Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: tapQqX78WQAZU5oCgCNmZjfeByZmvIL9EGHP2OLqzak=
Subject key identifier: 5D:D0:92:07:3B:7A:1B:E9:2E:AD:E5:10:CF:DC:64:99:00:78:82:01
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 01A13D810E5CF2217D9D127CB799567D317C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 03:00:30 +0000
Manifest this update: Thu 15 Oct 2026 03:00:30 +0000
Manifest next update: Fri 16 Oct 2026 03:00:30 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: eVoBVUTh6HJFf0o/EHDP9yFaSP+HImNOYuunfFxJYSI=)
2: S31jWM3wEsReURsulHI7U8Kz478.roa (hash: /Sp5r8Qxi7xeH5fyeueoA88dFZr2CShlD/FHWPU4Yh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:0e:5c:f2:21:7d:9d:12:7c:b7:99:56:7d:31:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Oct 15 03:00:30 2026 GMT
Not After : Oct 16 03:00:30 2026 GMT
Subject: CN=5dd092073b7a1be92eade510cfdc649900788201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:09:7c:c7:62:31:13:0d:0c:0d:58:57:52:
2a:fd:6c:0f:46:75:b7:fd:fd:07:b0:91:a3:57:f0:
ce:f8:58:be:25:d6:26:22:19:37:b4:49:8b:1f:a9:
bf:83:85:2c:b3:fb:b0:93:fb:c8:e2:41:0e:32:73:
b8:46:cd:8d:53:08:b6:c4:b3:a3:2d:23:9d:5c:54:
24:cc:de:1b:13:b1:6d:37:69:0d:0b:bf:41:83:8e:
9b:13:63:d1:a6:1c:5c:5b:77:49:dc:5b:1d:ba:34:
eb:82:c5:7c:6a:f2:67:0b:39:5e:1b:b3:1c:f9:d9:
a3:2f:a3:31:37:45:ee:69:82:be:06:1c:8a:d6:52:
89:b9:0a:5f:5a:4b:77:b1:49:8d:32:e7:11:1f:a5:
d3:b6:dd:12:1f:e2:65:b6:88:8e:6d:f4:c8:b4:97:
c2:fb:10:5a:0f:9f:fa:e4:7b:da:a4:c1:5d:3f:15:
dd:99:cf:48:46:21:f0:56:9a:75:da:0f:1b:41:b2:
86:98:1a:f9:9d:ae:9e:5b:c6:ed:ba:8f:84:fe:2b:
6f:66:d3:81:7b:20:aa:39:56:13:3b:4b:21:a9:28:
4b:9c:8e:fd:b4:87:61:58:38:a8:58:ef:bd:24:fc:
d4:9a:34:f5:8c:60:63:49:df:3e:7a:13:b4:55:60:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D0:92:07:3B:7A:1B:E9:2E:AD:E5:10:CF:DC:64:99:00:78:82:01
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d8:e3:78:a6:e4:05:26:a8:8f:d0:18:4e:3c:b5:c6:5f:01:
1a:8a:d6:c1:cb:2b:13:06:9d:99:06:72:35:c9:d6:b7:86:f3:
df:78:0a:5a:6f:76:8b:6f:7c:82:e8:d4:b7:91:39:c0:f7:39:
c8:80:44:f9:0e:09:46:ac:e6:76:3e:6e:64:77:8d:f2:07:12:
83:02:8d:b9:19:d9:ee:c8:31:07:d0:99:c1:34:4c:ef:ea:f6:
c5:4f:e5:f8:83:1e:e3:17:27:8d:3e:04:fd:b6:d6:d8:c4:eb:
c9:7d:5c:a5:f1:95:ed:6a:46:ae:dd:cd:2b:d4:c2:a3:ce:08:
6e:44:61:a4:ba:f8:0c:df:2a:c7:4e:db:01:15:28:4d:b7:94:
65:fc:c6:59:b7:58:9c:46:d6:15:39:23:48:4c:d7:b8:17:dc:
dc:d1:5b:c2:4b:7a:75:e9:c3:32:50:fb:49:9b:11:0c:e3:47:
e9:bd:54:42:29:1f:b6:76:2a:f2:b5:0e:63:97:4a:b9:50:79:
5f:90:af:f9:14:a2:0b:37:1f:0b:c4:0a:48:ee:c2:95:37:23:
8c:96:79:13:9e:58:d6:f3:14:1d:78:78:b9:7c:5a:c0:e5:21:
24:51:a4:c1:3b:78:23:4d:bb:6b:5b:21:a0:70:f8:ba:43:d0:
41:2d:b6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 07:05:14 2026 by rpki-client