Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: 3EkD/HMFtCCltb83b4KAJ40GyQSwtxLoV3UCAC2+Vg4=
Subject key identifier: 2D:AE:E4:48:FA:6C:29:FC:3B:63:B6:C8:B4:13:55:88:EA:EA:10:CF
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 01A0DA5F9F89754B3F8D02205B956E947AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 0E9A
Signing time: Fri 25 Sep 2026 21:01:34 +0000
Manifest this update: Fri 25 Sep 2026 21:01:34 +0000
Manifest next update: Sat 26 Sep 2026 21:01:34 +0000
Files and hashes: 1: 1-m2fud3k5EzmiZRoBhOtqfySzmI.roa (hash: HOvFww4yxsynh17q+d5C89mxcrHn4M7iS7z+Y3frs9U=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: 1MsTdobRNUofBAAm2FJyCqb4vDJl53Cxh8D2v70mO1E=)
3: e89SBhBBaL18qejVEfgQtSemlB0.roa (hash: Gc/uVJGxURscBi9WA9foLpSF+kUOEix1bWq345u58KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:9f:89:75:4b:3f:8d:02:20:5b:95:6e:94:7a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Sep 25 21:01:34 2026 GMT
Not After : Sep 26 21:01:34 2026 GMT
Subject: CN=2daee448fa6c29fc3b63b6c8b4135588eaea10cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:94:d2:58:81:0c:85:c7:3a:19:25:3f:62:
62:68:1b:34:80:96:15:b8:b4:bc:f1:2b:83:50:3c:
ae:6c:ca:91:d8:f2:55:07:62:d0:7c:5a:a5:f8:95:
25:bd:0d:6e:a8:57:e6:7e:f2:30:3d:8e:f4:f1:18:
85:9a:69:bc:ba:a4:65:d4:2b:a3:c3:71:ac:9b:26:
ec:6f:8e:a2:c5:86:b4:05:c6:ea:ff:e0:6b:f2:3b:
80:c4:cb:ef:db:e9:de:18:fb:2f:c0:e0:0a:a6:57:
a7:4c:b7:73:81:61:39:85:d2:67:d0:5a:8f:cb:04:
2d:c0:ed:e4:3a:05:88:8e:0a:d0:f9:57:76:ba:80:
af:53:79:fc:aa:ca:fa:89:74:63:bf:dd:b4:44:5f:
14:e1:cf:5e:52:25:3e:3d:bb:13:22:90:b7:2a:3f:
4e:ce:0d:a5:43:eb:a5:fe:6e:97:14:f7:94:96:a8:
17:7c:d4:40:7d:d6:db:85:4c:ac:a6:f3:ba:d4:fa:
34:8f:08:a8:73:c2:9d:24:c1:90:91:0f:a6:01:50:
3f:c0:88:ed:92:72:dd:82:a1:f1:94:9b:63:ec:ab:
54:6a:0f:13:79:e4:82:fb:cd:b0:06:2b:20:4c:69:
55:0b:3b:7c:b5:df:82:02:92:b6:18:77:e6:51:ac:
d8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AE:E4:48:FA:6C:29:FC:3B:63:B6:C8:B4:13:55:88:EA:EA:10:CF
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dc:06:b5:15:82:59:b2:5d:d7:0c:a5:48:58:b4:93:da:18:
af:73:19:27:af:38:22:b4:6f:99:35:f5:f4:93:a6:6b:3f:08:
44:63:e8:4c:51:8b:cf:bb:5a:e3:d5:68:5a:1f:c6:7e:ea:3c:
84:c7:65:b0:81:2c:e9:50:ed:90:4c:7e:dc:27:ce:53:89:5f:
86:92:b6:70:45:02:61:01:b1:2f:cb:d1:b1:9b:15:00:e2:fe:
b9:75:56:9b:50:84:1a:45:ef:77:e3:e9:31:ed:d0:d8:61:e9:
58:ba:58:d4:55:d5:d7:e1:f6:a8:be:76:4a:64:d5:06:56:aa:
b1:78:4c:e1:c2:89:b6:3f:dd:aa:83:dd:11:d9:36:3a:f4:26:
e1:da:b6:13:ba:22:62:f7:2a:3a:86:4c:14:14:f5:95:b3:46:
f4:95:66:1c:a2:25:e4:81:9d:35:95:e8:ac:21:48:04:02:4e:
82:e0:fe:7e:1e:79:24:76:a9:50:e7:f6:07:e2:d5:d0:f1:0e:
ed:6e:52:18:a0:2c:52:e5:1b:f5:82:6c:aa:93:73:19:90:82:
23:98:95:43:6f:43:bf:a9:bd:43:0e:4f:77:5a:f6:39:20:18:
95:fd:c8:0d:9f:04:2f:e0:90:8b:32:45:77:c4:40:0f:2d:00:
c8:24:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:39:02 2026 by rpki-client