Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json)
Hash identifier: DZsIPO7ogsxCQImzIj1IQlWL0CBBs3uB2VVr9ZsN+y0=
Subject key identifier: D2:1C:0D:3D:83:A9:E9:86:FC:BA:40:C3:A9:12:F2:0D:F6:93:34:A0
Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Certificate serial: 019CAB343B84664F58A6FB8B1356E0D2708B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
Manifest number: 0DB9
Signing time: Sun 01 Mar 2026 21:00:52 +0000
Manifest this update: Sun 01 Mar 2026 21:00:52 +0000
Manifest next update: Mon 02 Mar 2026 21:00:52 +0000
Files and hashes: 1: SV2RkPOuByS_r28T-8Z9LI6s33I.roa (hash: mWVfN5OIaVZHfY5wD08vtg6Nd4vEgRrrt33wmevn5GE=)
2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: DR+ck1AT9SH4M+dVq+eDeeSnkYhbkemjo7GRAFAKXM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3b:84:66:4f:58:a6:fb:8b:13:56:e0:d2:70:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Validity
Not Before: Mar 1 21:00:52 2026 GMT
Not After : Mar 2 21:00:52 2026 GMT
Subject: CN=d21c0d3d83a9e986fcba40c3a912f20df69334a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:5d:4e:93:0a:4b:80:e8:7f:2c:0d:6f:cc:
08:d5:7d:ea:e4:a3:b2:03:3a:7e:b6:4b:d2:67:54:
d7:1d:e6:b1:37:b7:04:30:70:d5:45:74:5d:8f:fd:
65:5b:49:2a:77:bd:a1:d7:45:13:c2:cd:5d:cf:73:
2a:1f:ae:2f:07:ae:e9:20:e3:b9:3e:17:a1:4a:f7:
ab:0d:12:8c:b3:1b:56:02:15:65:9c:e5:31:d0:37:
7c:b9:bf:a4:35:22:10:9f:c0:e5:ff:b6:c8:5f:db:
f8:a0:71:8b:9c:7b:f4:65:bd:42:cd:20:92:d0:45:
68:db:19:85:79:95:b3:77:71:08:12:9c:93:95:e1:
81:69:39:1d:41:92:30:05:6d:aa:68:ee:22:80:6d:
db:cf:06:68:9e:14:d5:7d:77:3e:44:86:ce:6d:dd:
de:16:da:0a:55:d8:b1:49:2d:16:5a:f7:2a:78:91:
92:76:33:18:1f:ad:93:b9:2e:2a:14:b7:20:f3:8f:
04:a0:5e:8a:0f:de:2c:0b:e0:65:aa:af:28:75:4a:
e5:e3:91:4b:25:92:11:8d:e2:79:98:bf:a4:df:8c:
56:ad:f3:a7:91:ae:6d:cc:95:6c:ac:4f:6e:e1:29:
51:66:9d:99:3f:79:0c:d6:69:3d:53:32:56:a3:6a:
fd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1C:0D:3D:83:A9:E9:86:FC:BA:40:C3:A9:12:F2:0D:F6:93:34:A0
X509v3 Authority Key Identifier:
keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:54:96:a9:1c:6e:0b:f3:a6:47:97:6c:08:19:29:14:3c:22:
e4:ab:24:7d:f3:03:b9:c6:82:4c:6e:ab:9f:c0:6a:21:df:bc:
96:d0:53:41:a0:c6:61:3b:fa:f1:5c:0e:3a:bf:09:ff:d4:f2:
84:28:c4:fa:cc:ce:b9:6e:01:07:56:34:c1:35:6c:4d:52:f5:
0c:6e:66:e2:f8:ea:db:0b:12:8f:49:df:2b:05:c9:68:71:ba:
c3:4f:21:88:cd:9a:7f:8e:10:f1:ce:45:22:7d:1f:ee:52:e8:
73:aa:37:cd:bc:74:46:f3:46:65:94:80:56:54:de:d2:2a:9d:
61:50:d6:4c:77:e5:9b:7a:69:40:69:5b:2f:06:82:bf:0b:11:
02:f4:3d:dc:3a:15:ad:95:11:95:5b:4e:1f:5f:3e:38:09:01:
90:77:c3:98:c5:e6:6a:98:09:dc:77:42:c7:76:ef:2e:c3:7a:
0e:e5:8b:68:fb:cd:1e:b3:b1:94:20:a8:1c:74:bd:de:fe:89:
94:62:e6:e6:9b:08:6f:e6:30:1c:de:bf:53:6e:08:a3:da:d1:
18:db:06:be:4b:e8:98:74:21:9e:ac:b9:65:b7:22:5b:8d:38:
7b:72:c2:63:1a:de:94:15:a5:a8:b3:dd:07:0a:70:93:45:b1:
3f:64:d6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:43 2026 by rpki-client