Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
File: PqU6yajcRG-34BE7aLOOlwwZ98w.mft (raw, json)
Hash identifier: 9WQtHZIjuwauC5JXB/YUbbNoCjHL1TfCqJe9GgLmhyY=
Subject key identifier: 23:D1:13:79:19:33:DE:DF:C8:5D:67:01:FE:34:F1:70:B8:FB:81:46
Authority key identifier: 3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
Certificate issuer: /CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Certificate serial: 01A10248C533D56DEF6422D6497BE17EED66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
Manifest number: 1A13
Signing time: Sat 03 Oct 2026 15:01:25 +0000
Manifest this update: Sat 03 Oct 2026 15:01:25 +0000
Manifest next update: Sun 04 Oct 2026 15:01:25 +0000
Files and hashes: 1: PqU6yajcRG-34BE7aLOOlwwZ98w.crl (hash: xsJgU8nyG9d76qe7V4YC2irK8yMvFclDxJTkxf9T/0c=)
2: ugGgjfrNMaOwuHgQR5J_mmnCoSw.roa (hash: N5PN03imR/rPD+0R00oOm/EBGbZntmCDYE46dLOAj4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:c5:33:d5:6d:ef:64:22:d6:49:7b:e1:7e:ed:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Validity
Not Before: Oct 3 15:01:25 2026 GMT
Not After : Oct 4 15:01:25 2026 GMT
Subject: CN=23d113791933dedfc85d6701fe34f170b8fb8146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:7a:b3:5c:00:f4:e2:59:da:29:ce:b1:d3:
ac:8c:1f:18:69:d4:17:ef:ac:e4:ba:50:ed:89:fe:
eb:37:05:27:2d:26:18:d7:c6:2c:19:68:21:e3:e1:
a0:6f:a9:ed:ce:4b:e1:da:78:ee:be:33:c8:5c:3c:
a6:a6:8e:3f:45:d0:b3:7b:21:9f:dc:c4:82:cc:b9:
5d:1c:a5:10:74:25:dc:ab:5f:96:bd:e4:71:bf:6e:
42:9b:cc:e4:ff:d6:be:f8:94:58:23:68:2f:c0:71:
b6:19:a6:5c:0e:5e:2e:e0:02:f1:22:20:ea:22:28:
b7:14:4b:b8:f7:d1:6d:f9:3a:a3:ae:0f:56:13:8b:
ff:06:1b:e0:1b:64:89:a4:42:73:b9:fd:54:b3:8b:
09:ee:7b:96:ce:fb:4b:92:61:2d:40:94:7f:78:18:
b0:87:d2:2e:51:f3:88:4c:3c:3c:0b:aa:c0:d4:2e:
01:0c:fd:36:6d:26:fe:5a:cb:65:24:dd:a9:c6:c9:
16:fd:f0:e7:23:ff:bf:31:81:5e:77:6c:0c:f3:fa:
3a:dd:a0:37:4e:1b:08:1c:c2:de:ce:fa:24:5c:78:
42:a1:9f:26:0e:f2:0e:3a:95:c0:0b:26:57:f8:08:
bb:69:19:e1:ba:e8:36:26:32:71:03:e8:b1:06:f3:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D1:13:79:19:33:DE:DF:C8:5D:67:01:FE:34:F1:70:B8:FB:81:46
X509v3 Authority Key Identifier:
keyid:3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0c:58:96:53:d0:91:76:f0:6e:f7:0e:45:0d:1a:a0:92:b5:
71:d4:0f:c0:a0:49:46:07:8a:7f:a4:b8:ca:f3:97:10:1f:76:
e9:d6:72:8f:ad:2d:5f:b2:60:16:ee:1c:6c:53:9d:9e:38:91:
0f:6e:63:66:51:81:7e:a3:67:c1:b6:49:90:9a:0d:09:2c:56:
eb:32:23:24:7d:c6:27:48:67:5c:57:73:9f:ea:83:6f:0c:8f:
ed:a2:56:e9:0d:b7:4f:2a:7b:72:87:5e:35:3b:b7:62:52:9b:
43:1d:68:45:55:f9:37:f1:ea:a4:8b:c5:72:e6:38:9c:a7:3f:
38:8d:e6:3d:18:2c:d5:34:ca:8d:f9:ab:ec:ba:42:6a:10:9d:
79:d8:73:32:a9:e0:b2:05:d0:4e:f9:a5:04:92:db:67:a3:5c:
c7:63:f8:d2:ce:01:e1:f2:4c:a2:9a:9f:7b:a5:84:ec:6b:14:
e2:a7:1b:98:fc:d4:da:8c:95:bb:0e:ff:7b:6e:65:98:b9:98:
f6:be:2d:95:bd:57:d2:48:a7:1c:5e:db:0e:e6:3c:ac:13:5e:
06:e1:3c:3e:12:7b:8f:f0:28:ad:3d:11:0a:7b:47:3a:90:82:
ca:b8:6e:04:41:aa:45:05:25:de:f7:84:f7:61:4d:4f:9a:b6:
42:83:53:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:01:23 2026 by rpki-client