Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: qITlPz3IBJMI4w84QoEDppbS3vpGpuey51CNdk3aqzc=
Subject key identifier: E9:A8:CC:59:15:FE:FD:03:4E:B0:23:27:85:B1:A6:58:42:B8:B0:D4
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 019CAC102F8D76003D32A1ABE16A827CB571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 0403
Signing time: Mon 02 Mar 2026 01:01:07 +0000
Manifest this update: Mon 02 Mar 2026 01:01:07 +0000
Manifest next update: Tue 03 Mar 2026 01:01:07 +0000
Files and hashes: 1: JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa (hash: AXBExwmU9H7oRMKiGRczo0VIey6hczqitFMjI0jwK5E=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: BD/YT2kpzx1wbSLbnB1iHyoIy3dybNaIn/i6mHS2y4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:2f:8d:76:00:3d:32:a1:ab:e1:6a:82:7c:b5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Mar 2 01:01:07 2026 GMT
Not After : Mar 3 01:01:07 2026 GMT
Subject: CN=e9a8cc5915fefd034eb0232785b1a65842b8b0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:d9:4e:8e:d2:3a:9c:b7:bb:47:16:27:de:
b2:ff:b6:ff:a7:5a:1a:7d:24:44:32:51:4c:f1:05:
62:6c:aa:dd:c9:30:52:da:87:89:69:84:49:31:38:
54:03:64:73:9b:bb:f8:12:5b:1b:f0:4e:0d:46:61:
d9:1d:74:5e:21:0d:29:dd:c1:36:ef:41:e0:04:0c:
cc:d1:3d:9a:bc:e7:95:ad:d4:94:00:d8:38:82:64:
71:ba:c4:53:31:4d:cd:24:ab:b9:b2:4e:24:3f:e1:
e8:89:03:b1:3f:76:1e:e5:cd:de:f0:bb:97:ae:af:
d2:fd:53:2a:d4:cc:cd:12:ca:4e:fe:6e:c7:22:ff:
ce:77:e1:a9:b5:1b:f1:03:26:9a:7e:9e:55:3c:52:
5f:ee:b0:c2:b0:9e:f1:cb:6c:b7:93:5a:3e:12:c6:
d4:86:33:98:1b:63:75:70:43:a2:6a:1b:d6:aa:f2:
25:0a:2b:e3:db:80:b7:ed:5a:f9:b6:e7:12:79:54:
a3:23:0d:91:36:f1:08:a7:b5:0d:39:a4:7a:9b:ba:
8e:5b:22:09:64:93:9a:65:f3:b2:73:c1:9b:86:b9:
4a:d8:1a:b5:ed:be:5d:e7:40:45:3e:8c:de:0a:a7:
07:9d:60:e1:f6:33:60:87:96:50:35:5c:c5:0c:90:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A8:CC:59:15:FE:FD:03:4E:B0:23:27:85:B1:A6:58:42:B8:B0:D4
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e9:bd:5b:b5:b5:82:26:c2:f7:7e:ff:3c:4c:24:e8:e8:e2:
27:48:1e:50:29:14:43:a1:ba:fd:72:2b:29:c0:10:87:64:8c:
a3:cf:ad:f3:00:0e:f2:10:1b:e4:ff:b5:70:87:3a:65:bf:a2:
30:e2:53:13:04:8b:bb:90:b5:be:d1:42:77:f6:a2:27:8e:7c:
6f:c7:6c:88:34:75:e8:9f:16:0a:a4:83:9d:09:1c:c5:b0:f5:
aa:97:1d:4f:82:ce:75:f3:d4:fa:5b:7b:52:03:2d:4f:1c:13:
1c:d8:17:28:b3:93:0e:ed:41:fb:9f:0e:ff:f5:2f:45:c2:93:
df:1a:c2:aa:9e:4a:14:b7:82:65:66:9f:37:f6:3e:7d:0f:f8:
eb:eb:bd:c8:70:0a:fd:6d:9b:18:ea:52:cf:d2:89:6a:0b:a0:
21:8f:e0:6b:86:b7:64:90:f7:2f:75:a7:bb:24:38:bb:b3:fc:
44:86:09:fa:b5:be:c5:fe:42:db:60:3e:a7:32:cd:e5:b0:46:
39:e5:ac:e4:b1:bb:ae:00:60:b6:ed:a3:82:c1:1b:1c:f9:6f:
de:82:9b:0e:38:5b:8f:d7:46:d5:4b:6b:ba:79:17:d3:d0:c0:
52:9f:0b:e4:52:3e:06:82:d1:79:e7:15:1c:17:ec:5b:33:44:
5e:30:0c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:58 2026 by rpki-client