Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: 0JUfctWDO9NSgAmz0vuaKeuwN4Wbi+phy0JzJ2Psq74=
Subject key identifier: 4E:ED:B7:8F:0D:0E:00:73:8B:22:10:C0:CE:22:B2:3B:51:7D:C2:0F
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 019E1F47DD7042FC3D7AE5AF0087F4131381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 0D30
Signing time: Wed 13 May 2026 03:01:03 +0000
Manifest this update: Wed 13 May 2026 03:01:03 +0000
Manifest next update: Thu 14 May 2026 03:01:03 +0000
Files and hashes: 1: 1-m2fud3k5EzmiZRoBhOtqfySzmI.roa (hash: HOvFww4yxsynh17q+d5C89mxcrHn4M7iS7z+Y3frs9U=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: 27c+OLVQiI8rDAomFcDFWrmdB3TadjhnmCYYv2LxGnQ=)
3: e89SBhBBaL18qejVEfgQtSemlB0.roa (hash: Gc/uVJGxURscBi9WA9foLpSF+kUOEix1bWq345u58KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:dd:70:42:fc:3d:7a:e5:af:00:87:f4:13:13:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: May 13 03:01:03 2026 GMT
Not After : May 14 03:01:03 2026 GMT
Subject: CN=4eedb78f0d0e00738b2210c0ce22b23b517dc20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2b:42:7c:67:9b:c0:e1:74:64:72:d1:0a:2e:
f2:72:42:86:d6:8f:f7:7e:a0:69:d1:e7:6d:79:05:
ae:25:89:a0:cb:8a:39:e7:24:4d:ea:66:61:bf:26:
49:2b:c9:d4:24:46:53:47:81:7a:c0:a6:99:a7:b2:
f4:f3:f1:78:87:80:e6:73:20:d1:f1:47:89:35:a8:
f0:2d:99:0d:d2:16:cc:7f:7b:f1:d8:62:c3:cf:10:
ae:ab:e4:5e:21:43:f7:ac:8c:d3:93:75:d4:85:c8:
58:26:3a:d8:24:45:c4:b0:fa:5a:60:69:dc:96:14:
3c:36:43:a2:0b:56:6b:06:90:a0:e9:b9:cf:30:95:
5f:b9:3c:af:4e:83:7d:7a:71:3a:b3:75:ff:a0:68:
7d:69:c1:17:7e:c5:01:a3:19:d4:e6:d4:38:a9:8f:
ea:05:c5:50:84:3d:53:47:52:34:3e:aa:55:a3:da:
11:00:63:2e:82:4b:6e:8e:c4:3b:12:30:cd:e3:53:
be:0c:26:ff:af:9b:4a:14:ca:c9:dd:19:f4:d8:9a:
eb:ef:4b:f5:47:1d:54:35:96:a7:a6:df:d6:0d:88:
83:cf:34:94:5b:6c:34:83:dd:93:39:36:ac:14:d2:
b5:82:36:2d:c3:64:a4:d5:07:4e:54:e2:fd:16:3a:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:ED:B7:8F:0D:0E:00:73:8B:22:10:C0:CE:22:B2:3B:51:7D:C2:0F
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:05:64:8d:dd:df:e0:80:ed:52:8f:55:20:93:b8:a2:a3:df:
23:dc:73:81:2d:a9:d0:de:ae:fd:22:ff:1b:23:3d:17:d7:c2:
52:79:ab:8c:32:4b:26:99:f6:f7:b8:18:95:4c:92:58:e0:e4:
de:37:77:26:27:9a:e0:73:cb:f4:f2:56:7d:48:40:03:46:08:
4a:05:c7:ac:fa:cc:b5:01:6e:ab:8e:cd:9c:70:01:33:a0:e8:
04:13:ff:4d:70:61:7f:dd:91:7b:74:79:79:e0:a9:88:80:28:
5b:1b:30:34:67:a0:89:4f:50:89:c1:d7:30:af:60:0b:b1:88:
a0:33:29:dc:0b:25:c2:08:98:df:f5:97:a4:d5:a9:86:9e:c7:
11:c7:97:3e:98:26:85:7f:3c:cb:0b:cd:7b:65:14:ff:77:8d:
62:9b:74:65:49:74:c3:5d:bb:c7:bb:a4:9c:4c:ef:97:16:39:
a0:17:00:ce:b6:a4:e7:5d:23:22:67:40:8f:d6:4b:2c:86:95:
41:7d:ea:6c:50:a4:dc:6a:a0:67:3f:47:e7:64:38:6c:ad:e3:
85:c6:ed:bc:60:2b:fb:4e:9a:c0:75:f9:4b:1c:98:d8:54:2b:
22:3d:41:51:31:21:b2:f9:6c:3f:22:eb:76:b6:1b:c1:f5:0a:
93:82:26:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:15 2026 by rpki-client