Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: Y2VQdsHX4o6GRD+TM7y/2RNTyqV57I32QJwWeH3ZIv4=
Subject key identifier: 0D:5C:AE:15:A2:0B:DE:30:A1:4A:FD:36:C9:CF:B9:42:64:37:7B:76
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 019FADBFE11A7CAC4F1E4747A4A00A8AB930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 12:01:01 +0000
Manifest this update: Wed 29 Jul 2026 12:01:01 +0000
Manifest next update: Thu 30 Jul 2026 12:01:01 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: TMwrdN4wCnOxcUx6zN8jArg2ZoCxODo0pzmrHtHiGwg=)
2: S31jWM3wEsReURsulHI7U8Kz478.roa (hash: /Sp5r8Qxi7xeH5fyeueoA88dFZr2CShlD/FHWPU4Yh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:e1:1a:7c:ac:4f:1e:47:47:a4:a0:0a:8a:b9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Jul 29 12:01:01 2026 GMT
Not After : Jul 30 12:01:01 2026 GMT
Subject: CN=0d5cae15a20bde30a14afd36c9cfb94264377b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:8b:62:0c:64:0b:6c:91:e3:1f:7d:27:b1:
bf:6a:0e:5c:75:9c:41:8f:5b:2c:3b:88:e6:cc:57:
78:6b:95:b6:43:2f:b4:68:b1:44:45:d2:04:d2:57:
b2:15:2b:34:13:a6:43:98:34:af:c0:95:8a:c3:10:
1b:d5:18:5c:9b:22:37:06:22:ff:2f:79:79:ad:37:
07:dc:3c:4b:cc:84:7c:58:f0:5e:b9:a1:2b:1d:76:
0a:5b:32:8d:b6:0e:aa:75:86:6d:f0:51:ab:a5:fd:
bd:8e:b4:5a:7d:08:49:84:77:6a:68:e2:f7:74:0e:
4a:1c:ef:11:8c:f8:58:a5:43:d1:d7:f8:f9:12:22:
0e:be:13:92:be:d9:bd:2b:f5:05:ed:09:09:42:76:
43:8a:55:94:88:16:67:df:2d:10:8f:48:cb:a6:55:
85:53:56:be:11:30:8f:f5:aa:c8:7f:13:06:24:10:
07:72:c1:86:71:91:a7:7c:a8:27:20:c6:64:a6:0c:
cc:43:2d:57:1c:41:5d:dd:ee:39:e0:aa:b3:44:5a:
4c:8c:56:91:e3:c6:2a:e4:02:d7:ec:15:f7:97:96:
06:3d:4e:8a:30:02:b2:47:f0:e2:66:a8:80:c5:a6:
01:89:8a:13:16:14:52:2b:62:8f:d3:b8:64:d1:82:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5C:AE:15:A2:0B:DE:30:A1:4A:FD:36:C9:CF:B9:42:64:37:7B:76
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9a:d4:66:41:34:b5:bc:b2:83:bb:6e:27:74:89:1e:98:f5:
55:91:da:21:01:b1:84:c7:b9:35:e7:e8:78:26:1e:17:12:34:
72:30:bf:8b:fe:19:63:89:68:0f:b2:95:ac:39:31:d9:be:c6:
a1:06:25:21:90:04:29:cd:7f:1e:d0:a6:e8:83:81:c5:78:e8:
48:67:f4:8d:0d:52:5b:6a:5c:fc:c1:12:81:48:de:a8:03:3a:
d5:e8:de:4e:76:f6:1a:07:68:68:93:c4:69:68:5c:31:1c:37:
2c:3b:f6:21:b8:22:6d:62:14:25:c8:ed:b9:16:6f:e1:98:f9:
2e:80:35:e1:38:e5:8b:35:55:f9:45:63:6b:c9:32:ef:c4:e8:
71:d5:b3:2b:35:fa:b1:06:f1:a2:02:3b:34:70:9c:48:53:92:
23:81:08:8f:ca:fb:0d:f1:9b:23:01:d2:bb:da:6d:f0:0a:28:
97:e0:fe:cf:9b:4c:b3:5e:81:87:bb:9c:cd:0f:4c:eb:a9:35:
fb:28:c8:12:46:d9:d1:19:c3:02:db:40:bd:22:fc:67:f1:f9:
dc:24:3e:85:e7:60:72:80:1c:75:31:56:69:07:6f:0d:f0:be:
6d:15:b8:51:c9:2a:85:99:50:55:ba:2b:41:17:44:9f:fe:6d:
36:af:3c:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tv+EafKxPHkdHpKAKirkwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOTQyNGIzYzhlNzJmNzQ2YTU5ZWIxOTk0NTVhYTM2NDZh
M2E0NTcwHhcNMjYwNzI5MTIwMTAxWhcNMjYwNzMwMTIwMTAxWjAzMTEwLwYDVQQD
EygwZDVjYWUxNWEyMGJkZTMwYTE0YWZkMzZjOWNmYjk0MjY0Mzc3Yjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1yLYgxkC2yR4x99J7G/ag5cdZxB
j1ssO4jmzFd4a5W2Qy+0aLFERdIE0leyFSs0E6ZDmDSvwJWKwxAb1RhcmyI3BiL/
L3l5rTcH3DxLzIR8WPBeuaErHXYKWzKNtg6qdYZt8FGrpf29jrRafQhJhHdqaOL3
dA5KHO8RjPhYpUPR1/j5EiIOvhOSvtm9K/UF7QkJQnZDilWUiBZn3y0Qj0jLplWF
U1a+ETCP9arIfxMGJBAHcsGGcZGnfKgnIMZkpgzMQy1XHEFd3e454KqzRFpMjFaR
48Yq5ALX7BX3l5YGPU6KMAKyR/DiZqiAxaYBiYoTFhRSK2KP07hk0YIsMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1crhWiC94woUr9NsnPuUJkN3t2MB8GA1UdIwQY
MBaAFD2UJLPI5y90alnrGZRVqjZGo6RXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEt
NmE4MDMzZGNiZTFjLzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEtNmE4MDMzZGNiZTFj
LzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJrUZkE0
tbyyg7tuJ3SJHpj1VZHaIQGxhMe5NefoeCYeFxI0cjC/i/4ZY4loD7KVrDkx2b7G
oQYlIZAEKc1/HtCm6IOBxXjoSGf0jQ1SW2pc/MESgUjeqAM61ejeTnb2GgdoaJPE
aWhcMRw3LDv2IbgibWIUJcjtuRZv4Zj5LoA14TjlizVV+UVja8ky78TocdWzKzX6
sQbxogI7NHCcSFOSI4EIj8r7DfGbIwHSu9pt8Aool+D+z5tMs16Bh7uczQ9M66k1
+yjIEkbZ0RnDAttAvSL8Z/H53CQ+hedgcoAcdTFWaQdvDfC+bRW4UckqhZlQVbor
QRdEn/5tNq88Qw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:14:55 2026 by rpki-client