76:d8:a9:41:56:3a:36:3f:
4a:50:e6:f4:43:15:88:2f:88:2f:60:f8:07:39:cb:
c2:e1:3f:8f:13:bd:1b:01:f3:79:d3:77:0b:76:9c:
66:13:73:d5:d6:b8:92:15:4e:7b:46:0f:8b:98:c3:
f3:fb:f9:7f:97:80:7f:94:f0:5e:b4:1c:6a:df:5a:
b3:fd:e8:61:c2:4e:1a:79:5e:3a:4a:c8:ac:32:2e:
98:64:68:42:b5:06:22:c1:d0:12:36:04:9d:3d:ca:
c9:90:b2:d7:11:3f:78:5c:f3:bf:5a:37:7c:ca:fb:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E8:B1:7B:BA:0D:3D:32:03:03:AA:74:C2:E6:04:9F:85:9D:D3:46
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:48:55:fb:04:99:b2:02:ef:36:de:99:e1:44:dc:23:17:dc:
4d:fb:bf:aa:9e:06:ff:f0:8e:0a:59:f6:08:91:94:d0:9c:fc:
6c:89:8c:8e:0d:94:03:ef:69:bb:8b:85:dd:23:ff:83:aa:d2:
65:bc:8c:cf:13:16:2b:0b:bb:9b:c3:b4:18:b0:bf:14:95:a4:
43:dd:5b:e0:6d:74:a7:9d:17:8f:8c:a5:ff:43:13:fd:ff:f3:
5d:9e:2c:5d:0f:72:61:70:ba:93:cf:92:02:e8:54:5d:70:6f:
41:53:6f:10:08:87:ea:3d:ad:cd:c8:1c:7e:d3:b2:6d:4c:26:
2f:cb:ca:24:fa:bd:78:38:0c:9a:e1:53:67:84:5d:e8:60:af:
f9:6d:0b:01:df:36:37:db:ae:92:f5:85:d6:f2:5f:d5:11:d9:
8f:5c:b8:0a:00:14:28:ad:2f:e2:5f:b1:82:73:d7:aa:7c:88:
66:9c:75:4e:d1:9e:b2:88:48:01:67:92:d2:57:08:c4:f6:28:
ed:d2:75:bc:c0:ee:39:6b:2d:47:f2:ec:62:90:ec:d7:d7:a6:
e7:2c:f1:ef:46:90:35:18:b1:d1:cb:39:e8:8e:cb:02:a8:75:
50:40:c7:46:03:25:64:43:10:a0:8a:5e:51:3a:e9:db:3f:fb:
f3:6b:dd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:57 2026 by rpki-client