Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: KeVZdR1oNzjDVUXP+kJcRxkz00o52GoocAI8Rlc8/rI=
Subject key identifier: 6F:F2:36:31:58:32:66:B1:93:AD:0E:F1:30:C6:E4:1B:6C:3D:00:27
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 019EC2248DE7D01ABC5E4ACC557922AAEA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 18:00:35 +0000
Manifest this update: Sat 13 Jun 2026 18:00:35 +0000
Manifest next update: Sun 14 Jun 2026 18:00:35 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: 1lqyugToSSbKnC7g3iwtRY0/n2OVeXaTRYJoznV8WTc=)
2: S31jWM3wEsReURsulHI7U8Kz478.roa (hash: /Sp5r8Qxi7xeH5fyeueoA88dFZr2CShlD/FHWPU4Yh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:8d:e7:d0:1a:bc:5e:4a:cc:55:79:22:aa:ea:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Jun 13 18:00:35 2026 GMT
Not After : Jun 14 18:00:35 2026 GMT
Subject: CN=6ff23631583266b193ad0ef130c6e41b6c3d0027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:80:71:ce:f7:7b:c6:b4:cc:4e:cf:ac:de:
e0:e5:53:0d:fb:35:a6:31:cc:6e:3e:ee:4c:83:ba:
37:9e:bd:f0:c2:ad:5c:05:ad:15:2c:92:98:be:52:
1e:f0:d4:b2:9a:57:66:7b:e7:b5:90:5b:78:2e:e1:
63:6c:ef:49:19:58:76:e0:af:4f:de:57:ce:6c:00:
b8:fb:e9:6f:42:e1:10:03:54:29:f5:0e:a4:37:84:
31:fa:6b:c7:cb:1c:5f:9e:5b:a9:01:ab:2c:e0:0a:
ff:78:7f:d6:9a:4e:f8:aa:ee:a9:21:77:40:e1:c3:
66:35:f9:7b:3f:f8:32:9f:63:fa:a4:f1:0f:a0:65:
e7:d4:1f:dc:15:ed:7c:64:10:95:33:4e:b4:9f:bd:
02:72:1a:76:56:70:45:e0:25:72:6e:4f:e3:9a:b7:
81:0b:e2:f2:47:b2:a6:00:58:00:d4:19:dc:73:a6:
af:b4:36:79:87:e7:b7:d5:41:6c:7c:ad:47:0c:f2:
ec:40:ba:a3:e2:4a:c6:33:5f:99:c2:1a:e2:37:78:
5f:2c:9c:e9:e6:a1:89:9b:0c:6a:27:e1:19:58:78:
6c:f1:28:a9:79:d7:63:3d:3b:7c:5d:b1:89:cd:2d:
f9:1a:41:d3:b5:cf:64:44:ea:b7:72:5f:9d:0c:a4:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F2:36:31:58:32:66:B1:93:AD:0E:F1:30:C6:E4:1B:6C:3D:00:27
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3c:74:b6:75:c5:7c:5e:c7:85:0e:fd:48:f5:6b:cc:6d:ed:
dc:a6:88:5f:53:87:a6:aa:70:95:de:8b:98:1e:37:5b:9c:be:
cf:58:f5:dd:79:41:10:50:0b:fd:d5:22:1d:e2:43:e2:1d:39:
c2:35:1b:f1:a9:4c:0d:a5:c4:47:37:e3:10:18:cc:58:3d:1d:
bc:59:51:ec:c8:a9:65:67:9c:f9:a0:e6:49:71:fd:4c:a0:39:
a7:12:b9:55:6e:5e:fc:5b:0c:62:a3:48:7f:33:b1:f8:69:b8:
09:15:e3:c0:ac:d7:2c:49:26:99:f5:54:ae:82:33:b9:82:a7:
33:be:fb:03:e7:67:7e:f6:9c:e7:54:cb:9a:e6:4a:0b:8e:30:
f8:e8:e8:cb:c9:e9:c2:38:37:02:4c:3f:a7:0a:d2:c6:4d:0a:
f3:e4:12:24:53:7c:f0:0a:a3:8a:a6:a2:ad:a4:ec:29:a5:3b:
8b:1b:31:39:6a:1c:b0:32:5d:fd:83:48:f8:7b:6e:58:9f:95:
52:d9:eb:11:6d:4c:eb:f3:c4:c7:c3:d9:83:46:40:0e:1b:80:
33:d5:94:c4:f9:75:d9:7a:13:93:93:fe:77:af:a0:51:7c:88:
95:06:bf:aa:20:ab:8e:65:59:b1:47:f6:f2:e6:d4:85:fe:20:
51:31:9b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:35:21 2026 by rpki-client