Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: E2pjlbmwODEQVATZRRFpVGfRot78CPiSumPSuyciyGY=
Subject key identifier: 67:21:A4:8D:DC:72:3B:B3:70:06:C3:F6:1E:64:01:AF:7D:74:B9:7D
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 019D9F64ACC20A920D496749D59192384632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 0481
Signing time: Sat 18 Apr 2026 07:01:08 +0000
Manifest this update: Sat 18 Apr 2026 07:01:08 +0000
Manifest next update: Sun 19 Apr 2026 07:01:08 +0000
Files and hashes: 1: JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa (hash: AXBExwmU9H7oRMKiGRczo0VIey6hczqitFMjI0jwK5E=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: uH0sFk/fvx88KjAHf4X7EsCuQZSWi9qzK7tfLBmx8ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9f:64:ac:c2:0a:92:0d:49:67:49:d5:91:92:38:46:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Apr 18 07:01:08 2026 GMT
Not After : Apr 19 07:01:08 2026 GMT
Subject: CN=6721a48ddc723bb37006c3f61e6401af7d74b97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:27:98:37:be:d7:fc:9a:29:19:60:d6:e9:
f6:e6:eb:0e:96:75:d1:84:59:17:7b:6a:e5:41:be:
5c:13:c3:fe:62:6c:00:20:fa:ba:c9:52:da:e7:16:
02:34:4a:de:e9:24:5b:73:22:c8:28:45:57:a7:88:
83:20:3f:11:8e:37:79:53:ce:7c:b5:0f:d1:ba:19:
f8:27:21:98:c3:3d:1a:6a:85:2d:cf:ea:75:52:7f:
23:6d:9d:75:5f:04:b9:42:88:0d:d1:7b:4e:69:cb:
e9:fb:bd:23:68:d5:55:a0:7a:eb:13:ea:fc:49:18:
cf:61:2f:7a:34:53:24:bf:7c:7b:ca:69:82:d0:dd:
5c:c8:56:f8:22:83:fc:92:49:bd:6a:ae:43:4d:0b:
b3:4d:89:8c:7e:50:56:5c:2d:c2:93:e7:a8:80:e7:
41:f7:3a:f5:98:5d:ac:fc:ac:d7:fe:0d:4f:8c:ea:
e1:96:b2:bf:66:66:1c:01:85:4b:93:4e:b6:c8:76:
ec:62:41:ca:57:04:7b:3a:49:6c:18:11:e7:57:77:
ee:35:5a:ab:3b:d0:fe:97:d6:a0:e2:40:79:6a:fc:
ff:8d:3a:71:37:af:3e:d4:6b:ff:82:75:dd:17:16:
c5:f8:88:27:b9:26:e9:9c:bd:7f:90:65:37:48:a2:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:21:A4:8D:DC:72:3B:B3:70:06:C3:F6:1E:64:01:AF:7D:74:B9:7D
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ff:a1:7c:0c:2c:e2:61:07:19:db:13:fc:f8:bf:1b:8e:09:
b7:12:72:3e:11:7d:4c:7c:b9:27:1a:c4:86:28:f3:80:0c:1c:
99:48:13:db:85:53:57:6f:87:5f:56:67:17:07:d2:ef:82:14:
06:8d:26:da:a9:ce:4b:7d:ec:07:73:30:69:17:63:b3:8f:cc:
4f:13:ba:6d:f8:a2:ba:21:a5:61:92:52:ae:f6:97:de:9d:d0:
ad:1f:22:7c:38:fa:4c:34:da:f3:d1:ef:8d:c3:f2:c9:f2:b7:
b2:f1:5b:71:9d:6d:0d:3a:3c:e0:90:91:3b:af:b9:ca:d1:07:
dd:6f:a3:63:8d:2f:85:d5:e3:06:a2:cf:5d:a7:e0:27:2c:75:
2d:12:38:bb:3f:ff:00:7b:54:14:83:b6:c1:19:19:1c:de:ea:
ac:18:18:55:3d:f4:db:34:82:de:62:85:9a:61:57:a6:8b:79:
c5:76:c0:2b:60:2b:fd:dc:d8:14:e4:83:3f:b2:6e:47:cd:57:
13:a3:d4:e0:54:f5:5b:3c:ab:5d:84:2e:65:a7:6f:c7:1a:3b:
ee:eb:13:63:1d:77:cc:9a:36:e4:f0:13:6e:7c:23:2d:60:67:
1e:7d:2c:e8:f2:1b:ac:31:1b:4f:94:15:72:3a:50:92:a9:e5:
88:6b:58:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:07:49 2026 by rpki-client