Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
File: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft (raw, json)
Hash identifier: /Rxt4xBrwGL4MSP+6jdyjsC0PbghKXF7+Qf0+DlIf+U=
Subject key identifier: 52:4B:D2:CE:7B:56:6D:D3:C6:10:13:56:6C:F9:23:30:F3:61:3C:CC
Authority key identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
Certificate issuer: /CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Certificate serial: 019D9AE36D29B9E6B62FF82AE658E81298C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
Manifest number: 0D75
Signing time: Fri 17 Apr 2026 10:01:28 +0000
Manifest this update: Fri 17 Apr 2026 10:01:28 +0000
Manifest next update: Sat 18 Apr 2026 10:01:28 +0000
Files and hashes: 1: ZRxGcXvKI-87TaBioLr7loAqnqU.roa (hash: fDFlR6aMmLPDNdY7x4FSn6o3uvA+KJ98lgCNqqUl5I8=)
2: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl (hash: p83kWvlu1j42DCm/2GT9WDRttE9ARzOswQXacJ1zj6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:6d:29:b9:e6:b6:2f:f8:2a:e6:58:e8:12:98:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Validity
Not Before: Apr 17 10:01:28 2026 GMT
Not After : Apr 18 10:01:28 2026 GMT
Subject: CN=524bd2ce7b566dd3c61013566cf92330f3613ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:a7:a6:1f:f4:65:af:45:8e:55:a1:7f:a5:
46:b4:61:e5:d2:46:20:89:a4:b7:8f:87:70:4a:8a:
c2:aa:41:ef:c4:56:fd:60:45:d7:4e:53:6c:dc:5f:
28:06:b1:36:1e:89:0a:b5:9d:d6:c4:07:35:9f:0c:
4b:c0:61:63:81:5d:8d:1c:84:8e:8f:9d:c6:44:33:
35:ba:1e:c5:7f:97:68:93:5e:60:b2:94:c5:17:da:
d3:65:41:84:f1:c2:4e:9f:3f:83:93:2c:96:d8:f5:
90:63:5a:36:ff:3e:fe:8c:7f:0f:30:e1:44:41:27:
98:be:e2:dd:71:c7:b7:58:0e:01:92:46:32:57:71:
58:e0:5d:03:5e:cf:25:44:27:2c:84:ec:1e:a5:90:
cb:d5:ad:e9:17:f4:08:1a:31:76:75:3e:ba:b3:a0:
17:48:c4:2d:88:b0:47:14:c7:ff:82:d0:39:3b:28:
88:e0:9b:15:0c:72:62:c0:43:9a:0b:50:87:60:0e:
df:21:dc:1d:39:64:35:6a:1c:67:6b:0f:fb:30:06:
12:c3:72:c8:71:a1:04:72:54:8b:9f:9d:1a:9b:9d:
25:b9:4b:da:d4:9a:86:7d:24:9a:4b:a9:3f:60:15:
04:73:df:b3:e6:a4:f0:16:25:22:4f:65:f2:50:ee:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4B:D2:CE:7B:56:6D:D3:C6:10:13:56:6C:F9:23:30:F3:61:3C:CC
X509v3 Authority Key Identifier:
keyid:A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:49:96:8a:6c:ed:b2:b3:da:0f:38:a2:cf:e6:34:aa:99:30:
f6:89:9a:53:53:e6:46:32:7d:1f:ea:96:9e:c9:63:fb:15:bf:
bf:35:29:9f:a0:67:84:e7:2a:62:98:70:c4:ba:4e:e9:15:60:
8b:ff:a9:88:72:f3:95:5c:7b:d9:f6:f2:32:76:67:10:85:31:
7d:9d:85:d8:aa:4f:e8:8e:c4:86:d5:95:34:56:c3:27:e5:50:
5c:93:de:8d:96:2c:6f:5b:28:e0:7e:78:30:76:ec:20:04:47:
27:c0:96:2f:78:af:88:7c:d1:30:04:3c:fe:34:a2:a6:b7:bc:
58:87:b7:cb:84:70:63:9b:eb:67:c1:cb:af:51:2b:b9:d5:54:
40:d6:80:74:5f:2e:50:46:0e:f7:da:b9:0d:e1:02:52:67:ae:
24:fb:cb:d6:be:9b:2d:81:59:42:e7:6f:67:6b:c7:a4:7b:60:
25:de:a4:f5:28:53:2b:fa:42:1c:ad:a9:3b:32:f1:05:95:50:
7d:22:1c:35:f9:4e:a3:26:72:65:47:bf:7a:94:a1:c5:8b:79:
9c:be:6b:a0:70:df:ac:1f:10:c2:6f:00:5d:83:78:08:4a:59:
1f:c4:ee:71:ac:83:ce:93:24:55:09:14:a7:fc:5f:a8:34:d0:
c8:81:13:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:50:31 2026 by rpki-client