Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier: 0cQiCTHV9e69xbZwCuw0mLOBzA9wkhLb9BnLPV/f8pw=
Subject key identifier: FA:57:67:9C:5D:13:BB:E9:94:24:5F:F3:15:44:3C:C0:A4:D5:34:F2
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 01A0D1923C0DFAB32EDF0550BA28BC947FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number: 199B
Signing time: Thu 24 Sep 2026 04:00:16 +0000
Manifest this update: Thu 24 Sep 2026 04:00:16 +0000
Manifest next update: Fri 25 Sep 2026 04:00:16 +0000
Files and hashes: 1: 1-UtCMLoYpQTccw0rAaKnjr3aeP4.roa (hash: N8latQNhGiEjvdqVYf+HsgaWPueV4r0S9nawy713xeE=)
2: 1-aNnq3G-3Uph4CDICNHGtMEexzM.roa (hash: COcKotvyQgXvt7JUDGUl9yoEfHAlHiTxt2Sp6dfcn4M=)
3: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: ra7JT0Z/ixBJAL8Qvf+xwsj1XDLmIvDiITN4kfwIxiU=)
4: Zae_gMNSGLYpjvDka3zKlP-S3hQ.roa (hash: KFAqhbt9W5g+ZaeRsfu703acWAo0iC27yLXUw/eFD2k=)
5: dBqvOag7Vn6SMH5-RRqsLXHXhvA.roa (hash: l+RlXCW7RTqPoNsvx1EDw/ugEa8VniO9ekXCbH/csAk=)
6: eIAvi_fRWFUTaXHfkY48zizgI6I.roa (hash: zlK7AxneUnvHvJcK0AMBNR80xbI0s9cOUQ5f2N58mBk=)
7: qKaLblB6qI7Bd1B3Rur2rBZuS4k.roa (hash: 2Pg6qLHfXJRZqX0rlw8NIomHNhgYfbLO7yWS70r3WDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:3c:0d:fa:b3:2e:df:05:50:ba:28:bc:94:7f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Sep 24 04:00:16 2026 GMT
Not After : Sep 25 04:00:16 2026 GMT
Subject: CN=fa57679c5d13bbe994245ff315443cc0a4d534f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:71:03:ab:73:b7:01:3e:ee:a4:c6:23:64:
4e:b6:3e:52:3f:61:ac:7b:7f:5e:aa:78:7b:6e:ee:
a4:36:ae:d6:90:b5:d9:01:f3:f3:7a:93:0f:9a:04:
ed:dc:2e:43:65:ca:a5:37:9a:7f:d7:b8:c1:5f:1e:
59:e9:eb:f5:b1:ac:2f:7f:db:89:4d:da:78:f0:69:
6b:be:f2:80:83:08:ca:40:b3:8c:e2:d4:00:95:db:
87:9b:df:81:f9:4f:cf:83:de:87:96:6c:c8:64:8b:
b8:fd:ab:f3:fd:31:91:b5:a0:a0:8d:6d:72:78:c9:
d6:69:71:39:37:3a:38:f8:78:a7:c3:1a:8f:68:18:
23:80:6c:79:82:63:30:0f:b4:45:c1:51:8c:33:60:
01:b4:3d:e3:73:27:bf:88:58:50:12:98:dd:cf:94:
00:40:18:fe:61:f1:73:a2:b9:25:12:e7:1d:62:b1:
66:ab:79:3f:c9:b5:1c:7d:29:f8:c9:c9:03:f3:be:
ae:31:eb:27:34:db:d9:c7:6e:3f:64:a6:f4:e3:38:
dc:99:e2:bc:c3:ec:cf:2c:6d:5a:50:77:03:9d:91:
64:f2:3b:95:60:2b:2b:52:a5:d3:65:d1:ba:2e:49:
2a:91:d4:25:ca:06:05:22:41:f6:2d:04:2f:1f:22:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:57:67:9C:5D:13:BB:E9:94:24:5F:F3:15:44:3C:C0:A4:D5:34:F2
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e5:d8:ca:2e:1c:4e:af:e2:f2:8c:a9:64:88:cd:75:3c:56:
e9:9f:9a:c3:9c:ab:05:0b:6e:7d:12:26:a3:47:7b:aa:25:25:
f2:7f:c6:7a:2e:3d:6b:28:7e:b0:85:c2:a4:05:a8:8d:61:b7:
11:ba:36:b0:70:10:cb:72:36:3e:48:28:14:bb:8a:21:7a:b9:
06:39:14:c6:f1:66:8b:6e:19:23:28:09:10:d3:a0:6e:a7:dc:
f5:15:a5:9d:45:ec:59:21:52:8f:ce:a6:d6:fd:2b:b7:7a:6a:
e8:52:37:82:e4:63:fe:e4:69:ef:0f:5a:ac:23:f6:fa:1d:07:
3b:fa:f1:95:b0:78:3f:9f:21:8f:76:47:68:ba:aa:84:0d:b9:
69:0d:89:bb:2a:86:cf:ad:4e:98:b8:02:a3:49:e2:91:92:e7:
94:f5:f2:ea:97:cf:e9:eb:c4:e5:dd:13:7d:1d:44:d8:49:db:
5d:52:33:15:fa:d7:b2:6d:28:94:cf:0f:70:96:e0:ac:8e:e2:
b9:2d:59:d8:98:8e:7f:97:74:61:9e:3f:69:45:23:f0:cf:1f:
5b:f9:af:54:ff:8e:6e:cc:9e:80:fd:a1:20:8b:5c:a1:75:a4:
e9:b2:f4:8f:32:cf:ba:46:98:c7:b0:c6:b5:5f:79:92:a7:2c:
6a:64:29:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRkjwN+rMu3wVQuii8lH/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMDQ4MzUzODczNzQ1M2UyZjU3ZmZiNTc0OTljMzkyMmU4
MzYzNmQwHhcNMjYwOTI0MDQwMDE2WhcNMjYwOTI1MDQwMDE2WjAzMTEwLwYDVQQD
EyhmYTU3Njc5YzVkMTNiYmU5OTQyNDVmZjMxNTQ0M2NjMGE0ZDUzNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUpxA6tztwE+7qTGI2ROtj5SP2Gs
e39eqnh7bu6kNq7WkLXZAfPzepMPmgTt3C5DZcqlN5p/17jBXx5Z6ev1sawvf9uJ
Tdp48GlrvvKAgwjKQLOM4tQAlduHm9+B+U/Pg96HlmzIZIu4/avz/TGRtaCgjW1y
eMnWaXE5Nzo4+HinwxqPaBgjgGx5gmMwD7RFwVGMM2ABtD3jcye/iFhQEpjdz5QA
QBj+YfFzorklEucdYrFmq3k/ybUcfSn4yckD876uMesnNNvZx24/ZKb04zjcmeK8
w+zPLG1aUHcDnZFk8juVYCsrUqXTZdG6LkkqkdQlygYFIkH2LQQvHyLBnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpXZ5xdE7vplCRf8xVEPMCk1TTyMB8GA1UdIwQY
MBaAFD0Eg1OHN0U+L1f/tXSZw5Iug2NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEt
NjVhNDZjOGU0MWU5LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEtNjVhNDZjOGU0MWU5
LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+XYyi4c
Tq/i8oypZIjNdTxW6Z+aw5yrBQtufRImo0d7qiUl8n/Gei49ayh+sIXCpAWojWG3
Ebo2sHAQy3I2PkgoFLuKIXq5BjkUxvFmi24ZIygJENOgbqfc9RWlnUXsWSFSj86m
1v0rt3pq6FI3guRj/uRp7w9arCP2+h0HO/rxlbB4P58hj3ZHaLqqhA25aQ2JuyqG
z61OmLgCo0nikZLnlPXy6pfP6evE5d0TfR1E2EnbXVIzFfrXsm0olM8PcJbgrI7i
uS1Z2JiOf5d0YZ4/aUUj8M8fW/mvVP+ObsyegP2hIItcoXWk6bL0jzLPukaYx7DG
tV95kqcsamQpmA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:55:22 2026 by rpki-client