Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
File: pQHIn0SCnHLyqVPSorpK4Le1DYo.mft (raw, json)
Hash identifier: Qo/TTP9BWsLfiZwPy1bpw7rHGa/AnfaeN86rSKq9BEA=
Subject key identifier: 5E:5F:EC:77:03:78:34:2A:51:60:14:2D:D9:D0:32:49:37:16:F2:F3
Authority key identifier: A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
Certificate issuer: /CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Certificate serial: 019CAC46BD24854AB4FF9EF22E6E850D07BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:00:42 +0000
Manifest this update: Mon 02 Mar 2026 02:00:42 +0000
Manifest next update: Tue 03 Mar 2026 02:00:42 +0000
Files and hashes: 1: a1cD9EYlmG13NxBr90ciEvptuWA.roa (hash: v81TOP+ZC2LYKrsgbz1s/Hzy51XQ6ECnroV1P/ElVCU=)
2: pQHIn0SCnHLyqVPSorpK4Le1DYo.crl (hash: qdwhFpDIBVDsUb+R6LAKhI58btau6x/RhDTi/umVAfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:bd:24:85:4a:b4:ff:9e:f2:2e:6e:85:0d:07:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Validity
Not Before: Mar 2 02:00:42 2026 GMT
Not After : Mar 3 02:00:42 2026 GMT
Subject: CN=5e5fec770378342a5160142dd9d032493716f2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:1b:38:33:a6:5b:77:8d:a7:a9:9a:04:2b:
d8:eb:3d:7a:ba:1e:2c:04:48:9d:86:f7:94:47:22:
5c:b4:8f:f5:0c:72:74:39:ac:5e:c1:82:1b:b6:9b:
eb:33:fb:8c:3d:9c:8e:82:44:dd:e0:f9:ad:15:f6:
1c:ce:94:ba:35:ba:ba:e9:8e:eb:a5:cc:a9:0c:53:
bd:5a:55:f6:53:9e:75:df:82:b0:c3:d0:c1:f0:e3:
60:05:e8:91:fa:af:30:59:09:26:52:b1:1f:86:ed:
4a:d2:21:de:3e:df:a1:2d:ee:f4:55:d4:c8:22:b6:
26:b2:a3:49:5f:8b:ca:6e:40:8c:b8:87:c3:7d:04:
fb:51:f1:0c:4e:5e:d7:de:3d:f8:9b:b7:ba:4f:34:
6f:a2:fe:f6:a9:f8:94:aa:92:57:b5:42:78:6a:51:
48:d3:ab:02:82:0c:81:ce:8c:17:89:d0:75:2a:e8:
8c:01:37:54:29:71:2f:97:4b:0f:bb:7b:8f:e6:65:
f3:47:44:ab:3b:ef:7b:a7:02:23:2a:75:8f:8e:c6:
b0:eb:f4:77:07:d4:7a:79:99:39:8b:42:ed:87:4d:
b9:31:bc:c3:dc:49:ed:2b:56:26:16:6b:63:d9:f0:
9f:e2:49:8f:3e:f9:57:26:0a:61:0a:b3:af:71:43:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5F:EC:77:03:78:34:2A:51:60:14:2D:D9:D0:32:49:37:16:F2:F3
X509v3 Authority Key Identifier:
keyid:A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:50:b1:cc:d2:38:e2:26:7e:d9:41:d0:76:eb:27:71:89:ef:
ae:b4:93:5a:36:0a:b9:50:c4:55:09:c7:fe:78:c3:b6:b7:00:
22:3c:f1:96:1c:b6:95:59:a9:46:00:53:cd:59:07:68:89:8b:
f2:f9:02:ac:c1:0c:1c:f8:3b:3a:89:20:33:32:28:ad:5d:f1:
91:cc:a7:14:43:e5:a7:fa:ae:b7:90:3e:4c:fe:b3:31:b7:34:
a3:47:e3:0f:dc:87:53:c0:9f:f1:d9:b4:23:74:4e:c6:74:72:
d3:04:35:7e:00:80:6c:31:7a:f5:84:5d:75:97:f7:39:b5:ab:
23:c5:2b:de:aa:9e:31:f9:d3:03:af:f4:be:c2:05:9e:a3:f1:
43:a3:4b:6d:02:09:ba:7e:f3:14:a3:b4:ee:61:81:e1:bd:a9:
9c:25:d1:87:02:14:a3:76:25:28:0e:1b:78:0c:61:70:bd:58:
64:02:4b:eb:23:61:f6:98:3b:20:6a:09:ac:e6:4f:09:5d:3c:
4f:4f:d2:f4:cd:75:ac:e3:6e:97:9c:d9:79:0a:4d:47:5a:6e:
4a:a9:ea:3a:fd:35:2e:51:1e:a2:7b:8a:dc:86:68:37:a5:44:
50:fe:a5:d2:f1:f2:0e:75:41:3c:dd:46:26:44:9b:2a:2b:5b:
d9:ab:70:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:35 2026 by rpki-client