Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: xDxw6zb40P+0RlZn27QbIEyaZRLCkqNB0lJHhABjl5Y=
Subject key identifier: 5E:59:CE:FA:27:14:96:9E:93:2B:DF:1B:FC:13:68:99:79:B2:C3:1F
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 01A0CC6BE8BF8668209FA1B73C62F185A0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 0948
Signing time: Wed 23 Sep 2026 04:00:18 +0000
Manifest this update: Wed 23 Sep 2026 04:00:18 +0000
Manifest next update: Thu 24 Sep 2026 04:00:18 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: brr9IraHA6/4RKimx11wTFAAKkf4ldBwtIz6mpX1bL0=)
2: q4Ty8nMMQ4uHQ_jd585KCsdADRE.roa (hash: mEEFLdBEQ2NqJsxoY/z4GLGz394s4HaBIKdAwtz8jWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6b:e8:bf:86:68:20:9f:a1:b7:3c:62:f1:85:a0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Sep 23 04:00:18 2026 GMT
Not After : Sep 24 04:00:18 2026 GMT
Subject: CN=5e59cefa2714969e932bdf1bfc13689979b2c31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:be:20:42:b1:6b:d8:64:f2:92:94:10:1b:
d0:5c:14:dd:61:92:54:1d:b6:0c:d5:f4:15:2a:c2:
65:11:f0:d7:6e:aa:d5:87:fb:b8:fc:19:21:32:99:
bd:e1:bc:0a:84:b1:cb:7c:66:87:b1:f7:a6:e0:4d:
ce:82:c9:2f:30:f0:2f:c4:6d:7e:a1:12:55:df:6f:
3b:c8:93:9c:8a:e0:c2:c2:41:8a:d3:d5:ca:d7:42:
e3:e6:b3:24:c3:af:4b:2f:d5:35:f9:8c:aa:15:b7:
62:a1:3e:7e:c6:64:d0:49:86:f0:0f:0f:1e:ef:c8:
40:5d:e5:d8:73:c0:e9:c2:3a:c0:a9:33:2e:3c:2f:
11:a4:f4:05:78:02:0f:63:c6:f6:84:51:b1:4c:11:
7f:cf:18:39:16:70:dc:5a:c8:3b:0a:e1:b1:11:ca:
44:40:ca:ec:9e:8a:4c:72:c7:13:66:ef:90:24:2a:
4d:b6:c1:17:21:e3:06:56:86:09:6b:b8:bb:30:99:
05:4b:af:3b:f3:41:b0:32:c9:c2:29:e1:4d:05:1c:
79:cb:5f:64:fa:13:2d:99:3c:35:df:2f:6f:96:ff:
4c:45:7d:ca:b3:6e:8b:78:98:82:8c:f7:3b:e6:9e:
7a:c7:22:51:7b:74:02:13:39:b5:2b:5e:54:87:d6:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:59:CE:FA:27:14:96:9E:93:2B:DF:1B:FC:13:68:99:79:B2:C3:1F
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cd:be:18:9d:2a:73:33:08:d3:17:7a:ed:98:64:0e:c9:74:
46:43:6a:72:38:87:d7:08:d5:fa:26:d6:15:67:93:8c:ed:f2:
8c:9d:08:7c:0c:2d:ae:78:58:c2:a8:a6:72:db:81:50:24:9e:
d1:a1:b1:06:48:ce:53:72:19:e0:a8:07:80:0a:3b:0a:13:21:
23:d0:05:0b:68:37:41:df:af:22:de:52:5b:e1:13:4b:8f:42:
fd:60:31:3d:72:94:d3:87:a2:57:81:6e:30:ce:60:ff:2c:70:
93:98:4d:ed:6b:3a:f0:ae:9b:a6:a2:8c:56:13:97:54:05:fe:
d7:07:f6:f1:b7:f2:73:29:a2:56:a9:5f:05:73:ad:61:8f:a2:
bf:5e:e6:b5:60:d0:42:17:0d:b4:e0:24:bf:a6:69:18:44:96:
c2:ca:b3:da:e4:26:90:ac:80:3a:d2:8d:e3:65:43:81:ac:a9:
ce:7d:d6:e8:51:03:c1:fe:2b:e3:28:d0:e6:c6:97:70:89:15:
1b:8d:e3:0d:f2:4f:79:db:a0:16:ed:0e:4f:36:d4:03:05:be:
a5:cd:3e:8d:ad:61:1a:68:99:ae:2e:1c:32:e1:fa:6f:d0:cf:
ee:7f:12:08:08:24:f5:3c:05:df:db:18:f3:36:9d:21:ef:67:
12:36:72:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:39:14 2026 by rpki-client