Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: mYFAWouKbeWbscvYg1B/JxiJJaR4SDy462975Hh6+B0=
Subject key identifier: 16:0D:FC:5B:22:23:3C:B5:4D:8A:9E:C2:A0:5A:BD:BC:6C:1D:B5:2E
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 01A0F6E90536563AB7FBAA0BC1BE9B942DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 063C
Signing time: Thu 01 Oct 2026 10:01:01 +0000
Manifest this update: Thu 01 Oct 2026 10:01:01 +0000
Manifest next update: Fri 02 Oct 2026 10:01:01 +0000
Files and hashes: 1: JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa (hash: AXBExwmU9H7oRMKiGRczo0VIey6hczqitFMjI0jwK5E=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: smNG02z1UYA/NVnVw28GxBc0nZ3uliLOyf0HACqu4Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e9:05:36:56:3a:b7:fb:aa:0b:c1:be:9b:94:2d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Oct 1 10:01:01 2026 GMT
Not After : Oct 2 10:01:01 2026 GMT
Subject: CN=160dfc5b22233cb54d8a9ec2a05abdbc6c1db52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:58:12:83:15:d6:2d:cf:fc:35:14:71:68:f4:
a5:d0:5c:5b:30:64:86:22:b6:18:23:09:87:8e:45:
81:b6:08:9f:61:87:aa:9a:c9:aa:8d:39:f2:d7:6d:
24:d3:d1:05:f9:1e:8b:41:10:e7:63:2f:08:d3:fe:
e1:3a:cb:69:ce:4a:d7:0f:e4:43:2a:80:fb:f1:68:
7d:fd:6e:28:38:c4:44:68:ba:8a:4d:ce:e8:d6:6c:
64:e1:a2:62:2f:f9:63:67:1d:aa:be:19:88:70:c1:
bc:a0:ea:de:5f:ca:ed:05:4c:61:d3:d5:cd:54:01:
93:20:01:56:e1:71:8d:3f:f3:2a:f3:16:81:06:6a:
21:ae:68:51:0f:61:86:9d:3a:0e:b5:d3:80:aa:fa:
ba:14:f5:88:ce:fb:bd:2d:e6:41:c4:50:b4:5f:ea:
25:e9:72:ce:38:b5:73:e0:4b:80:1c:bb:95:64:85:
4c:26:3a:1e:4a:55:7b:d2:e7:21:25:d4:a3:a5:a8:
ef:4f:e2:d5:2a:0b:16:8b:57:01:93:b5:b4:8b:55:
04:7c:ee:b9:b3:8d:09:1a:6b:e5:2c:eb:da:c0:ba:
26:39:44:36:1a:79:cc:6b:18:52:6b:11:40:68:ee:
a2:fb:cc:bd:40:0b:21:8d:9a:18:84:ee:26:ba:17:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0D:FC:5B:22:23:3C:B5:4D:8A:9E:C2:A0:5A:BD:BC:6C:1D:B5:2E
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:91:54:47:a8:72:8a:d4:01:0d:3a:f0:50:05:ec:5f:7b:3f:
b0:3f:53:df:47:35:a8:75:2d:af:20:4d:f1:16:1e:a5:cb:05:
24:4c:76:51:1a:e1:37:25:83:30:d7:e9:2f:4f:a1:fb:24:cc:
0c:e7:ba:f6:36:e6:17:71:c6:05:51:e9:78:e5:18:c2:be:50:
1d:d4:70:a4:ed:0e:4e:c3:a1:19:ec:5c:79:56:61:d6:66:5b:
01:e4:56:e8:87:3a:02:f2:f2:1b:cb:6f:55:05:48:30:65:31:
93:e4:f9:b6:15:64:82:fd:aa:e7:5d:51:37:51:ce:e3:a1:24:
e9:40:06:d0:4a:90:30:c5:bd:1b:66:d2:bc:20:4e:08:19:6b:
cc:b1:35:9e:01:38:d3:ae:c5:55:c7:91:2d:f9:1f:b4:78:79:
d2:1b:c5:f1:ea:aa:7d:52:e7:92:cc:c4:ee:30:ba:86:6d:52:
e5:99:c3:5f:f5:86:7f:e6:fb:43:5d:69:14:cd:7d:fc:27:ef:
2e:31:b5:41:0f:9c:20:87:67:eb:fd:55:83:d8:bc:20:d0:df:
4c:6b:e7:7c:ac:f5:66:af:37:de:f3:af:c7:ce:fe:7f:dc:4b:
12:80:cf:e3:5c:f5:d6:96:69:06:17:8d:dd:79:b7:5e:d4:8c:
d8:a5:e2:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD26QU2Vjq3+6oLwb6blC3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YThmMzQzNmZkODNlOGFmNjEwZjIxNjgwODk5NmU5MGFj
YWM3NWQwHhcNMjYxMDAxMTAwMTAxWhcNMjYxMDAyMTAwMTAxWjAzMTEwLwYDVQQD
EygxNjBkZmM1YjIyMjMzY2I1NGQ4YTllYzJhMDVhYmRiYzZjMWRiNTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1gSgxXWLc/8NRRxaPSl0FxbMGSG
IrYYIwmHjkWBtgifYYeqmsmqjTny120k09EF+R6LQRDnYy8I0/7hOstpzkrXD+RD
KoD78Wh9/W4oOMREaLqKTc7o1mxk4aJiL/ljZx2qvhmIcMG8oOreX8rtBUxh09XN
VAGTIAFW4XGNP/Mq8xaBBmohrmhRD2GGnToOtdOAqvq6FPWIzvu9LeZBxFC0X+ol
6XLOOLVz4EuAHLuVZIVMJjoeSlV70uchJdSjpajvT+LVKgsWi1cBk7W0i1UEfO65
s40JGmvlLOvawLomOUQ2GnnMaxhSaxFAaO6i+8y9QAshjZoYhO4muhfpqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYN/FsiIzy1TYqewqBavbxsHbUuMB8GA1UdIwQY
MBaAFKao80Nv2D6K9hDyFoCJlukKysddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTIt
YWJlNWM4ZTJiYWQ2LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTItYWJlNWM4ZTJiYWQ2
LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpFUR6hy
itQBDTrwUAXsX3s/sD9T30c1qHUtryBN8RYepcsFJEx2URrhNyWDMNfpL0+h+yTM
DOe69jbmF3HGBVHpeOUYwr5QHdRwpO0OTsOhGexceVZh1mZbAeRW6Ic6AvLyG8tv
VQVIMGUxk+T5thVkgv2q511RN1HO46Ek6UAG0EqQMMW9G2bSvCBOCBlrzLE1ngE4
067FVceRLfkftHh50hvF8eqqfVLnkszE7jC6hm1S5ZnDX/WGf+b7Q11pFM19/Cfv
LjG1QQ+cIIdn6/1Vg9i8INDfTGvnfKz1Zq833vOvx87+f9xLEoDP41z11pZpBheN
3Xm3XtSM2KXikA==
-----END CERTIFICATE-----
Generated at Thu Oct 1 21:01:44 2026 by rpki-client