Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: Z5YL1bt5K8dGtyAIilPHs7zbp1o3jeMW0qFw5xpaSuw=
Subject key identifier: A4:17:B7:4A:E0:C9:A4:78:C2:2E:3C:27:D7:7F:66:A0:E5:5C:8A:08
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 019D2997876BD6DEED99649D0A31665AE010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 0766
Signing time: Thu 26 Mar 2026 10:01:29 +0000
Manifest this update: Thu 26 Mar 2026 10:01:29 +0000
Manifest next update: Fri 27 Mar 2026 10:01:29 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: Qn2UwACI/9uKeHmpHaGkTLJpaZ3lbzgXuqo5/5iBcE8=)
2: q4Ty8nMMQ4uHQ_jd585KCsdADRE.roa (hash: mEEFLdBEQ2NqJsxoY/z4GLGz394s4HaBIKdAwtz8jWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:87:6b:d6:de:ed:99:64:9d:0a:31:66:5a:e0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Mar 26 10:01:29 2026 GMT
Not After : Mar 27 10:01:29 2026 GMT
Subject: CN=a417b74ae0c9a478c22e3c27d77f66a0e55c8a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:e2:70:b2:9d:ad:ea:61:8b:27:88:c1:88:
e3:1b:cf:c2:ec:1c:99:84:1f:34:7e:dc:d5:a1:9c:
54:dd:c1:78:2b:69:7f:96:72:1a:bb:3b:58:9a:ad:
07:cb:c7:94:f3:08:91:1c:7e:7d:65:b0:31:c8:88:
0d:31:89:21:4b:cd:86:65:38:b8:ef:cf:52:87:2a:
99:04:aa:2d:e2:9a:c3:1f:cf:df:99:9c:51:c1:c6:
28:29:df:65:d7:2a:48:1c:0b:cb:f6:35:96:c0:b1:
2b:56:48:72:bd:e3:c5:7c:01:79:d5:56:10:01:b9:
24:0c:11:f0:f9:ca:ba:bf:34:5c:02:74:3f:c9:2a:
8d:1f:45:8a:ed:32:91:58:db:c7:c2:2f:0b:ed:74:
a4:57:9d:5f:04:7f:6e:77:66:b0:fe:ef:da:94:93:
b8:5b:28:a3:33:36:82:9f:1d:bd:54:12:8b:aa:00:
34:69:39:a3:49:90:0f:bd:83:21:45:a5:45:3a:a7:
20:eb:2c:d4:b4:51:21:da:a9:13:38:2f:57:6a:3f:
7b:4f:20:93:58:c3:71:f6:c3:23:f2:44:3b:08:d2:
3b:79:88:99:9d:a5:0a:e8:c7:8c:60:d0:ad:ea:28:
55:82:d8:a3:e5:74:3d:f3:3e:2a:c8:8a:aa:29:79:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:17:B7:4A:E0:C9:A4:78:C2:2E:3C:27:D7:7F:66:A0:E5:5C:8A:08
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e2:03:89:9f:f4:f7:53:3e:29:0c:23:c6:40:60:a2:b2:37:
11:da:4b:3e:20:0c:36:7b:5e:83:8e:a0:7b:ef:ea:52:4a:0f:
5c:5e:76:98:56:13:97:4d:35:ec:dd:91:16:15:0b:f9:10:fc:
26:e8:e3:a0:e3:2e:e1:bd:64:90:9c:a2:06:c6:1f:91:80:c0:
74:9d:5e:23:dd:db:14:dc:96:a2:b2:c4:f0:cf:63:99:d7:02:
7f:ec:5a:53:b5:8a:aa:80:cf:dd:07:3f:f0:cd:bd:c9:41:39:
da:4f:92:1f:e2:7e:a5:f2:8c:37:38:c9:a5:2f:a3:19:13:89:
0e:2d:c5:16:ff:79:64:a8:4c:25:af:14:93:10:20:d0:dd:23:
1d:25:a2:bb:2a:aa:5b:ea:81:76:1b:af:91:c0:a3:e8:93:de:
39:fe:bc:f9:7e:51:f7:26:0e:a7:b0:4c:de:52:51:8f:d8:98:
30:fd:7c:30:8c:a7:2c:cd:d7:6f:9e:56:8e:26:f7:89:d9:1f:
94:c2:e1:f5:b2:73:e8:ca:41:e4:30:47:50:97:41:38:e0:23:
3f:48:50:cf:75:fb:24:b1:f1:df:94:73:4c:75:97:eb:37:78:
1b:7e:d1:b2:f0:e6:6e:13:a0:4f:e7:45:bd:7d:5f:23:ec:94:
6e:93:c8:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl4dr1t7tmWSdCjFmWuAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMDFiZDk0OWM1NWVkMDdlNzAyNDJlMTUwMzNkMGE4NDc0
YTllMWEwHhcNMjYwMzI2MTAwMTI5WhcNMjYwMzI3MTAwMTI5WjAzMTEwLwYDVQQD
EyhhNDE3Yjc0YWUwYzlhNDc4YzIyZTNjMjdkNzdmNjZhMGU1NWM4YTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPDicLKdrephiyeIwYjjG8/C7ByZ
hB80ftzVoZxU3cF4K2l/lnIauztYmq0Hy8eU8wiRHH59ZbAxyIgNMYkhS82GZTi4
789ShyqZBKot4prDH8/fmZxRwcYoKd9l1ypIHAvL9jWWwLErVkhyvePFfAF51VYQ
AbkkDBHw+cq6vzRcAnQ/ySqNH0WK7TKRWNvHwi8L7XSkV51fBH9ud2aw/u/alJO4
WyijMzaCnx29VBKLqgA0aTmjSZAPvYMhRaVFOqcg6yzUtFEh2qkTOC9Xaj97TyCT
WMNx9sMj8kQ7CNI7eYiZnaUK6MeMYNCt6ihVgtij5XQ98z4qyIqqKXmOkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQXt0rgyaR4wi48J9d/ZqDlXIoIMB8GA1UdIwQY
MBaAFD0BvZScVe0H5wJC4VAz0KhHSp4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDkt
ZTRlMGI1NTVhZDU5LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDktZTRlMGI1NTVhZDU5
LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuIDiZ/0
91M+KQwjxkBgorI3EdpLPiAMNnteg46ge+/qUkoPXF52mFYTl0017N2RFhUL+RD8
JujjoOMu4b1kkJyiBsYfkYDAdJ1eI93bFNyWorLE8M9jmdcCf+xaU7WKqoDP3Qc/
8M29yUE52k+SH+J+pfKMNzjJpS+jGROJDi3FFv95ZKhMJa8UkxAg0N0jHSWiuyqq
W+qBdhuvkcCj6JPeOf68+X5R9yYOp7BM3lJRj9iYMP18MIynLM3Xb55Wjib3idkf
lMLh9bJz6MpB5DBHUJdBOOAjP0hQz3X7JLHx35RzTHWX6zd4G37RsvDmbhOgT+dF
vX1fI+yUbpPItg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:33 2026 by rpki-client