Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json)
Hash identifier: 0Jwk2CFd+RNgyho0oV0LFf65SflYDk8Y3B/FiB0h3PI=
Subject key identifier: 0D:6B:A0:66:AC:AD:D1:D2:FE:AC:8C:0A:C7:BF:D3:9C:83:AF:82:FD
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 019D29CDF6E4677016D94F9DF7F6493954E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
Manifest number: 11C5
Signing time: Thu 26 Mar 2026 11:00:57 +0000
Manifest this update: Thu 26 Mar 2026 11:00:57 +0000
Manifest next update: Fri 27 Mar 2026 11:00:57 +0000
Files and hashes: 1: gIBhWboHIlbVLsOrG6_KrzVsgsg.roa (hash: JloPm0symVV0m3PFdsgfuUWNtGXtbv/UJhvDlmOgv8I=)
2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: J5o9JducqCkfcrVHZFl9/lff12l1PGEDJwgFXHlkdpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:f6:e4:67:70:16:d9:4f:9d:f7:f6:49:39:54:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: Mar 26 11:00:57 2026 GMT
Not After : Mar 27 11:00:57 2026 GMT
Subject: CN=0d6ba066acadd1d2feac8c0ac7bfd39c83af82fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:64:2a:39:f7:a2:16:d1:f4:28:75:57:64:
5b:b4:68:7d:71:95:69:35:01:8a:32:1b:7b:a3:38:
80:75:14:4a:26:4b:b9:fa:a2:c9:ce:65:64:3c:5b:
c8:09:60:33:14:a8:e7:1f:2b:bd:9d:af:e5:20:d7:
86:4b:43:38:e5:ed:d9:dc:7d:58:3f:e5:33:50:08:
e2:d4:f2:f8:62:a9:8a:04:99:7c:a0:31:92:0b:e5:
89:13:08:1d:65:36:a5:52:e4:b5:8c:4c:d1:97:eb:
54:3a:48:eb:cc:07:8a:5b:fd:64:09:44:f0:40:bb:
8d:57:a9:69:c2:68:1e:3b:0c:69:48:d9:5f:96:3b:
cb:e2:7a:35:f3:76:d6:f3:58:63:2c:71:74:f4:54:
46:db:cc:ff:6f:71:5c:3d:32:f6:89:ef:ec:d1:55:
db:cb:e9:75:64:7a:fc:b9:e2:d8:96:77:53:3a:bc:
a7:fa:36:84:bb:75:10:6d:c8:31:35:33:93:cb:8a:
c7:ff:55:bf:77:e6:28:5c:ce:18:3f:88:ca:62:44:
29:9c:71:54:79:28:0c:f2:45:91:32:b3:1d:c0:98:
62:e4:7c:46:5a:3f:f2:19:bb:16:14:c7:40:2f:57:
09:cc:d2:8f:2a:3a:3b:a2:7d:5b:82:fd:c8:2f:fa:
e0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6B:A0:66:AC:AD:D1:D2:FE:AC:8C:0A:C7:BF:D3:9C:83:AF:82:FD
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:13:08:43:46:51:ee:a8:84:10:3d:1d:3a:31:3f:8f:e8:75:
cc:8c:de:1e:61:df:d4:da:19:68:67:2c:eb:87:a0:84:28:e6:
ad:18:14:6c:ea:d3:ed:1a:76:f9:c9:c7:4f:8c:e3:66:b8:b8:
e6:0a:3f:49:72:39:8d:b4:85:14:68:3c:58:cb:11:c0:8a:a8:
d9:fa:b7:1c:4c:09:ee:b7:bb:34:84:43:80:72:47:b5:f7:d8:
50:ed:7f:4a:eb:1f:50:72:2a:e6:12:8c:d0:a3:b6:d3:d3:0f:
a8:76:da:33:b0:10:b9:ac:58:cf:53:c0:cd:30:e5:ce:e8:83:
09:25:a6:55:d4:ef:3a:8f:a7:d4:0e:3e:aa:a0:71:01:c6:bd:
0f:de:47:01:10:85:ae:96:25:6c:8c:f8:eb:26:f5:57:02:13:
dd:65:c9:15:14:cc:77:20:1a:ed:52:ba:14:ad:ae:d2:d6:27:
47:02:16:91:db:fb:ec:82:80:28:01:b6:32:8c:22:85:9a:01:
37:00:c0:3f:3c:24:4a:11:51:5a:da:d5:06:1e:bf:93:d0:b4:
40:1e:0d:25:03:23:40:44:55:10:ce:50:28:f6:2b:af:0a:80:
af:bc:ac:11:2d:76:65:76:f6:40:ee:c0:34:28:22:fb:d6:be:
79:4b:42:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:34:52 2026 by rpki-client