Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier: 1Pn+8CfxPkmFLxKeI15O6SmXS7IJeQAdn4IfpedeUow=
Subject key identifier: E3:4A:4B:9F:35:D4:00:0B:E8:C7:27:F3:9B:FE:06:74:1F:61:58:54
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 019D25BAA4A4CE77125E66CAD18098F98FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number: 17B3
Signing time: Wed 25 Mar 2026 16:01:21 +0000
Manifest this update: Wed 25 Mar 2026 16:01:21 +0000
Manifest next update: Thu 26 Mar 2026 16:01:21 +0000
Files and hashes: 1: 1-UtCMLoYpQTccw0rAaKnjr3aeP4.roa (hash: N8latQNhGiEjvdqVYf+HsgaWPueV4r0S9nawy713xeE=)
2: 1-aNnq3G-3Uph4CDICNHGtMEexzM.roa (hash: COcKotvyQgXvt7JUDGUl9yoEfHAlHiTxt2Sp6dfcn4M=)
3: 5O5myP0lF1xP1jJEoQe9pSgv1NY.roa (hash: 1Ly5GkaJNn9NGiJHBbBhR411FTMTwdqj9zg5X4o1rJs=)
4: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: R95IbcT41zoOEhcC9IV92roFJ1LA8h/nukuRxT+TJQY=)
5: QB5DaA1MIwR5ikAvXA3gM5FxDQY.roa (hash: QVnUg9rir6hPV0SWbkI+uNhJZ6Bpm1g1EMmNwsSmgyI=)
6: Zae_gMNSGLYpjvDka3zKlP-S3hQ.roa (hash: KFAqhbt9W5g+ZaeRsfu703acWAo0iC27yLXUw/eFD2k=)
7: dBqvOag7Vn6SMH5-RRqsLXHXhvA.roa (hash: l+RlXCW7RTqPoNsvx1EDw/ugEa8VniO9ekXCbH/csAk=)
8: eIAvi_fRWFUTaXHfkY48zizgI6I.roa (hash: zlK7AxneUnvHvJcK0AMBNR80xbI0s9cOUQ5f2N58mBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:a4:a4:ce:77:12:5e:66:ca:d1:80:98:f9:8f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Mar 25 16:01:21 2026 GMT
Not After : Mar 26 16:01:21 2026 GMT
Subject: CN=e34a4b9f35d4000be8c727f39bfe06741f615854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:f2:e1:bb:83:b9:7c:20:36:50:3f:c9:8b:
d7:bc:d1:96:36:d1:41:8f:58:91:2c:0a:29:b0:1a:
b9:63:3b:b8:87:5b:40:3f:dd:a3:9c:54:d6:e4:8d:
09:6e:2d:19:92:14:7c:aa:92:5a:d6:20:ef:f0:45:
30:f1:76:f3:29:e2:84:ad:0f:cd:a5:0a:3c:2b:0d:
8b:32:9c:db:ab:61:ce:dc:0a:69:fb:be:29:ea:c2:
83:74:d7:51:af:73:a8:3d:a5:c5:34:68:a7:03:ce:
85:87:f2:bd:a3:69:85:87:52:98:32:9e:22:45:ee:
cc:0e:a3:cb:51:cb:3f:1d:a4:81:54:47:a8:35:d8:
93:14:24:df:22:e5:bf:37:b2:b9:11:f1:ad:05:0b:
67:7e:e0:52:d7:5c:70:bd:0f:16:50:c6:0d:23:a0:
10:86:52:b4:66:40:e2:fb:6b:f1:40:91:26:64:6a:
25:e7:30:21:61:aa:d2:fb:08:f0:76:65:e7:24:0f:
22:dc:ee:1a:c8:17:d6:1a:9f:67:a2:1a:b7:24:b2:
89:4b:b1:62:ae:3e:9e:0f:76:66:b7:db:33:b1:1f:
2a:97:fa:71:81:93:4a:7b:ee:6d:a0:3a:45:74:09:
dd:3e:31:09:1e:b4:38:44:0a:61:47:8c:bc:fc:ba:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4A:4B:9F:35:D4:00:0B:E8:C7:27:F3:9B:FE:06:74:1F:61:58:54
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b8:63:83:cc:29:60:e9:33:60:20:ec:63:ea:56:d9:4a:1e:
8f:3d:36:96:ef:45:3f:c5:0b:27:00:a3:96:4f:21:4e:3c:59:
68:39:42:34:50:a8:81:df:59:13:fc:fc:8d:19:53:c7:15:06:
1b:54:bc:6d:34:4b:5e:ea:ab:06:f4:1d:fa:ed:19:0a:f0:f3:
d4:dc:b7:a3:2d:17:85:e8:2f:72:0e:8c:f9:8f:40:df:aa:46:
d0:2f:10:0e:96:ac:42:8f:50:1f:a5:e8:3b:f0:85:d7:38:db:
a8:1a:72:96:8f:ab:04:1a:e8:af:af:8d:a9:c3:1f:c4:4f:82:
8e:d1:1d:65:29:a8:80:b2:b4:7b:bc:5b:22:87:65:c3:e3:47:
7f:c2:ef:2d:43:c5:ff:ed:86:35:ea:83:78:a2:ca:09:db:95:
93:c2:e2:af:56:da:fd:18:b0:8a:c2:68:9e:75:08:99:cd:23:
f2:9e:2b:4c:d3:4b:3b:02:bf:65:35:df:4f:2a:10:2f:ab:77:
4c:11:f2:bd:0e:45:06:00:7d:2a:d0:6e:92:26:e8:c5:c1:2a:
cd:4b:31:c7:86:f0:e9:46:2e:60:cd:9c:3f:ef:4e:17:2c:06:
66:ae:2a:21:84:9a:1a:e1:42:d6:a9:6d:1c:d8:60:d8:63:87:
2f:24:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:19:01 2026 by rpki-client