Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: R41befyG1alHUFKCExVQXztwSYjbNt8dvTNjMgELkF0=
Subject key identifier: 0C:E2:04:7B:1B:AB:5A:44:2D:94:4C:F2:24:0E:E5:6A:E4:B2:B4:F7
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 019F91A4467DD67CD5B08A1992339153F96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 08A5
Signing time: Fri 24 Jul 2026 01:01:30 +0000
Manifest this update: Fri 24 Jul 2026 01:01:30 +0000
Manifest next update: Sat 25 Jul 2026 01:01:30 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: 7F8sEKXhYOC+2fyhujHAsIiyhPpXfQPFISKhhRMZgzQ=)
2: q4Ty8nMMQ4uHQ_jd585KCsdADRE.roa (hash: mEEFLdBEQ2NqJsxoY/z4GLGz394s4HaBIKdAwtz8jWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:46:7d:d6:7c:d5:b0:8a:19:92:33:91:53:f9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Jul 24 01:01:30 2026 GMT
Not After : Jul 25 01:01:30 2026 GMT
Subject: CN=0ce2047b1bab5a442d944cf2240ee56ae4b2b4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6e:81:6e:03:25:28:bc:f6:e0:91:58:43:4c:
6d:e8:42:7f:78:2a:88:82:b0:a1:e5:7a:54:71:6a:
3d:59:d0:61:21:7b:14:8e:cd:f8:cd:ee:4a:f7:41:
be:20:97:77:2e:90:2f:56:ac:42:85:9e:b4:9c:5e:
cb:7e:59:15:97:de:c5:97:da:1e:7a:bf:2e:86:c1:
04:83:00:db:4e:45:69:6e:d9:23:5e:a4:f2:1a:41:
4d:a7:8e:ab:d9:55:7f:a2:50:ef:21:4a:7e:bd:6f:
b1:59:77:99:5c:d4:a3:c1:a0:b5:cb:4a:af:07:62:
5a:dd:05:54:f0:2f:b4:d1:5c:e3:b6:8a:d2:bb:55:
4a:35:f1:bf:e9:d6:fc:b7:28:c7:f2:42:60:27:d5:
77:fe:61:f6:45:f3:83:03:ac:2d:63:bf:a6:38:0e:
61:61:9b:6e:9e:7d:e5:6d:7a:1b:a2:38:f3:a3:c2:
be:61:27:6b:ae:89:13:0e:39:73:86:bd:e9:69:0d:
90:01:65:a6:96:ca:39:e7:bd:4c:86:da:23:1f:35:
c1:5b:f5:27:97:35:8f:a7:38:71:2d:dc:48:43:c1:
15:3f:88:31:b5:ab:f1:23:af:00:c2:eb:23:59:b5:
ff:e0:e2:bf:34:fc:6b:25:b9:09:ef:ac:07:fd:98:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E2:04:7B:1B:AB:5A:44:2D:94:4C:F2:24:0E:E5:6A:E4:B2:B4:F7
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:41:b5:bc:39:6e:70:5c:63:aa:12:25:e2:21:ed:18:a9:9b:
5f:67:f8:fe:c9:e5:0a:58:ee:d5:89:2b:4d:18:e8:98:63:7b:
14:64:75:4b:a0:ed:6d:01:8f:23:b1:44:26:8a:90:f6:00:50:
53:41:8e:d1:8c:9d:a0:40:f6:eb:f8:cd:52:fa:f1:13:40:e6:
93:14:2f:b5:63:ae:26:52:53:60:0d:d5:99:2e:c1:4c:0f:30:
34:2f:48:28:3a:a9:20:ca:c9:83:f5:ad:d2:9d:4d:b6:50:a9:
a9:2e:f3:e9:7e:37:e6:47:d4:bc:76:e0:03:55:04:78:32:94:
6f:4c:db:c2:05:bf:0d:ad:60:61:72:d4:34:5b:c6:07:74:fd:
e4:78:f5:69:9b:27:fd:78:d4:56:c1:67:bf:8e:a9:34:97:88:
15:c0:6e:5e:26:9f:3e:bb:44:e3:5a:c9:30:38:af:f1:de:bb:
54:6f:78:de:16:00:1b:7f:a3:c9:c2:d2:b9:8e:12:66:d0:bb:
cc:c2:61:06:c2:5c:40:39:94:be:71:0e:3b:df:49:a5:df:31:
37:09:63:dd:ad:b6:9b:12:60:48:e0:ae:b4:f6:20:20:b7:80:
39:f3:ec:fa:65:19:b8:8d:5a:9b:eb:95:66:14:b9:05:6e:96:
ea:d9:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:08 2026 by rpki-client