Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json)
Hash identifier: k15HjyL8RRUM4OaGbsJQ8bSQDXyldGjWtHN/IC3dP8Y=
Subject key identifier: 7C:DB:0D:D1:B7:58:AA:5C:43:B4:81:AE:E1:2C:0F:56:C7:92:05:C5
Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Certificate serial: 019CAD22BD922608D2A093E270F5751DD880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
Manifest number: 0DBA
Signing time: Mon 02 Mar 2026 06:01:00 +0000
Manifest this update: Mon 02 Mar 2026 06:01:00 +0000
Manifest next update: Tue 03 Mar 2026 06:01:00 +0000
Files and hashes: 1: SV2RkPOuByS_r28T-8Z9LI6s33I.roa (hash: mWVfN5OIaVZHfY5wD08vtg6Nd4vEgRrrt33wmevn5GE=)
2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: Ze/I9/dFbGLbD32ArMR6o8tSL1VghMcIUrUlhNgKbH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:bd:92:26:08:d2:a0:93:e2:70:f5:75:1d:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Validity
Not Before: Mar 2 06:01:00 2026 GMT
Not After : Mar 3 06:01:00 2026 GMT
Subject: CN=7cdb0dd1b758aa5c43b481aee12c0f56c79205c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8f:03:a5:b4:ce:35:ac:d1:b6:c5:06:9b:fd:
9b:36:96:15:aa:78:b7:30:95:b0:ae:9c:dc:2b:d8:
61:c6:08:8a:56:36:52:91:88:66:4f:26:36:21:4f:
a3:9f:3c:34:08:9b:55:2a:50:d3:d0:4b:be:ec:61:
1f:fe:2e:1a:6a:e0:4b:e8:d5:5a:b0:5b:56:b5:24:
7f:04:4e:f2:36:a2:8a:e3:f7:f9:1c:9d:33:75:59:
01:82:d3:47:8c:79:06:42:f8:74:22:fd:96:73:3f:
dd:bd:59:73:94:56:b2:c3:19:c2:93:95:43:10:1a:
5e:11:1b:ba:2d:75:80:39:94:54:59:16:c3:d3:1a:
74:d2:16:45:60:cf:7a:87:75:95:f3:f8:af:48:df:
e3:4d:65:96:e2:5a:3a:a2:6f:06:9a:90:17:28:a4:
9e:52:c8:d1:e2:4c:a9:a5:04:3a:f8:4d:51:aa:f4:
35:0e:15:d5:6e:9c:4b:86:dd:cb:f7:2a:1e:87:59:
50:34:6d:a3:ce:a9:64:9c:61:c3:a5:fb:92:1c:d6:
08:c3:b5:c2:fb:7b:17:51:a0:f8:b6:3d:24:9e:8c:
59:23:ba:87:35:25:bb:63:45:c4:96:91:c9:41:f2:
21:c6:d5:5e:42:2f:05:52:5d:cf:26:cd:22:21:ea:
a8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DB:0D:D1:B7:58:AA:5C:43:B4:81:AE:E1:2C:0F:56:C7:92:05:C5
X509v3 Authority Key Identifier:
keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:06:67:62:99:f4:7e:23:95:67:fc:cb:85:83:05:ac:4e:89:
2e:c3:19:ac:c3:db:3b:fc:82:4c:69:31:35:00:05:91:c6:be:
a3:09:32:0a:01:1b:0f:70:48:28:5b:8e:4e:e1:1d:28:1a:d4:
f5:b8:17:12:82:2e:78:0e:eb:4f:6d:9a:cf:48:99:34:47:6c:
77:5d:b2:71:db:8f:97:9e:f9:22:9f:aa:39:b6:e7:9f:c5:1c:
33:fa:81:95:33:d6:0d:ae:72:76:1f:a6:39:fb:d1:4f:f0:00:
17:0a:c4:cb:81:76:23:9a:ca:af:24:cf:ce:36:c0:04:73:e9:
76:22:a3:8c:6b:2d:df:e7:4f:03:e9:f0:31:3c:3d:f1:74:9a:
71:8f:c3:72:8a:db:18:5c:ac:66:c1:8e:fe:5f:f1:8f:ca:7c:
73:19:38:3d:db:17:3b:7e:9f:5b:64:e5:0e:3b:2a:04:57:20:
58:51:f5:06:91:33:f1:d1:bc:05:a2:19:1f:52:1d:b7:e2:ce:
73:d1:c9:ca:96:71:59:8c:aa:ef:a6:63:90:3b:cb:5f:ea:48:
6d:8e:cb:08:b8:57:f4:65:0e:57:0c:a2:95:d5:b9:d7:65:6c:
8f:41:14:41:a8:55:29:e4:8c:5a:c7:9c:31:59:33:ad:a6:6d:
80:5f:f8:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIr2SJgjSoJPicPV1HdiAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YWM2ZDA2OWQ4ZmI3MzJmNGZlOTJiNGUxM2NkN2RjNGQz
OTNhNDIwHhcNMjYwMzAyMDYwMTAwWhcNMjYwMzAzMDYwMTAwWjAzMTEwLwYDVQQD
Eyg3Y2RiMGRkMWI3NThhYTVjNDNiNDgxYWVlMTJjMGY1NmM3OTIwNWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3I8DpbTONazRtsUGm/2bNpYVqni3
MJWwrpzcK9hhxgiKVjZSkYhmTyY2IU+jnzw0CJtVKlDT0Eu+7GEf/i4aauBL6NVa
sFtWtSR/BE7yNqKK4/f5HJ0zdVkBgtNHjHkGQvh0Iv2Wcz/dvVlzlFaywxnCk5VD
EBpeERu6LXWAOZRUWRbD0xp00hZFYM96h3WV8/ivSN/jTWWW4lo6om8GmpAXKKSe
UsjR4kyppQQ6+E1RqvQ1DhXVbpxLht3L9yoeh1lQNG2jzqlknGHDpfuSHNYIw7XC
+3sXUaD4tj0knoxZI7qHNSW7Y0XElpHJQfIhxtVeQi8FUl3PJs0iIeqoKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzbDdG3WKpcQ7SBruEsD1bHkgXFMB8GA1UdIwQY
MBaAFKasbQadj7cy9P6StOE819xNOTpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEt
YmZhMDNhNjY4NTc3LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEtYmZhMDNhNjY4NTc3
LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswZnYpn0
fiOVZ/zLhYMFrE6JLsMZrMPbO/yCTGkxNQAFkca+owkyCgEbD3BIKFuOTuEdKBrU
9bgXEoIueA7rT22az0iZNEdsd12ycduPl575Ip+qObbnn8UcM/qBlTPWDa5ydh+m
OfvRT/AAFwrEy4F2I5rKryTPzjbABHPpdiKjjGst3+dPA+nwMTw98XSacY/Dcorb
GFysZsGO/l/xj8p8cxk4PdsXO36fW2TlDjsqBFcgWFH1BpEz8dG8BaIZH1Idt+LO
c9HJypZxWYyq76ZjkDvLX+pIbY7LCLhX9GUOVwyildW512Vsj0EUQahVKeSMWsec
MVkzraZtgF/4Og==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:46 2026 by rpki-client