Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
File: pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft (raw, json)
Hash identifier: ZWQGk5+bsSM5EpzSkVmvJeifptFviYcgoDi+N8O6Lpc=
Subject key identifier: A2:B0:FF:79:79:DC:FB:0E:5D:59:89:8A:BE:7D:0C:21:0A:75:84:B4
Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
Certificate issuer: /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Certificate serial: 01A0D872AC3F776F236488A9840D4407D35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
Manifest number: 049A
Signing time: Fri 25 Sep 2026 12:03:08 +0000
Manifest this update: Fri 25 Sep 2026 12:03:08 +0000
Manifest next update: Sat 26 Sep 2026 12:03:08 +0000
Files and hashes: 1: 6phx-w5UIxjdX_HJEdkzEKdfgmU.roa (hash: SGPInug9Hk9CwPLCuVMV05j3spVvBaapQvXlXlYZ4gY=)
2: pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl (hash: payDuNTN5XHRkuLFw4hxi/F0y21kcT677geGUKJl1jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:ac:3f:77:6f:23:64:88:a9:84:0d:44:07:d3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Validity
Not Before: Sep 25 12:03:08 2026 GMT
Not After : Sep 26 12:03:08 2026 GMT
Subject: CN=a2b0ff7979dcfb0e5d59898abe7d0c210a7584b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:65:6c:0d:60:60:2b:9f:9b:aa:1c:d2:2c:
ed:7a:74:08:08:2e:ca:0e:4a:01:56:2e:bb:7d:da:
09:b9:d3:a1:13:5b:00:a3:5f:88:71:d9:d1:6b:4d:
38:e9:48:d5:b1:97:45:31:90:95:da:a8:e6:ee:8c:
58:6f:04:c7:44:d2:71:7f:d4:88:96:69:be:45:ec:
70:60:70:e5:0f:03:ae:5f:18:e3:66:42:05:e3:a2:
0c:df:c3:08:b7:48:48:83:2e:dd:81:a4:00:22:59:
64:c1:f0:c4:c9:95:7b:82:9a:02:a3:cf:80:ca:c2:
9b:fb:b4:41:03:e6:64:3d:5c:79:00:ac:f9:cf:db:
d4:8f:cb:4e:42:ee:b3:25:68:37:7e:0c:1e:35:42:
28:03:96:c5:6f:54:e1:ef:a2:bd:3a:f6:db:29:bb:
30:5d:46:19:39:61:2c:c4:0a:ef:72:ce:f6:80:d9:
16:c0:f6:05:be:f8:e9:15:fb:06:5c:de:4f:14:c8:
92:ba:97:3c:de:bf:34:98:36:0a:64:5f:8e:2c:e8:
5b:99:37:84:4d:46:1d:a0:99:a7:bf:85:9b:fd:28:
08:c1:6d:fe:63:8b:77:7b:82:73:00:85:e4:e4:8c:
32:b1:3e:4c:55:1a:6c:48:ec:d0:62:c9:56:e9:a0:
1f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B0:FF:79:79:DC:FB:0E:5D:59:89:8A:BE:7D:0C:21:0A:75:84:B4
X509v3 Authority Key Identifier:
keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d6:26:ca:55:9c:5d:a7:cc:5f:eb:00:0f:86:d7:13:ab:49:
5d:e7:06:29:fc:2b:74:66:93:9f:52:27:38:9f:c4:05:5e:a2:
20:0e:61:be:a7:b7:3f:43:32:61:95:03:0f:41:3e:38:50:14:
5b:75:12:63:84:d4:76:f6:bd:88:f2:e4:af:6d:d5:b5:3c:1a:
82:76:b7:7d:2a:2d:82:3e:7c:c2:86:49:2b:c8:c0:00:a8:24:
0b:31:b1:6b:f3:88:49:03:4b:86:17:b9:6a:28:83:d2:bf:5c:
45:63:26:39:1a:08:e3:ad:19:04:c7:83:26:53:47:f6:33:07:
dd:50:38:d3:4b:58:96:c6:ed:8e:75:ff:a4:c9:d0:da:da:16:
1b:49:24:77:ef:d3:f2:98:03:a2:c9:f8:27:d5:2a:48:64:57:
77:b7:cf:b4:63:d2:2e:c1:de:8b:85:d6:01:02:1a:9a:01:b3:
e1:7a:29:88:32:7a:26:2f:de:95:be:1c:2c:8a:00:6a:e6:a7:
77:e5:ab:95:d6:d0:36:77:e3:9f:70:11:4a:dd:07:e1:25:e8:
86:62:d3:a9:80:71:33:41:e3:34:cd:33:25:63:a5:cc:90:24:
ec:0f:26:8a:e7:40:dc:b8:56:75:77:62:93:43:03:5d:97:9d:
b6:e9:2c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:36:43 2026 by rpki-client