Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
File: PqU6yajcRG-34BE7aLOOlwwZ98w.mft (raw, json)
Hash identifier: d3legIAa1cXgY8ry2WKr3YuGBzR31OfGZdePap/9w/s=
Subject key identifier: 16:1D:DB:D9:B7:F1:3B:38:3F:C9:E4:1A:3E:74:B2:2C:19:D4:A7:C1
Authority key identifier: 3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
Certificate issuer: /CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Certificate serial: 01A10625B9E9BE79B1EE0E21B3A593201E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
Manifest number: 1A15
Signing time: Sun 04 Oct 2026 09:01:38 +0000
Manifest this update: Sun 04 Oct 2026 09:01:38 +0000
Manifest next update: Mon 05 Oct 2026 09:01:38 +0000
Files and hashes: 1: PqU6yajcRG-34BE7aLOOlwwZ98w.crl (hash: OAHuotLVXqKOqB+o/vgR1jdoJZtmprIaOP05xDaEYZY=)
2: ugGgjfrNMaOwuHgQR5J_mmnCoSw.roa (hash: N5PN03imR/rPD+0R00oOm/EBGbZntmCDYE46dLOAj4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:b9:e9:be:79:b1:ee:0e:21:b3:a5:93:20:1e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Validity
Not Before: Oct 4 09:01:38 2026 GMT
Not After : Oct 5 09:01:38 2026 GMT
Subject: CN=161ddbd9b7f13b383fc9e41a3e74b22c19d4a7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:58:c4:ac:09:14:fb:0b:cd:20:92:14:8e:
50:bc:ff:24:60:6c:8a:45:ae:cc:f9:0a:9d:9f:98:
59:3f:58:f8:65:7e:0b:9e:a8:13:dc:94:69:01:a8:
f4:fe:91:f6:dc:24:17:82:8c:39:89:d9:03:44:22:
a2:b4:cd:16:ae:bc:c8:f3:2f:97:dd:b6:d3:b9:9e:
c4:7b:55:28:b6:46:81:31:44:3d:d5:b3:e2:04:85:
d2:d8:69:e2:b1:94:94:69:e1:0e:04:9e:f0:75:5e:
10:e8:40:fc:58:d2:9f:15:2f:d8:2a:c6:7a:69:1f:
e5:e6:3c:b4:c1:4b:ed:74:68:d4:e4:49:bf:02:e7:
2f:58:27:ad:a4:ec:56:53:fd:3c:5e:ea:2f:51:f7:
eb:c2:99:79:8d:ff:b0:da:05:12:63:3a:5c:86:67:
3c:db:27:32:03:12:13:ed:91:64:e0:4f:c5:8b:a9:
c4:d7:76:3f:c8:19:d3:a4:2e:20:7f:8b:88:31:55:
da:dd:7f:f9:0b:fe:79:a9:96:83:8f:ee:74:b9:7f:
b6:f3:f2:9e:5a:98:7b:d3:a3:e1:11:d4:80:10:83:
0a:47:b8:2d:97:7d:f7:9c:be:44:ef:cd:4d:cf:56:
cc:6d:ef:7c:37:a3:ae:6a:c5:02:c6:73:23:b0:f4:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1D:DB:D9:B7:F1:3B:38:3F:C9:E4:1A:3E:74:B2:2C:19:D4:A7:C1
X509v3 Authority Key Identifier:
keyid:3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b5:16:56:7c:c9:5e:97:da:85:0e:de:70:67:43:0d:6e:93:
8a:49:18:18:c9:cc:99:e9:a0:14:82:8a:5b:65:48:4e:30:ff:
33:10:19:b2:a0:04:0c:b5:5c:49:b4:f8:e7:68:32:cb:70:fe:
f2:d5:07:34:dc:c5:fc:30:b7:17:86:9f:25:e0:7f:04:06:57:
d2:77:ae:33:c6:d8:92:fd:78:97:12:95:80:f5:21:51:97:45:
f2:45:72:0d:d3:ac:bd:87:df:c2:c8:df:17:b4:c9:5b:94:54:
6c:c4:70:76:8e:a8:c9:30:b8:7f:e9:2c:ca:30:eb:9f:32:6f:
14:39:3c:76:e0:b1:71:e6:0f:5d:e9:b6:9d:11:9b:88:b5:1b:
3b:ea:6a:56:6b:f1:ba:b0:da:68:b4:c5:94:3b:3c:ab:76:15:
14:57:3f:0b:93:44:c1:73:c0:9d:7e:61:12:a8:c4:9e:35:cf:
e9:03:94:f5:75:97:64:77:7a:04:cf:45:d6:e7:d9:10:24:83:
9f:5f:9e:e4:d1:79:da:4d:79:63:da:5f:ff:cd:53:ab:20:c2:
52:b8:4d:d6:17:30:5c:95:83:85:0d:e7:dd:77:8d:d0:50:43:
b9:56:26:fb:9a:be:e9:ff:f9:43:68:89:8a:e0:e0:c1:59:1b:
78:39:9f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:21:57 2026 by rpki-client