Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
File: PqU6yajcRG-34BE7aLOOlwwZ98w.mft (raw, json)
Hash identifier: QPvLwEn6DuNlzGcops3o/Ggr1QjucMG7FgfxAXeanIs=
Subject key identifier: 9B:6B:04:69:09:4B:05:E8:8F:3F:D0:DA:2F:AD:6C:9C:5E:8E:45:80
Authority key identifier: 3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
Certificate issuer: /CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Certificate serial: 01A128E8415249044292AB8E451521A89E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
Manifest number: 1A27
Signing time: Sun 11 Oct 2026 03:01:11 +0000
Manifest this update: Sun 11 Oct 2026 03:01:11 +0000
Manifest next update: Mon 12 Oct 2026 03:01:11 +0000
Files and hashes: 1: PqU6yajcRG-34BE7aLOOlwwZ98w.crl (hash: IwoWG/5yqMpRtjaSdUZAkUri1GhszqQTuC4v4wFb8xI=)
2: ugGgjfrNMaOwuHgQR5J_mmnCoSw.roa (hash: N5PN03imR/rPD+0R00oOm/EBGbZntmCDYE46dLOAj4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:41:52:49:04:42:92:ab:8e:45:15:21:a8:9e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Validity
Not Before: Oct 11 03:01:11 2026 GMT
Not After : Oct 12 03:01:11 2026 GMT
Subject: CN=9b6b0469094b05e88f3fd0da2fad6c9c5e8e4580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:9c:43:39:74:5b:95:69:7a:db:c6:e6:2e:
0e:5b:c2:ef:f9:e9:a7:c8:bb:e4:91:76:61:c8:42:
b6:5e:94:32:52:5f:d0:23:ff:b8:78:21:50:6e:48:
cd:28:c7:ec:15:fb:21:f0:5c:37:65:26:48:53:21:
c1:35:2f:ac:4c:93:90:bb:9b:4a:77:db:64:a8:76:
af:60:d5:e7:4f:34:98:7e:07:d7:13:67:6b:27:16:
29:60:9f:bf:ad:48:44:22:fa:44:22:6b:59:55:2d:
ae:fb:06:c9:ca:a8:bf:70:bd:0e:18:37:9c:f5:69:
ef:bc:c5:bb:23:ec:cf:6b:f1:50:1d:c0:79:0f:49:
53:5b:a3:5c:51:39:65:30:a8:e7:53:50:3f:8c:9b:
1b:1c:7d:b6:96:39:53:3a:b8:d3:ca:41:c4:34:35:
96:04:d1:1c:20:f4:69:a6:ab:13:2a:47:16:f0:d3:
29:2f:86:a5:f5:94:0d:e8:98:23:c6:be:c2:89:95:
bd:34:9c:0d:d5:61:2a:2b:ed:f1:35:ed:50:6c:49:
e8:17:8f:72:20:38:b1:ec:a6:79:2f:94:00:b5:d1:
e2:27:7a:0a:2c:96:c0:1b:20:c5:7b:36:fc:d6:59:
e5:30:03:17:78:d6:a1:1c:31:c8:87:3a:1f:c1:a0:
b1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6B:04:69:09:4B:05:E8:8F:3F:D0:DA:2F:AD:6C:9C:5E:8E:45:80
X509v3 Authority Key Identifier:
keyid:3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:39:a4:5c:c4:53:37:49:72:46:e6:c7:97:7b:1a:25:d9:fa:
e3:d2:a6:9f:97:9a:c4:6e:e1:49:e2:30:7b:be:a4:aa:da:9a:
33:f7:5e:20:a8:82:db:a9:23:fd:82:d5:77:60:db:2d:d4:70:
03:6f:d9:80:f9:f6:b5:7f:0e:85:29:41:75:12:69:16:6d:de:
53:98:74:9a:7b:d8:78:4f:c6:c6:df:59:e0:ac:23:97:6c:4c:
d3:65:29:b8:99:c1:d5:2d:42:20:3d:7d:57:67:ae:46:6c:4f:
27:ea:96:15:b2:43:75:09:b9:e4:57:84:fe:07:ab:70:94:35:
a2:10:d4:a9:97:2c:07:27:03:48:4b:b6:a4:97:4d:12:1e:cf:
2d:6a:98:bf:7b:2d:c9:cb:de:a1:3c:8a:e3:79:07:3b:48:bf:
56:96:79:0b:9d:c1:8b:57:15:23:be:c1:d5:a0:e0:c0:84:2b:
9c:61:bb:36:cb:fa:f1:50:c6:1b:f8:20:67:f1:24:9a:aa:ea:
42:10:be:7a:e2:9c:51:cf:3b:21:81:e0:79:24:1d:85:d6:8d:
15:13:bd:a7:b8:bf:f4:2f:1b:4f:ed:3b:54:a3:c3:d0:20:a8:
cd:71:85:71:c7:5e:17:5d:6b:95:99:ee:1c:b8:2a:99:5a:c1:
e5:3b:62:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:57:28 2026 by rpki-client