Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
File: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft (raw, json)
Hash identifier: wC+HxqMS+Zny1IugCPkzuqDUQsxWY20BXYsxpWz1ZN4=
Subject key identifier: 95:F3:DC:B2:14:26:7D:7B:6E:1C:16:90:7F:46:43:CF:70:8F:79:20
Authority key identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
Certificate issuer: /CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Certificate serial: 019CAB6BB1C28DFEE4064748087816E0F842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
Manifest number: 0CF9
Signing time: Sun 01 Mar 2026 22:01:27 +0000
Manifest this update: Sun 01 Mar 2026 22:01:27 +0000
Manifest next update: Mon 02 Mar 2026 22:01:27 +0000
Files and hashes: 1: ZRxGcXvKI-87TaBioLr7loAqnqU.roa (hash: fDFlR6aMmLPDNdY7x4FSn6o3uvA+KJ98lgCNqqUl5I8=)
2: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl (hash: eZZ1wUC6frKcj6Y9N9md9csul9MK49PfFTPC3hmWUCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b1:c2:8d:fe:e4:06:47:48:08:78:16:e0:f8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Validity
Not Before: Mar 1 22:01:27 2026 GMT
Not After : Mar 2 22:01:27 2026 GMT
Subject: CN=95f3dcb214267d7b6e1c16907f4643cf708f7920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:2d:ce:8b:1b:1e:de:13:09:e2:ff:9d:67:
8e:3e:eb:33:d7:7e:29:d2:72:58:32:e4:28:26:96:
b6:c4:01:bf:2a:b0:c5:6d:77:3c:c4:e5:6f:68:0a:
4a:3b:99:8c:dd:13:17:b2:3d:58:06:48:6c:aa:27:
63:5b:9d:7e:f7:9c:76:85:71:f7:2b:0d:09:da:00:
46:a6:ac:da:ea:c3:e3:10:43:f4:e7:e7:28:4e:07:
2c:ae:03:10:22:5e:f8:d0:ba:69:05:9d:62:d0:95:
e2:be:ef:47:d1:08:71:55:54:73:a9:be:af:56:cb:
dc:38:4a:7d:08:42:40:c1:8e:33:e0:31:27:e2:4b:
e2:63:89:27:d9:62:b7:ed:48:75:b1:92:b4:25:36:
c5:43:f1:45:17:6b:78:73:ca:6b:24:0f:c0:de:3e:
6e:a3:b2:0a:40:44:94:cd:eb:45:ef:10:6f:09:b9:
de:90:a8:8b:de:54:ad:e9:31:44:12:1c:44:c9:c4:
48:e2:f3:be:c1:60:97:67:4b:6b:76:81:38:a3:aa:
cb:ea:71:81:4e:48:f2:e4:51:36:44:2b:3c:b5:ce:
fa:ed:9b:10:46:57:0b:a3:5f:d1:08:64:f6:6d:25:
fe:66:24:35:bb:b0:cc:2d:c7:15:ae:6b:ac:59:b5:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F3:DC:B2:14:26:7D:7B:6E:1C:16:90:7F:46:43:CF:70:8F:79:20
X509v3 Authority Key Identifier:
keyid:A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c9:68:97:ed:22:44:b6:08:09:2b:cd:99:93:01:de:b8:18:
f2:15:c9:32:ad:5a:28:ae:e4:89:1c:72:d9:44:e4:d2:e6:55:
4b:03:20:54:62:8d:52:92:47:98:b0:50:00:c8:5a:ce:c9:0b:
43:ec:2a:45:f9:eb:eb:28:19:2b:32:4a:90:72:b9:f2:52:aa:
90:bc:ac:cd:cf:d3:44:d8:f6:ef:56:ab:cb:ff:3b:e6:d2:77:
da:ec:27:a7:ef:d3:74:ba:ae:dd:11:40:90:fc:78:2f:7c:48:
85:88:e4:ea:60:d3:48:28:b4:3e:e7:85:52:07:c7:76:9a:8e:
81:f0:c1:d8:dd:4f:81:7a:ad:7c:14:fc:87:a4:1e:b2:d4:c8:
d1:a7:0b:2e:fc:dd:2d:89:b3:97:8a:94:61:18:e6:64:6d:a9:
4d:06:ad:9c:4f:67:a9:af:af:ff:16:5c:40:10:8f:b2:4b:d7:
3d:16:9c:69:14:a8:e6:4a:f6:ee:2d:93:e8:b4:0d:c8:80:8e:
5c:0a:82:b4:b8:32:0c:30:31:53:f3:ae:ae:48:31:b7:86:93:
30:a9:5b:f9:fa:22:61:67:ae:8e:59:1f:ce:df:08:9b:b7:d8:
cc:0a:95:aa:19:b8:fb:90:1a:41:79:77:b1:d7:42:69:76:d3:
dc:8e:f8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:57 2026 by rpki-client