Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json)
Hash identifier: XsphGxnIXfx6eix3DqTLtSJmdQV4n4cGsNeKbGuqwFk=
Subject key identifier: 8B:BD:09:0B:0F:C9:4B:B3:24:CA:4F:50:27:68:E0:E2:91:8F:84:0E
Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Certificate serial: 019D26CD7E0027D3D43E2C56791BE5E1806B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
Manifest number: 0DF9
Signing time: Wed 25 Mar 2026 21:01:34 +0000
Manifest this update: Wed 25 Mar 2026 21:01:34 +0000
Manifest next update: Thu 26 Mar 2026 21:01:34 +0000
Files and hashes: 1: SV2RkPOuByS_r28T-8Z9LI6s33I.roa (hash: mWVfN5OIaVZHfY5wD08vtg6Nd4vEgRrrt33wmevn5GE=)
2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: /E2152VCLY1bf/1v9MULZqR/W+WiO7Y5oxSYslpV5dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7e:00:27:d3:d4:3e:2c:56:79:1b:e5:e1:80:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Validity
Not Before: Mar 25 21:01:34 2026 GMT
Not After : Mar 26 21:01:34 2026 GMT
Subject: CN=8bbd090b0fc94bb324ca4f502768e0e2918f840e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8d:d7:58:bd:2e:8f:63:04:27:94:28:e1:07:
02:c7:0b:d1:42:d9:a2:69:9b:2c:89:46:25:c2:be:
2d:43:07:41:b6:2e:42:88:9c:4d:a8:ae:6c:5e:8c:
72:32:66:0d:d5:60:69:fd:ed:11:9b:00:01:2a:10:
d4:4d:57:61:62:e4:14:9c:ac:a7:15:40:2a:de:2d:
33:91:29:ca:51:f4:40:74:d6:c2:8f:86:55:f9:be:
09:a5:ff:d5:cc:1b:7f:eb:e0:6f:57:53:a5:fc:69:
fd:1a:43:75:5e:49:52:b7:94:57:05:be:26:6f:4f:
ad:0c:53:76:ca:c9:22:63:b6:cd:cf:dc:b8:56:14:
87:89:38:b5:78:97:0e:79:a2:29:fe:4a:27:c6:ed:
20:5f:7b:ae:5e:fb:c7:84:03:8e:9a:08:2b:73:e5:
d4:a8:0f:09:91:9a:28:b6:64:86:a0:e4:fd:27:19:
5e:63:ef:bf:ea:bb:c2:31:32:e0:38:46:99:ed:10:
c9:11:6c:47:30:81:17:86:14:3d:0f:0a:52:bc:b1:
f8:07:3c:61:f9:69:50:e4:a7:2d:a1:f7:ea:5e:b9:
c0:42:86:7e:05:d5:89:9b:32:2a:ee:15:e9:2e:06:
0e:1c:4b:f6:1d:3d:95:fd:8e:42:bf:c7:14:e0:ce:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BD:09:0B:0F:C9:4B:B3:24:CA:4F:50:27:68:E0:E2:91:8F:84:0E
X509v3 Authority Key Identifier:
keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:47:4b:29:35:e2:74:3c:2b:f0:71:7f:70:9d:d3:b2:00:18:
e1:2e:93:b3:02:bb:a4:0b:0e:e3:33:27:36:79:1f:9d:ae:bf:
d3:33:cd:a3:0a:4d:cc:e3:63:43:72:8d:d0:e6:a8:69:57:91:
00:36:6d:17:ea:d3:f4:5f:b7:61:57:0d:29:cd:bc:f3:e8:12:
21:70:23:d2:d2:02:6e:fd:c3:45:0c:ff:b2:94:b7:b3:5c:6e:
33:01:23:88:1f:dd:6a:7f:c5:5b:e9:0a:63:3b:5a:b8:1d:4b:
a2:7f:0b:9b:ec:d8:81:56:89:53:c7:6d:10:e9:ae:a1:31:f8:
db:7c:96:10:1d:1e:e9:b8:87:af:d5:b6:90:32:8b:3f:ea:a5:
8f:4a:25:1d:0f:ae:7b:5b:dd:ad:0c:b0:11:df:ff:3a:41:5b:
e6:50:a0:ec:a5:bd:bc:d4:f4:90:22:c1:2a:61:16:f4:63:c5:
6b:43:7e:50:be:81:46:e3:3e:32:d1:cd:e6:20:0c:0b:c5:28:
fe:d4:1b:24:84:92:d4:d6:0b:57:3d:56:3a:1d:16:c2:0a:93:
0c:7c:02:fa:8c:f9:35:54:96:48:51:0c:46:0d:51:79:e6:ba:
de:95:11:b1:d1:a8:0d:42:eb:df:8d:88:c8:12:3d:10:d1:f4:
72:d2:d5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:43 2026 by rpki-client