Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
File: PQh2wA4DdvdzPbJEMAEg0xQL290.mft (raw, json)
Hash identifier: xdxz65K0RmDorJ4pqCzFHBygYRlFSybdvZlr/L7OSRw=
Subject key identifier: 7E:3A:54:B3:6A:21:8E:83:16:9B:92:3E:F9:37:CE:AF:48:7A:B5:43
Authority key identifier: 3D:08:76:C0:0E:03:76:F7:73:3D:B2:44:30:01:20:D3:14:0B:DB:DD
Certificate issuer: /CN=3d0876c00e0376f7733db244300120d3140bdbdd
Certificate serial: 01A0CFDB4E787ED299228D2EED9AC7E09257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQh2wA4DdvdzPbJEMAEg0xQL290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
Manifest number: 2F
Signing time: Wed 23 Sep 2026 20:00:51 +0000
Manifest this update: Wed 23 Sep 2026 20:00:51 +0000
Manifest next update: Thu 24 Sep 2026 20:00:51 +0000
Files and hashes: 1: PQh2wA4DdvdzPbJEMAEg0xQL290.crl (hash: /r5CJu4AW0Ad7CXsWPTfFwiKZ5FpdGl1j78OrrDOEuM=)
2: nq9bgSbvA0TB3aKoI2LSbdxmVpY.roa (hash: pKofBy3cQfkluUFTKQ828uE/AR/hkHrzVvjmkrkzCnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQh2wA4DdvdzPbJEMAEg0xQL290.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:4e:78:7e:d2:99:22:8d:2e:ed:9a:c7:e0:92:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0876c00e0376f7733db244300120d3140bdbdd
Validity
Not Before: Sep 23 20:00:51 2026 GMT
Not After : Sep 24 20:00:51 2026 GMT
Subject: CN=7e3a54b36a218e83169b923ef937ceaf487ab543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:6c:9e:fd:09:5a:ae:5c:03:39:15:ed:da:
ac:b8:c3:84:4c:8e:cb:80:2a:fb:b2:99:2e:17:d0:
4c:4e:41:ac:1a:10:9a:f9:24:49:bc:8e:5c:e1:53:
44:ec:75:66:cc:e1:98:4c:f9:13:67:33:8b:a5:02:
c7:b4:a9:db:49:6d:a8:5a:02:ca:27:bd:55:dc:2c:
cf:b8:34:75:22:fc:d6:77:f6:f5:0c:a3:26:d7:c4:
e9:f1:e4:0d:8d:38:b7:0a:0a:67:e1:cf:3b:44:d7:
0e:cf:e8:6f:50:8b:a7:a5:ee:79:2a:e2:4f:2c:b1:
95:d7:56:89:26:32:14:e8:11:23:01:ed:7b:8a:7e:
6b:ac:62:d1:48:d5:84:78:bf:57:c4:5b:5c:0e:cb:
4f:32:0a:fc:a9:1e:da:b8:11:2c:3d:d8:f3:c4:b3:
52:20:ad:66:58:3b:06:10:ef:ac:c6:bf:73:7c:13:
bc:7c:20:6a:dd:8f:96:66:e8:1f:ca:6c:b3:9b:42:
1a:4f:50:fa:e6:be:db:36:aa:9e:35:48:00:f3:e5:
ac:c4:ea:62:c1:ed:c7:df:19:b2:42:9a:11:34:5d:
60:b7:85:5f:00:61:86:4f:23:eb:27:7f:0f:d9:8b:
5b:c2:b3:0c:a5:48:b8:d7:de:a2:c1:28:e7:91:80:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3A:54:B3:6A:21:8E:83:16:9B:92:3E:F9:37:CE:AF:48:7A:B5:43
X509v3 Authority Key Identifier:
keyid:3D:08:76:C0:0E:03:76:F7:73:3D:B2:44:30:01:20:D3:14:0B:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQh2wA4DdvdzPbJEMAEg0xQL290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0e:0b:6b:e0:02:84:f8:45:08:7b:69:49:7c:de:c4:f7:81:
b6:28:47:de:ff:de:ca:5e:37:b4:65:1f:fa:f0:a8:00:28:81:
c0:33:c5:ab:bc:93:cb:4b:9d:12:cd:1a:29:4a:26:c2:5a:ae:
84:a7:03:25:e9:0d:65:08:d5:b2:ff:fb:26:9f:a9:f9:79:fe:
ea:8c:96:6e:5a:64:6e:2d:fe:48:92:24:98:79:15:02:cb:4b:
e3:d7:cc:41:f2:e7:55:d7:2e:30:f1:c6:43:af:1b:fe:9c:9f:
bf:9b:3b:00:98:a3:ea:25:23:31:53:6b:e8:19:4c:38:eb:0f:
3d:23:76:2f:27:dd:1d:75:f2:48:12:7c:4f:da:a2:24:34:0c:
b1:e2:80:87:25:ec:a5:d1:17:18:71:57:d1:39:75:bf:af:fa:
8e:1f:fd:c0:19:e2:f5:ad:5c:4a:76:bf:2a:85:08:6a:da:2f:
ab:18:35:b0:8e:c0:ea:21:81:67:33:e9:b8:fc:a7:f5:ae:86:
11:0f:b4:a6:f3:b9:8b:7d:26:34:24:d7:ab:62:92:6e:5c:e4:
66:7a:a4:9a:73:47:41:55:80:ee:2c:cd:f9:de:12:c7:2d:8a:
df:7d:9a:61:fb:ef:93:23:bf:b4:cd:b1:7c:fc:09:eb:5b:c2:
98:54:7c:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDP2054ftKZIo0u7ZrH4JJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMDg3NmMwMGUwMzc2Zjc3MzNkYjI0NDMwMDEyMGQzMTQw
YmRiZGQwHhcNMjYwOTIzMjAwMDUxWhcNMjYwOTI0MjAwMDUxWjAzMTEwLwYDVQQD
Eyg3ZTNhNTRiMzZhMjE4ZTgzMTY5YjkyM2VmOTM3Y2VhZjQ4N2FiNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3Rsnv0JWq5cAzkV7dqsuMOETI7L
gCr7spkuF9BMTkGsGhCa+SRJvI5c4VNE7HVmzOGYTPkTZzOLpQLHtKnbSW2oWgLK
J71V3CzPuDR1IvzWd/b1DKMm18Tp8eQNjTi3Cgpn4c87RNcOz+hvUIunpe55KuJP
LLGV11aJJjIU6BEjAe17in5rrGLRSNWEeL9XxFtcDstPMgr8qR7auBEsPdjzxLNS
IK1mWDsGEO+sxr9zfBO8fCBq3Y+WZugfymyzm0IaT1D65r7bNqqeNUgA8+WsxOpi
we3H3xmyQpoRNF1gt4VfAGGGTyPrJ38P2YtbwrMMpUi4196iwSjnkYBpuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH46VLNqIY6DFpuSPvk3zq9IerVDMB8GA1UdIwQY
MBaAFD0IdsAOA3b3cz2yRDABINMUC9vdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFFoMndBNERkdmR6UGJKRU1BRWcweFFMMjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wMGE1OTMtYTM4Mi00ZjY2LWEzNmEt
ZWJjZTk4MDMyNGYwLzEvUFFoMndBNERkdmR6UGJKRU1BRWcweFFMMjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wMGE1OTMtYTM4Mi00ZjY2LWEzNmEtZWJjZTk4MDMyNGYw
LzEvUFFoMndBNERkdmR6UGJKRU1BRWcweFFMMjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcA4La+AC
hPhFCHtpSXzexPeBtihH3v/eyl43tGUf+vCoACiBwDPFq7yTy0udEs0aKUomwlqu
hKcDJekNZQjVsv/7Jp+p+Xn+6oyWblpkbi3+SJIkmHkVAstL49fMQfLnVdcuMPHG
Q68b/pyfv5s7AJij6iUjMVNr6BlMOOsPPSN2LyfdHXXySBJ8T9qiJDQMseKAhyXs
pdEXGHFX0Tl1v6/6jh/9wBni9a1cSna/KoUIatovqxg1sI7A6iGBZzPpuPyn9a6G
EQ+0pvO5i30mNCTXq2KSblzkZnqkmnNHQVWA7izN+d4Sxy2K332aYfvvkyO/tM2x
fPwJ61vCmFR8Fg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:07:29 2026 by rpki-client