Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
File: pqBZBOyBdGoKZtIH9dNvjZeIig0.mft (raw, json)
Hash identifier: vRU1Zgy6otL81gYFY6X1oPuW/BFa5Gj/vGiODtLhxj8=
Subject key identifier: DD:FA:2F:C2:56:2B:69:92:93:10:51:45:EB:03:C6:1B:E4:29:84:25
Authority key identifier: A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
Certificate issuer: /CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
Certificate serial: 019CAC0FA2C56EA56DAAFF19026BB470DA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
Manifest number: 09AA
Signing time: Mon 02 Mar 2026 01:00:31 +0000
Manifest this update: Mon 02 Mar 2026 01:00:31 +0000
Manifest next update: Tue 03 Mar 2026 01:00:31 +0000
Files and hashes: 1: 5sg8jhdzeaiLeEp6wxZ_2JeXdD4.roa (hash: liGuxIjPN3BQno0UGJZyTCNg4Fr30OK1nNLU8WxYRpQ=)
2: pqBZBOyBdGoKZtIH9dNvjZeIig0.crl (hash: MUwbWOe5bsCtlSugnJzD/iDLkFALrRIxUAbJDuXKKPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a2:c5:6e:a5:6d:aa:ff:19:02:6b:b4:70:da:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
Validity
Not Before: Mar 2 01:00:31 2026 GMT
Not After : Mar 3 01:00:31 2026 GMT
Subject: CN=ddfa2fc2562b699293105145eb03c61be4298425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:f5:44:0a:73:de:88:0e:82:57:6f:4e:62:
37:5c:bd:71:ad:62:f6:c6:0a:6d:ec:29:d3:d1:4d:
b8:1f:ab:55:02:2b:ea:1e:2e:b7:bf:66:0a:02:0d:
89:c3:f8:1d:c8:ed:c2:eb:60:e4:f8:e5:4e:28:14:
9f:b6:81:4a:a0:ea:72:38:1b:ce:94:8a:f4:c8:d1:
94:95:4d:34:e9:ad:3e:fe:5d:7a:43:60:e0:1e:d1:
9d:68:a4:92:89:a2:24:ba:60:97:7f:06:3d:d2:3c:
ea:96:78:e2:0c:6b:cb:61:9c:d3:09:3e:2f:4c:1c:
d2:b8:06:80:d3:a5:59:19:30:1a:7d:dc:a7:a3:1c:
8a:d5:9c:47:cc:74:e4:2c:d6:ee:04:1f:68:0c:d7:
be:d8:50:d5:31:55:43:f7:08:8e:a7:ef:53:89:d8:
c5:0b:a0:3c:c5:08:d7:ad:19:be:fd:1d:f2:dd:ca:
4f:de:19:73:72:eb:e8:eb:35:b5:2b:64:53:f1:1a:
79:d3:48:d8:25:14:4a:73:46:70:22:d2:ea:9e:1c:
0b:f1:92:b3:d6:c7:dc:b7:1d:d7:da:b7:04:74:61:
e5:c8:1d:bd:27:18:71:1d:6b:df:9f:19:d4:4b:e4:
84:a4:9f:15:42:8e:a2:a2:d3:c8:9b:88:a2:8e:5b:
b0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:2F:C2:56:2B:69:92:93:10:51:45:EB:03:C6:1B:E4:29:84:25
X509v3 Authority Key Identifier:
keyid:A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f7:99:e6:a6:fd:3e:5a:7a:b7:e3:d8:3a:bc:35:e7:c1:4d:
97:5d:8f:5f:58:08:51:5a:7d:b7:83:e1:77:6c:b6:30:00:22:
fb:dd:3d:18:a4:ab:08:de:06:89:97:63:de:44:86:b0:b0:bc:
2f:98:9a:e0:af:47:a6:a4:86:08:f2:4d:52:b2:7a:d1:81:27:
69:00:c6:53:bc:c2:ee:d9:17:a2:71:94:aa:43:db:e5:6a:1e:
00:95:d1:71:22:4f:35:7a:85:8e:37:5c:1e:0c:ef:d8:14:17:
74:dc:06:53:4e:18:46:c3:43:50:85:c7:ec:f2:8e:0b:d3:99:
8e:2f:c5:de:25:24:5a:91:e9:5f:b3:9d:56:e7:71:dd:0c:03:
78:e8:5e:cc:79:64:ec:c0:b9:23:9c:df:ee:08:af:35:fc:16:
ad:cb:34:e3:fa:05:67:d3:da:2a:d2:86:58:a2:4e:36:d3:82:
2f:8b:8f:b7:20:ad:cb:91:2d:7b:97:2e:84:ef:ec:dc:93:c9:
b9:9c:a2:a3:65:35:31:d9:71:c5:4a:fe:c2:ac:a4:6b:70:f0:
38:c2:fa:74:6c:cc:e0:fa:19:14:9c:84:82:19:ec:10:2b:d3:
58:42:9c:55:99:e1:f3:36:70:18:a0:1f:1f:d4:60:57:c2:a4:
33:d1:11:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD6LFbqVtqv8ZAmu0cNqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTA1OTA0ZWM4MTc0NmEwYTY2ZDIwN2Y1ZDM2ZjhkOTc4
ODhhMGQwHhcNMjYwMzAyMDEwMDMxWhcNMjYwMzAzMDEwMDMxWjAzMTEwLwYDVQQD
EyhkZGZhMmZjMjU2MmI2OTkyOTMxMDUxNDVlYjAzYzYxYmU0Mjk4NDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaL1RApz3ogOgldvTmI3XL1xrWL2
xgpt7CnT0U24H6tVAivqHi63v2YKAg2Jw/gdyO3C62Dk+OVOKBSftoFKoOpyOBvO
lIr0yNGUlU006a0+/l16Q2DgHtGdaKSSiaIkumCXfwY90jzqlnjiDGvLYZzTCT4v
TBzSuAaA06VZGTAafdynoxyK1ZxHzHTkLNbuBB9oDNe+2FDVMVVD9wiOp+9TidjF
C6A8xQjXrRm+/R3y3cpP3hlzcuvo6zW1K2RT8Rp500jYJRRKc0ZwItLqnhwL8ZKz
1sfctx3X2rcEdGHlyB29JxhxHWvfnxnUS+SEpJ8VQo6iotPIm4iijluwpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN36L8JWK2mSkxBRResDxhvkKYQlMB8GA1UdIwQY
MBaAFKagWQTsgXRqCmbSB/XTb42XiIoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFCWkJPeUJkR29LWnRJSDlkTnZqWmVJaWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYjUxYzktYjM3Yi00NzY3LTg4ZDkt
NWRmNmE0NjMwMzViLzEvcHFCWkJPeUJkR29LWnRJSDlkTnZqWmVJaWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zYjUxYzktYjM3Yi00NzY3LTg4ZDktNWRmNmE0NjMwMzVi
LzEvcHFCWkJPeUJkR29LWnRJSDlkTnZqWmVJaWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPeZ5qb9
Plp6t+PYOrw158FNl12PX1gIUVp9t4Phd2y2MAAi+909GKSrCN4GiZdj3kSGsLC8
L5ia4K9HpqSGCPJNUrJ60YEnaQDGU7zC7tkXonGUqkPb5WoeAJXRcSJPNXqFjjdc
Hgzv2BQXdNwGU04YRsNDUIXH7PKOC9OZji/F3iUkWpHpX7OdVudx3QwDeOhezHlk
7MC5I5zf7givNfwWrcs04/oFZ9PaKtKGWKJONtOCL4uPtyCty5Ete5cuhO/s3JPJ
uZyio2U1MdlxxUr+wqyka3DwOML6dGzM4PoZFJyEghnsECvTWEKcVZnh8zZwGKAf
H9RgV8KkM9ERHA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:56 2026 by rpki-client