Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: xRzDoea40OqNhDomSR6bBkehdlu35MztiOTCc48a8mQ=
Subject key identifier: F3:6B:66:51:8A:8B:6C:F1:74:9C:CF:6C:A3:29:9F:62:EE:8B:D5:5B
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 019E1EDA4F4A1366787E9BE6971E68DFC73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 04C3
Signing time: Wed 13 May 2026 01:01:23 +0000
Manifest this update: Wed 13 May 2026 01:01:23 +0000
Manifest next update: Thu 14 May 2026 01:01:23 +0000
Files and hashes: 1: JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa (hash: AXBExwmU9H7oRMKiGRczo0VIey6hczqitFMjI0jwK5E=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: 273VNrP0EZ5+a129RvK6gUeLR7THGH5+T+g0aB+iFpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:4f:4a:13:66:78:7e:9b:e6:97:1e:68:df:c7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: May 13 01:01:23 2026 GMT
Not After : May 14 01:01:23 2026 GMT
Subject: CN=f36b66518a8b6cf1749ccf6ca3299f62ee8bd55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6d:74:40:ab:e7:45:20:45:da:17:f7:cd:19:
af:ed:d0:86:32:4d:a0:ee:e5:36:91:de:41:2b:6f:
eb:fa:33:ee:d4:87:54:e4:26:d4:e5:30:be:ce:07:
f1:19:74:6a:ee:14:15:4d:d4:58:43:0c:ef:0f:cf:
8c:98:b0:44:f3:94:8b:f1:93:18:e3:45:8f:18:85:
5f:42:25:d2:64:48:27:8f:90:7c:df:93:85:78:1c:
e8:82:e5:ab:4b:6b:7d:bb:a5:49:bc:2a:27:a8:6b:
f3:d4:2e:73:3d:25:72:86:20:dc:2d:c0:1f:74:1a:
c4:22:5d:22:6d:93:84:7d:53:50:7c:a5:b1:23:1f:
bb:5c:9f:83:a7:0e:fd:a4:aa:e0:19:6f:e8:ad:05:
ef:d9:a6:5f:4a:ae:ed:e9:c5:74:65:19:7b:d5:72:
b1:a4:fe:93:56:36:c9:20:6c:1e:36:78:20:ea:18:
a0:2f:ea:2a:b1:80:45:af:d5:5c:08:38:bc:24:8c:
e0:bf:ea:ed:40:d2:2e:c7:d4:29:8f:9d:72:5b:1f:
2d:e7:01:d6:87:0f:02:a4:30:65:88:4a:39:c5:9a:
e8:80:08:81:25:3d:29:ca:2f:63:3b:b8:ef:87:c5:
07:91:ff:39:57:d6:9c:ab:24:70:29:31:39:71:e1:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6B:66:51:8A:8B:6C:F1:74:9C:CF:6C:A3:29:9F:62:EE:8B:D5:5B
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:10:4e:7d:93:41:2f:8b:5e:c6:63:9c:d1:aa:32:9a:41:0d:
ac:62:52:7c:33:97:75:0d:dd:66:d9:fd:a0:84:68:cf:22:79:
f9:fb:6e:a8:a9:73:f2:1b:36:98:40:27:69:78:36:50:46:83:
d2:2f:c9:5c:a9:21:1e:02:37:9f:8f:ba:f8:88:74:58:a7:2c:
05:54:de:b4:e5:28:fb:df:a7:1a:72:69:56:ed:ab:ca:35:a6:
99:60:ba:c3:5b:d0:b6:dc:af:50:46:69:75:a0:94:d9:bf:66:
93:8f:85:19:f5:c1:1c:f8:c1:02:cd:3c:fa:8f:52:f5:b5:cb:
0d:cb:b9:26:ee:ab:bc:b2:39:9e:28:22:df:a1:f7:e8:ca:e8:
e9:7d:dd:c5:0e:42:97:11:47:56:58:7e:0e:cb:24:44:70:78:
6e:6f:17:d1:7f:d2:7d:07:93:f3:8e:65:d5:b0:d2:aa:4e:34:
1e:c5:d1:40:8d:9f:71:2b:7d:b6:ce:c1:34:8e:5c:a2:3e:b0:
48:51:6f:0f:d5:69:1a:73:ef:d6:ea:70:0a:29:54:38:33:ac:
3a:73:17:4e:57:07:e0:aa:07:d5:07:c8:19:93:c7:1e:a6:27:
e9:37:1b:36:3b:c1:04:8b:91:23:4f:e7:a8:70:6f:0d:f9:ad:
de:f4:73:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:32:43 2026 by rpki-client