Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: A6XgyzBepKocwkOeSQLJITtlqDhCGV4H+EtG49JV9g0=
Subject key identifier: 2F:57:6D:89:01:C3:E0:53:54:0C:E8:7B:96:40:DA:52:5B:8B:D6:C7
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 019E1CEC1DD4AD59828E808F214A9753CD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 07E4
Signing time: Tue 12 May 2026 16:01:36 +0000
Manifest this update: Tue 12 May 2026 16:01:36 +0000
Manifest next update: Wed 13 May 2026 16:01:36 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: JV02XKOVPsAox2SCZYPVf/HIg1QkZaf5tHdo4QT4y2Q=)
2: q4Ty8nMMQ4uHQ_jd585KCsdADRE.roa (hash: mEEFLdBEQ2NqJsxoY/z4GLGz394s4HaBIKdAwtz8jWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:1d:d4:ad:59:82:8e:80:8f:21:4a:97:53:cd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: May 12 16:01:36 2026 GMT
Not After : May 13 16:01:36 2026 GMT
Subject: CN=2f576d8901c3e053540ce87b9640da525b8bd6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:98:7d:cf:1a:63:30:ac:c3:68:12:1e:52:
f0:a0:71:38:79:6b:1c:a7:50:6c:dd:52:05:36:1a:
5e:3b:f7:61:f6:04:6f:62:dc:7f:00:0f:ab:8f:88:
01:62:45:b2:4b:3b:4c:44:e2:a5:2f:26:6f:1e:11:
36:34:47:17:5c:2c:64:41:71:86:30:37:93:d5:30:
0c:ae:03:2f:2a:9e:39:72:a9:4a:c1:0d:1d:7d:a5:
ae:ce:3e:39:9f:f7:c3:82:80:a8:57:e8:f5:7f:69:
15:68:5a:25:0e:45:dc:df:d8:b0:cc:9e:68:5a:0f:
62:cd:55:d1:26:67:7c:8c:74:b8:7e:ae:eb:e3:61:
eb:57:55:26:86:cf:e1:54:4b:de:d8:0d:bd:72:7e:
07:98:83:a7:0c:67:7a:f6:f2:a1:9c:c4:e1:8e:10:
09:8d:f6:0e:1b:a8:e8:72:d6:8d:a1:7c:af:b0:31:
cd:f9:d7:fa:ea:0a:34:d5:b3:a4:44:23:5b:7f:59:
63:00:8c:77:bd:79:b2:a8:8c:5e:83:3f:7f:5f:98:
3e:1c:bb:18:59:05:df:6d:b1:2f:9d:5f:1d:bf:21:
2f:32:4a:aa:85:04:43:4d:1f:0e:c9:12:e4:7d:88:
e1:ee:de:76:50:5c:47:7e:a2:8a:11:a7:b7:61:77:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:57:6D:89:01:C3:E0:53:54:0C:E8:7B:96:40:DA:52:5B:8B:D6:C7
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c6:f4:eb:61:62:23:b9:3e:3f:f0:2c:02:7f:15:83:90:d5:
59:15:ff:e0:c2:9a:4c:be:7b:6d:43:17:1b:fa:b5:8e:3b:d6:
17:00:c2:e6:9a:b3:df:51:c9:be:f2:71:30:fd:50:62:58:2b:
62:62:7a:7a:4d:b2:a9:3d:c9:07:f6:93:87:57:bf:41:53:99:
b2:10:0f:be:cd:91:d0:c6:5b:8e:f7:91:01:eb:ba:1a:c4:7c:
d8:84:7a:94:a5:95:c8:41:ca:ed:3e:21:d0:fb:54:d0:92:33:
f4:f5:75:02:24:c1:f0:d9:78:5f:79:df:39:8d:7f:ca:7b:eb:
0a:17:0a:7a:c3:d9:f3:36:24:12:cf:79:7f:3f:7f:56:b5:e2:
e1:6a:c0:d8:17:8c:54:cb:75:83:d3:67:54:33:2a:71:4c:bd:
04:93:d3:80:10:95:e2:36:15:77:4e:b1:53:44:30:70:25:a9:
a1:d1:4c:4f:35:13:61:d1:8e:9e:f9:78:9d:c0:40:29:ae:96:
b3:fa:0d:00:29:0b:66:dc:2a:9f:d6:bc:cb:cb:65:00:04:8b:
46:fc:e1:ea:e5:d4:16:7f:a7:93:0a:b0:24:ef:85:34:3f:a7:
af:b5:34:49:54:5d:04:c5:f3:fa:1c:f8:86:5b:61:c5:ff:b0:
93:0c:c6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:11 2026 by rpki-client