Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: nczBNVPfwF3DBcYg4Kj1kpRgbgpj97GQif2R6U4ZEPk=
Subject key identifier: 06:50:95:20:76:EC:35:B8:A7:0D:13:F1:0A:AB:CF:43:E1:C5:9A:7E
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 019D27A92862F95ECDAB91E65ADA08790023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 0443
Signing time: Thu 26 Mar 2026 01:01:30 +0000
Manifest this update: Thu 26 Mar 2026 01:01:30 +0000
Manifest next update: Fri 27 Mar 2026 01:01:30 +0000
Files and hashes: 1: JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa (hash: AXBExwmU9H7oRMKiGRczo0VIey6hczqitFMjI0jwK5E=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: gCil9pUNxmx0tS+EW4rmQlFV1BKI4Oo5sHsAxNi+0a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:28:62:f9:5e:cd:ab:91:e6:5a:da:08:79:00:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Mar 26 01:01:30 2026 GMT
Not After : Mar 27 01:01:30 2026 GMT
Subject: CN=0650952076ec35b8a70d13f10aabcf43e1c59a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ff:8f:01:57:76:8e:32:b1:85:c7:fb:39:38:
32:c8:b5:19:41:ca:a0:0d:96:8c:b4:c4:1a:d2:7c:
8f:84:d9:43:86:e8:40:13:54:dc:cf:1a:48:39:35:
47:e8:7f:73:33:4b:9a:7a:e2:29:e0:7a:94:18:70:
c9:50:bb:5f:86:cd:e1:e9:b9:27:fa:23:65:cb:50:
63:aa:14:be:76:ba:3d:ec:18:a4:55:90:7f:24:07:
f7:25:08:6e:49:5f:e3:fe:6b:a9:15:c5:88:8c:48:
08:7e:6b:f0:f4:70:d9:c3:e9:51:ff:b9:ec:bc:78:
13:97:ae:40:72:32:65:17:e4:90:6c:bf:88:d8:a2:
26:3a:4e:c1:00:b9:d5:84:b0:de:59:55:92:c3:de:
3f:c9:8f:ec:8e:10:08:f3:fc:f8:bf:1b:ac:b2:a8:
f4:94:e4:60:ea:3d:29:83:c0:67:47:3d:26:30:b0:
92:09:c1:8e:5a:56:3f:a4:8f:e4:d9:94:44:39:2d:
54:85:f1:87:3e:1a:fb:52:ea:20:dc:4c:4c:4a:85:
d6:08:3a:93:7a:20:2d:30:03:0d:11:eb:d9:04:1b:
92:09:de:f9:ae:61:bf:3d:75:bd:c2:06:aa:45:eb:
b8:e5:54:f3:76:37:4e:e3:fd:ca:f4:ee:d8:f3:ae:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:50:95:20:76:EC:35:B8:A7:0D:13:F1:0A:AB:CF:43:E1:C5:9A:7E
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:62:c1:64:e7:bf:7f:69:9f:e1:7d:53:b5:13:ef:f5:e9:8a:
75:d4:c9:d4:2c:e9:7e:bd:08:4f:f8:cf:76:e2:92:b9:79:da:
bb:66:d1:73:f4:b5:76:37:17:f0:85:4b:89:93:8d:d6:69:ef:
8f:65:07:a4:0e:8d:8a:bc:12:58:97:6b:39:42:7e:e9:0f:7e:
23:2a:a3:2d:35:4d:7b:03:11:c0:54:67:b8:71:61:4b:09:a9:
4f:a2:71:e5:1c:16:6d:06:d5:94:87:df:ee:8f:3b:96:45:c2:
33:81:f3:05:9c:cc:41:74:e5:07:b1:26:66:8a:34:6d:18:da:
38:27:df:ce:6b:4e:09:47:33:74:46:86:a1:71:8a:37:23:33:
a4:31:9f:5e:ca:ce:49:fd:71:94:d7:8f:75:2b:0d:e5:eb:5e:
ed:4f:83:be:cf:f4:da:14:1e:47:46:e5:8e:cf:89:de:c8:a9:
0d:c2:74:8e:ad:c8:5f:83:f1:7e:5e:c3:ea:51:b4:a5:3d:a7:
c2:da:c2:ab:c8:1c:c1:92:62:20:7a:69:65:72:8a:2a:31:5c:
a4:4d:9f:99:3c:77:90:c5:fb:aa:be:e5:27:65:c7:9a:70:4a:
5b:cc:7d:93:ef:cf:0e:6f:19:ce:15:eb:9b:ea:19:ea:16:45:
3f:a5:bb:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqShi+V7Nq5HmWtoIeQAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YThmMzQzNmZkODNlOGFmNjEwZjIxNjgwODk5NmU5MGFj
YWM3NWQwHhcNMjYwMzI2MDEwMTMwWhcNMjYwMzI3MDEwMTMwWjAzMTEwLwYDVQQD
EygwNjUwOTUyMDc2ZWMzNWI4YTcwZDEzZjEwYWFiY2Y0M2UxYzU5YTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP+PAVd2jjKxhcf7OTgyyLUZQcqg
DZaMtMQa0nyPhNlDhuhAE1TczxpIOTVH6H9zM0uaeuIp4HqUGHDJULtfhs3h6bkn
+iNly1BjqhS+dro97BikVZB/JAf3JQhuSV/j/mupFcWIjEgIfmvw9HDZw+lR/7ns
vHgTl65AcjJlF+SQbL+I2KImOk7BALnVhLDeWVWSw94/yY/sjhAI8/z4vxussqj0
lORg6j0pg8BnRz0mMLCSCcGOWlY/pI/k2ZREOS1UhfGHPhr7Uuog3ExMSoXWCDqT
eiAtMAMNEevZBBuSCd75rmG/PXW9wgaqReu45VTzdjdO4/3K9O7Y867I3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZQlSB27DW4pw0T8Qqrz0PhxZp+MB8GA1UdIwQY
MBaAFKao80Nv2D6K9hDyFoCJlukKysddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTIt
YWJlNWM4ZTJiYWQ2LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTItYWJlNWM4ZTJiYWQ2
LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWLBZOe/
f2mf4X1TtRPv9emKddTJ1Czpfr0IT/jPduKSuXnau2bRc/S1djcX8IVLiZON1mnv
j2UHpA6NirwSWJdrOUJ+6Q9+IyqjLTVNewMRwFRnuHFhSwmpT6Jx5RwWbQbVlIff
7o87lkXCM4HzBZzMQXTlB7EmZoo0bRjaOCffzmtOCUczdEaGoXGKNyMzpDGfXsrO
Sf1xlNePdSsN5ete7U+Dvs/02hQeR0bljs+J3sipDcJ0jq3IX4Pxfl7D6lG0pT2n
wtrCq8gcwZJiIHppZXKKKjFcpE2fmTx3kMX7qr7lJ2XHmnBKW8x9k+/PDm8ZzhXr
m+oZ6hZFP6W7QQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:04 2026 by rpki-client