Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: yvUGXwUJ9oGtYKeqQcIXWzpUaQBGe4ALeECfX6pmb9k=
Subject key identifier: E3:F1:3D:79:D2:C7:8B:44:9B:89:D9:95:02:58:6F:87:E8:A4:38:04
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 019D9AAC2B43B5C5C8567DBC7E6C0B968122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:01:07 +0000
Manifest this update: Fri 17 Apr 2026 09:01:07 +0000
Manifest next update: Sat 18 Apr 2026 09:01:07 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: QdLI+S5+EGQl+s5B10pJSXIkA4/KD+8rm2wqydcDe9w=)
2: S31jWM3wEsReURsulHI7U8Kz478.roa (hash: /Sp5r8Qxi7xeH5fyeueoA88dFZr2CShlD/FHWPU4Yh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:2b:43:b5:c5:c8:56:7d:bc:7e:6c:0b:96:81:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Apr 17 09:01:07 2026 GMT
Not After : Apr 18 09:01:07 2026 GMT
Subject: CN=e3f13d79d2c78b449b89d99502586f87e8a43804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:6e:91:3c:f8:da:73:2d:0c:bd:6b:42:0e:
eb:13:4a:f7:eb:01:23:34:59:97:68:cd:80:ee:ff:
1e:33:0b:9e:a6:88:e1:3e:0d:43:a2:42:f0:8b:bc:
10:94:8e:5e:4a:22:af:50:20:c0:5f:5b:8d:2b:48:
a8:7a:fa:c9:01:8a:6c:ed:e0:36:bc:00:13:e1:60:
5f:40:eb:37:36:43:41:06:3d:c0:77:36:9e:d6:88:
37:76:fc:4e:e2:de:fd:2b:ab:6a:22:16:71:73:c4:
f0:f9:07:35:40:f0:c8:f2:29:eb:e6:f9:e1:83:22:
25:e7:45:ce:e8:8e:00:3c:38:98:3e:06:bd:34:2d:
3b:20:0f:37:a8:b7:1f:2c:bc:f2:c7:73:35:02:bb:
80:02:f8:d7:b5:de:cb:9b:ae:0a:81:fe:bb:cf:7e:
b1:10:0a:28:3f:dd:f1:43:71:9f:1f:7d:59:91:bb:
d9:32:c0:4f:c5:88:90:cb:3e:ad:74:c5:34:7a:7a:
6c:00:68:c7:79:57:72:54:00:e3:25:db:a8:72:ec:
a6:fc:b1:b2:81:aa:e7:49:ec:d6:a2:82:92:15:a8:
ab:01:47:37:c0:32:ac:d4:ca:31:78:57:0f:68:4a:
52:71:b7:29:b3:e7:83:af:08:f6:c6:2a:b1:9b:82:
95:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F1:3D:79:D2:C7:8B:44:9B:89:D9:95:02:58:6F:87:E8:A4:38:04
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:69:bf:fd:c6:ef:1e:fe:fd:ea:29:b7:83:b3:bb:dc:7b:c6:
c6:4b:df:17:07:eb:66:91:f8:0d:7b:08:e1:61:f6:df:ea:a7:
6d:43:30:34:66:3d:37:f2:60:63:61:84:3d:d4:8e:4f:34:d4:
14:13:d3:64:5b:50:2c:71:72:a5:c3:0e:e3:46:a3:18:ff:9a:
1a:6d:c5:c0:89:9d:c9:25:c0:3d:2b:16:49:60:38:ab:d5:66:
c7:1b:76:1f:1f:e2:80:80:77:c1:2a:d6:02:a4:6c:07:82:4e:
a3:90:0c:ca:58:0a:87:f2:75:64:90:d6:ad:eb:4d:3e:37:56:
88:b2:18:a4:34:ca:3f:ef:33:56:f9:dd:87:a3:15:7d:bc:4c:
e3:00:be:e0:c3:69:03:2d:96:82:eb:aa:7a:42:89:b6:f5:07:
87:46:62:3f:79:30:52:01:3b:f8:6d:1c:53:96:fb:fa:6b:3f:
e2:8c:7b:3d:d3:6a:4b:91:1d:d8:5c:7e:95:87:87:63:2b:c1:
1a:ff:b7:a3:ea:08:45:88:6a:00:e7:5d:87:89:f5:cd:0f:c4:
70:42:1f:6f:53:11:ce:31:c3:2f:f4:1c:5d:36:1b:e0:ea:8b:
59:cb:f2:10:06:77:71:c6:fd:12:6e:77:ee:dd:75:25:87:7d:
a8:bf:c4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:39:02 2026 by rpki-client