Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
File: pqBZBOyBdGoKZtIH9dNvjZeIig0.mft (raw, json)
Hash identifier: RMAdtzDcwKbBjtepBBuOBbynr/4ChU7kRpRzxwFqR6k=
Subject key identifier: 4E:BC:80:DD:73:CE:5D:00:15:25:5B:D3:E8:18:34:32:EA:3E:90:70
Authority key identifier: A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
Certificate issuer: /CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
Certificate serial: 019DA341B1DE1DD7BB6BC6A8FD332ECC9A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
Manifest number: 0A2A
Signing time: Sun 19 Apr 2026 01:01:24 +0000
Manifest this update: Sun 19 Apr 2026 01:01:24 +0000
Manifest next update: Mon 20 Apr 2026 01:01:24 +0000
Files and hashes: 1: 5sg8jhdzeaiLeEp6wxZ_2JeXdD4.roa (hash: liGuxIjPN3BQno0UGJZyTCNg4Fr30OK1nNLU8WxYRpQ=)
2: pqBZBOyBdGoKZtIH9dNvjZeIig0.crl (hash: JjRLPXgvTQKuY7FD2Fp/O9NlOfIQh3kijsSajjmLhCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:b1:de:1d:d7:bb:6b:c6:a8:fd:33:2e:cc:9a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
Validity
Not Before: Apr 19 01:01:24 2026 GMT
Not After : Apr 20 01:01:24 2026 GMT
Subject: CN=4ebc80dd73ce5d0015255bd3e8183432ea3e9070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:b3:aa:e5:67:25:ca:be:8c:ae:1f:56:21:
fb:ef:5f:73:81:bf:85:02:cd:f0:4e:0a:f2:a5:67:
55:14:1e:ac:6c:f0:74:62:ff:19:a9:9b:c6:68:9f:
f8:5c:7d:54:16:a7:b7:66:b9:b6:0a:e3:37:9e:09:
de:2b:7d:7d:10:b8:6d:21:d1:e1:d0:6d:58:d5:e8:
77:d2:46:60:bb:dd:e8:08:ed:47:89:ca:df:5a:5c:
15:22:7a:56:5d:3c:40:a7:fe:ff:22:df:63:d6:a2:
8d:71:d7:98:b4:75:59:68:61:f1:be:d6:c7:bc:77:
38:2a:4a:8c:1d:d1:d3:89:ec:19:be:20:74:37:f6:
21:a4:81:d4:0a:cc:3e:d9:13:62:6e:d7:68:5f:2c:
df:83:65:67:cc:6e:13:65:f3:5f:e3:53:a3:98:e4:
55:ea:8c:9c:3b:21:67:8f:e0:64:c9:67:93:f3:f7:
69:3c:f6:3b:fe:5b:9b:09:97:dd:f8:6b:0a:60:99:
0f:15:62:70:3c:51:65:fe:bc:00:64:35:b9:49:f8:
fc:82:29:9a:23:17:73:2f:0d:03:87:58:e3:e8:cf:
d9:e8:22:b6:af:96:3b:36:ca:d8:d0:fd:4c:0a:d3:
af:a1:96:4f:25:10:d0:4d:41:cb:f9:3c:ea:78:37:
28:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BC:80:DD:73:CE:5D:00:15:25:5B:D3:E8:18:34:32:EA:3E:90:70
X509v3 Authority Key Identifier:
keyid:A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:25:25:56:51:1c:4b:90:97:df:99:c0:2a:7b:29:fc:4c:51:
70:c4:0e:c6:3f:60:74:73:7b:88:19:12:6a:82:03:1e:73:57:
a1:0b:60:ee:cf:77:1b:7b:60:b0:d7:dd:1b:27:8d:3e:f7:d3:
02:46:bf:86:b8:c1:10:88:f4:d1:8c:37:b8:06:d6:fe:44:3f:
98:36:5b:18:e8:77:e6:ba:63:de:c0:08:ad:24:3d:61:f1:f3:
0c:7f:83:5a:4e:9e:d1:6d:8b:ad:6d:f0:39:f7:09:f9:90:24:
5c:0d:d4:6c:5d:50:a6:d6:7a:22:7c:63:c1:1a:2b:d3:31:bd:
9e:30:b6:b9:8f:6a:9b:ed:91:be:67:ff:89:b4:a8:e1:18:0b:
17:36:b9:62:b7:89:51:f3:6b:bd:1b:58:d4:da:42:4a:b8:92:
05:f7:c6:48:a5:cd:79:87:87:95:2d:12:6c:25:0f:e2:83:df:
65:4f:20:65:e7:cc:2a:33:b4:91:ba:98:94:31:66:f9:0b:49:
42:f4:c3:26:3b:bd:27:65:ee:1b:a1:77:b4:88:bb:25:59:d6:
65:90:24:6b:d3:53:f0:fd:46:04:29:74:af:87:31:20:f2:80:
92:3e:6c:d8:07:83:2a:5e:ef:df:ea:db:24:8d:ed:d0:70:46:
84:37:d4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:34 2026 by rpki-client