Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
File: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft (raw, json)
Hash identifier: KsnWHZ0S66dajKG49WrMr5Qp5tBqN0VHWcjIFaF3ZXo=
Subject key identifier: FF:7F:A9:2C:36:55:A8:FE:10:36:F3:82:59:8D:1D:5F:87:AA:52:15
Authority key identifier: 3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
Certificate issuer: /CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Certificate serial: 01A1DFF171E24F5676E5E65CC1D7BFB0A67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
Manifest number: 1A8A
Signing time: Sun 15 Nov 2026 16:01:44 +0000
Manifest this update: Sun 15 Nov 2026 16:01:44 +0000
Manifest next update: Mon 16 Nov 2026 16:01:44 +0000
Files and hashes: 1: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl (hash: 38ENIG6DW5QeXBqnp4kRQ416ryBl/fFgXGdR/j0VmxA=)
2: TNsH8ORuG4M2WxCLcjLbXlHGM-4.roa (hash: 9o4sji++/DGEugsQB9IJvE/BvkiRj/BVLAkPHsTMQs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:71:e2:4f:56:76:e5:e6:5c:c1:d7:bf:b0:a6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Validity
Not Before: Nov 15 16:01:44 2026 GMT
Not After : Nov 16 16:01:44 2026 GMT
Subject: CN=ff7fa92c3655a8fe1036f382598d1d5f87aa5215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:69:ac:47:bd:f8:aa:da:0c:d5:a1:d4:ad:
6e:69:65:1c:52:8a:0f:9b:c6:ec:99:9b:aa:e9:91:
11:12:fb:52:69:a9:a4:2f:2c:b7:0d:f6:e6:25:3e:
f1:d0:ae:8f:f8:37:e7:d7:bd:d3:1f:8e:35:72:c4:
5f:99:da:73:14:d4:43:ff:b8:e2:52:e2:8d:f9:9c:
20:9a:8c:ec:ca:82:f0:27:9a:5e:c3:ee:73:cf:ec:
7b:70:99:dc:b3:4a:1f:a5:59:85:58:5f:82:56:06:
0c:7c:1f:28:50:ec:f5:75:70:37:7e:31:2e:b3:d1:
cf:1f:e6:97:34:bb:0a:bd:46:ca:0d:0d:fd:f9:fa:
48:2e:83:72:c6:75:0a:a6:4e:ce:49:b5:41:f2:0f:
45:28:c1:22:c7:28:ca:f1:23:75:ae:22:c0:fe:08:
a6:6b:fd:7a:cc:6c:03:04:d1:d2:d5:e5:1d:38:c1:
bd:b1:42:82:be:23:81:3c:b5:bf:27:7e:8d:96:a2:
8b:fc:64:5e:94:db:5a:e6:36:d7:8b:d3:e6:cc:6c:
a0:65:39:24:32:31:74:7e:89:ff:2a:6d:09:92:ea:
b1:b9:59:2a:82:8e:22:3b:7f:39:b0:8f:cd:1c:03:
8c:f0:22:42:8f:cc:12:d6:74:80:30:36:83:90:11:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7F:A9:2C:36:55:A8:FE:10:36:F3:82:59:8D:1D:5F:87:AA:52:15
X509v3 Authority Key Identifier:
keyid:3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:5b:8c:d3:98:5f:b4:13:f5:4e:b5:83:11:09:29:27:f0:9c:
7b:4f:93:fd:cc:3d:56:26:d6:12:aa:db:75:80:07:7f:58:a1:
93:20:da:92:d5:04:55:26:bc:be:5b:94:82:31:13:8f:e8:12:
44:de:7d:a9:3a:30:52:8e:09:60:62:bc:69:24:88:57:a3:19:
4a:bb:19:88:d3:79:63:ab:a6:60:ac:47:5a:aa:cd:da:38:34:
04:a0:f6:b6:44:3e:c5:d0:bd:d5:ca:e0:48:21:fe:80:e5:3f:
22:1a:dd:26:33:39:2d:aa:a7:80:56:89:ef:00:12:ba:43:91:
0e:43:20:57:6a:a9:38:7c:48:65:6b:8d:99:42:7a:8d:11:fd:
ec:fc:1f:fb:22:d1:f3:fe:20:0f:db:55:fb:3e:8f:0a:d6:14:
7f:86:a1:7d:df:a4:d4:20:44:ce:47:2d:32:39:37:0c:0c:75:
a1:4f:12:b6:66:06:32:c3:9d:b4:20:75:50:92:77:0d:a8:3c:
8c:56:97:f4:7a:52:b1:88:73:3b:d9:f6:14:1f:28:48:25:9c:
dc:66:2d:98:61:c9:04:94:5d:cc:59:09:47:ab:c5:a1:f7:02:
96:1c:b7:6a:56:04:18:9f:ce:f6:54:f4:41:93:9e:d5:99:91:
c8:90:76:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:23:19 2026 by rpki-client