Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json)
Hash identifier: GB2AjsWNcr+FmbYSFfJnRiE6uwMTvuispLfot3/H00E=
Subject key identifier: 19:A6:37:38:B1:58:6E:1A:F3:83:B3:1B:B5:BC:55:EA:27:64:53:B0
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 01A134ECC9F4A3A303003EF2CE0A6013E015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
Manifest number: 13DD
Signing time: Tue 13 Oct 2026 11:01:35 +0000
Manifest this update: Tue 13 Oct 2026 11:01:35 +0000
Manifest next update: Wed 14 Oct 2026 11:01:35 +0000
Files and hashes: 1: gIBhWboHIlbVLsOrG6_KrzVsgsg.roa (hash: JloPm0symVV0m3PFdsgfuUWNtGXtbv/UJhvDlmOgv8I=)
2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: 1Olfw8fd2svwUxyDJotq/4bqlSfiaKRxLEZI9nxBZNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:c9:f4:a3:a3:03:00:3e:f2:ce:0a:60:13:e0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: Oct 13 11:01:35 2026 GMT
Not After : Oct 14 11:01:35 2026 GMT
Subject: CN=19a63738b1586e1af383b31bb5bc55ea276453b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:07:85:51:b9:b2:7a:0b:73:7a:cb:d0:8f:
0a:e5:a3:6c:f5:2e:df:f1:b1:93:43:1f:4d:88:a0:
5f:f2:23:ae:ea:30:63:e6:b5:ad:94:a6:79:5c:bd:
56:e1:50:97:d4:bb:70:4b:e9:aa:1b:00:af:26:51:
35:da:f4:31:4c:ad:c3:7d:db:ad:0a:ed:22:f7:4a:
9e:30:4e:8c:ce:c3:b1:f6:93:fb:4c:13:90:69:93:
f6:6c:32:33:86:a1:01:32:e9:66:d0:e9:d0:fd:ca:
2b:7f:b3:b1:d9:75:57:93:5c:59:df:b2:88:af:c9:
f1:21:99:4c:ba:be:9b:ae:9e:42:ed:51:2a:1d:52:
4f:b7:3b:d1:09:a8:0e:d0:ce:59:7d:12:0a:d5:64:
de:b3:99:b6:e9:fe:21:4c:75:a6:a2:e9:f1:23:09:
28:9d:15:b1:fa:65:06:da:48:44:32:e4:4b:64:e9:
3d:7b:03:05:7d:29:d3:31:c2:2b:3d:84:ff:b8:ec:
f0:4e:d9:a3:74:31:ac:30:99:26:c4:d7:c9:0f:8f:
88:92:ee:bb:33:50:34:c4:db:80:98:1b:a4:89:75:
60:3c:ee:70:3b:8b:e0:ef:b5:e7:08:ae:44:59:ca:
3d:51:94:60:11:0f:6e:05:d7:f4:68:64:51:64:8d:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A6:37:38:B1:58:6E:1A:F3:83:B3:1B:B5:BC:55:EA:27:64:53:B0
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2d:34:4a:c0:16:99:df:6d:6e:7d:11:60:26:19:52:37:71:
8f:23:6f:1c:07:e8:36:7c:5c:75:4f:9d:5f:af:58:90:b4:84:
7c:c2:d8:76:d3:eb:3e:8c:b2:0e:a3:81:84:32:91:66:15:c7:
1c:2c:66:a1:6a:16:8d:fa:0b:10:c2:a1:77:f9:44:e0:54:db:
d6:fc:b8:1d:b6:67:15:b5:b9:cd:78:0f:16:b3:0d:02:c5:c6:
0d:08:0a:0d:00:48:c1:5e:a1:fb:70:77:7d:e0:88:4b:b0:83:
80:b9:c1:e6:04:2d:72:78:24:0c:8b:e6:de:6b:1c:6c:39:bd:
95:0a:67:46:0f:ae:4a:dc:a6:5c:03:07:4f:4f:f5:ec:8f:3b:
65:c2:e1:ad:50:f9:a1:ac:75:2b:be:78:89:2c:5b:bf:8a:96:
e2:22:0c:b4:bc:3e:11:28:fc:70:72:07:54:8f:87:54:85:9f:
b2:2e:71:8e:22:ed:02:38:35:08:1c:89:51:93:fa:77:d3:08:
17:f9:08:a7:39:2c:58:54:fc:b7:72:69:5e:55:c7:51:43:5a:
6c:dc:9b:f4:8d:6a:e7:71:e8:ae:cb:c7:94:89:0d:a5:dc:2d:
73:33:05:56:eb:c5:96:93:ac:ab:67:2e:48:05:f0:a7:88:3f:
09:ff:84:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE07Mn0o6MDAD7yzgpgE+AVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MDllODY1NzZjMDY1ZTE0YmZiZWU4ZjY1MmFiNmMyNzlj
Y2RlMTIwHhcNMjYxMDEzMTEwMTM1WhcNMjYxMDE0MTEwMTM1WjAzMTEwLwYDVQQD
EygxOWE2MzczOGIxNTg2ZTFhZjM4M2IzMWJiNWJjNTVlYTI3NjQ1M2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cMHhVG5snoLc3rL0I8K5aNs9S7f
8bGTQx9NiKBf8iOu6jBj5rWtlKZ5XL1W4VCX1LtwS+mqGwCvJlE12vQxTK3Dfdut
Cu0i90qeME6MzsOx9pP7TBOQaZP2bDIzhqEBMulm0OnQ/corf7Ox2XVXk1xZ37KI
r8nxIZlMur6brp5C7VEqHVJPtzvRCagO0M5ZfRIK1WTes5m26f4hTHWmounxIwko
nRWx+mUG2khEMuRLZOk9ewMFfSnTMcIrPYT/uOzwTtmjdDGsMJkmxNfJD4+Iku67
M1A0xNuAmBukiXVgPO5wO4vg77XnCK5EWco9UZRgEQ9uBdf0aGRRZI2fdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmmNzixWG4a84OzG7W8VeonZFOwMB8GA1UdIwQY
MBaAFKUJ6GV2wGXhS/vuj2UqtsJ5zN4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODct
YTBmNTc0MmIxYjA0LzEvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODctYTBmNTc0MmIxYjA0
LzEvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXi00SsAW
md9tbn0RYCYZUjdxjyNvHAfoNnxcdU+dX69YkLSEfMLYdtPrPoyyDqOBhDKRZhXH
HCxmoWoWjfoLEMKhd/lE4FTb1vy4HbZnFbW5zXgPFrMNAsXGDQgKDQBIwV6h+3B3
feCIS7CDgLnB5gQtcngkDIvm3mscbDm9lQpnRg+uStymXAMHT0/17I87ZcLhrVD5
oax1K754iSxbv4qW4iIMtLw+ESj8cHIHVI+HVIWfsi5xjiLtAjg1CByJUZP6d9MI
F/kIpzksWFT8t3JpXlXHUUNabNyb9I1q53HorsvHlIkNpdwtczMFVuvFlpOsq2cu
SAXwp4g/Cf+E2A==
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:49:20 2026 by rpki-client