Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json)
Hash identifier: tHzdGbxF/L95FJ6NDE9X0EaI0Uyn5V08+2J+u3vBFfs=
Subject key identifier: 35:4E:B5:46:20:BB:B0:8A:88:4A:E3:A7:58:04:FC:D0:BE:1E:89:AB
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 019E20FF7B02805457460394A70018A6FF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
Manifest number: 1245
Signing time: Wed 13 May 2026 11:01:14 +0000
Manifest this update: Wed 13 May 2026 11:01:14 +0000
Manifest next update: Thu 14 May 2026 11:01:14 +0000
Files and hashes: 1: gIBhWboHIlbVLsOrG6_KrzVsgsg.roa (hash: JloPm0symVV0m3PFdsgfuUWNtGXtbv/UJhvDlmOgv8I=)
2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: EAfnfOkC17VZxmbfBvP48rz4OGgLVESzRCuvHJpyCFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:7b:02:80:54:57:46:03:94:a7:00:18:a6:ff:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: May 13 11:01:14 2026 GMT
Not After : May 14 11:01:14 2026 GMT
Subject: CN=354eb54620bbb08a884ae3a75804fcd0be1e89ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:ba:81:83:0f:91:13:c9:bc:17:c6:ca:4d:
28:01:33:67:d2:f8:c7:69:98:5b:68:6f:48:53:fd:
4b:11:6f:cd:c1:dc:34:72:a2:85:87:92:5f:ec:49:
90:c7:6b:bf:1d:cb:65:0f:dd:28:2c:4a:99:1b:20:
5e:8f:42:7e:d7:49:95:ee:ba:1a:63:5e:74:e5:86:
78:8b:e2:6a:fc:b3:5d:e6:13:fd:6a:e1:33:69:0d:
d5:02:15:b9:c5:cc:ab:d9:c6:57:d8:b2:86:1b:1d:
8e:52:df:3a:96:14:a8:64:bf:63:c6:6c:9a:00:93:
09:0b:57:8d:36:fc:79:55:df:58:88:d4:69:2c:84:
70:ef:95:d2:f5:4b:d8:9e:33:c1:55:bf:95:9d:d4:
e0:ed:94:55:5f:02:31:50:b3:23:aa:19:e4:87:db:
ea:fa:ba:6a:ed:d4:bc:2f:73:32:9b:dd:ec:bd:f9:
3b:01:04:84:77:6f:bc:39:fd:7c:48:9e:c1:cc:f3:
a2:a5:6c:0b:dc:cd:09:8b:b3:dc:12:8a:13:17:65:
d1:da:e9:b4:3c:cd:ad:40:05:36:fb:eb:f5:2f:3c:
97:e8:d7:df:46:06:7e:50:ce:55:7c:00:f3:3d:78:
a4:0e:ac:f3:a3:98:2f:2a:85:96:68:7a:40:19:9d:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4E:B5:46:20:BB:B0:8A:88:4A:E3:A7:58:04:FC:D0:BE:1E:89:AB
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d2:db:01:ca:62:2f:5d:92:b5:af:c9:dd:ec:8a:50:e0:f8:
62:0c:46:eb:20:fc:11:fd:1f:23:dd:66:a6:aa:19:fa:f8:66:
da:8d:ce:01:e9:49:ea:04:26:39:f9:cd:82:bf:63:d7:35:f4:
2a:69:c4:4e:3d:05:17:30:83:07:89:22:d6:d2:eb:35:eb:46:
ea:db:25:3e:6b:fb:c6:b5:b0:ef:2a:42:42:f3:e7:83:19:f8:
7e:8a:e4:dd:81:8f:c7:e0:7a:d0:c2:f9:b6:78:2a:44:61:f5:
64:97:8d:83:bf:6a:fb:ab:89:88:db:fe:cf:7f:8b:d1:a2:97:
d9:cb:91:89:f8:3b:58:be:ee:95:49:e7:cd:c9:e7:ed:25:6e:
8a:73:7b:f8:54:65:9a:e9:55:1f:0f:c6:f9:93:27:bf:98:8e:
6f:40:33:42:60:2d:6a:69:f2:d3:fe:64:bb:07:5c:83:8b:cc:
d4:bc:29:5f:cd:ec:5e:30:55:68:ca:fb:db:2c:cf:b8:7c:9c:
89:a6:1c:42:8f:99:00:ed:21:0f:54:90:f1:86:9e:f1:d2:05:
95:de:c7:a0:11:98:72:5e:6e:36:b6:e0:5e:32:5a:ec:17:6a:
f5:97:bf:94:de:8a:4e:41:59:f2:a7:87:ee:49:23:a7:b5:83:
04:1f:b0:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/3sCgFRXRgOUpwAYpv8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MDllODY1NzZjMDY1ZTE0YmZiZWU4ZjY1MmFiNmMyNzlj
Y2RlMTIwHhcNMjYwNTEzMTEwMTE0WhcNMjYwNTE0MTEwMTE0WjAzMTEwLwYDVQQD
EygzNTRlYjU0NjIwYmJiMDhhODg0YWUzYTc1ODA0ZmNkMGJlMWU4OWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaG6gYMPkRPJvBfGyk0oATNn0vjH
aZhbaG9IU/1LEW/Nwdw0cqKFh5Jf7EmQx2u/HctlD90oLEqZGyBej0J+10mV7roa
Y1505YZ4i+Jq/LNd5hP9auEzaQ3VAhW5xcyr2cZX2LKGGx2OUt86lhSoZL9jxmya
AJMJC1eNNvx5Vd9YiNRpLIRw75XS9UvYnjPBVb+VndTg7ZRVXwIxULMjqhnkh9vq
+rpq7dS8L3Mym93svfk7AQSEd2+8Of18SJ7BzPOipWwL3M0Ji7PcEooTF2XR2um0
PM2tQAU2++v1LzyX6NffRgZ+UM5VfADzPXikDqzzo5gvKoWWaHpAGZ3ytQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVOtUYgu7CKiErjp1gE/NC+HomrMB8GA1UdIwQY
MBaAFKUJ6GV2wGXhS/vuj2UqtsJ5zN4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODct
YTBmNTc0MmIxYjA0LzEvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODctYTBmNTc0MmIxYjA0
LzEvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNLbAcpi
L12Sta/J3eyKUOD4YgxG6yD8Ef0fI91mpqoZ+vhm2o3OAelJ6gQmOfnNgr9j1zX0
KmnETj0FFzCDB4ki1tLrNetG6tslPmv7xrWw7ypCQvPngxn4fork3YGPx+B60ML5
tngqRGH1ZJeNg79q+6uJiNv+z3+L0aKX2cuRifg7WL7ulUnnzcnn7SVuinN7+FRl
mulVHw/G+ZMnv5iOb0AzQmAtamny0/5kuwdcg4vM1LwpX83sXjBVaMr72yzPuHyc
iaYcQo+ZAO0hD1SQ8Yae8dIFld7HoBGYcl5uNrbgXjJa7Bdq9Ze/lN6KTkFZ8qeH
7kkjp7WDBB+w0w==
-----END CERTIFICATE-----
Generated at Wed May 13 18:59:12 2026 by rpki-client