Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
File: PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft (raw, json)
Hash identifier: KO7RoosirbkHd3vaXd2bFk2r+hoJKm+qn/5lBEAHeHA=
Subject key identifier: 78:B9:42:23:7E:30:80:1E:17:E4:70:E2:56:72:32:00:34:1D:D5:3C
Authority key identifier: 3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
Certificate issuer: /CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Certificate serial: 019CAB6C0C76F33BCA23B0CB4F275D46D5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:01:50 +0000
Manifest this update: Sun 01 Mar 2026 22:01:50 +0000
Manifest next update: Mon 02 Mar 2026 22:01:50 +0000
Files and hashes: 1: 9_KMCCpdv__dNX3XCcGQGoY_t7E.roa (hash: 4J310WOIoaFhdk7Rws5ylL5JHddp0w2bpHJlXbfEDWM=)
2: PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl (hash: sRS9kblR+mqOL33SWJoFXk9jvCfBppjX2XKzUwbiNsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6c:0c:76:f3:3b:ca:23:b0:cb:4f:27:5d:46:d5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Validity
Not Before: Mar 1 22:01:50 2026 GMT
Not After : Mar 2 22:01:50 2026 GMT
Subject: CN=78b942237e30801e17e470e256723200341dd53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:0b:3a:4d:70:0a:03:30:71:a2:4f:69:89:
fc:d8:f6:c1:3f:c6:fe:b4:c6:a6:82:e2:ec:cd:5b:
c0:64:13:95:44:31:eb:bd:c1:09:d5:84:18:d5:e3:
cc:69:aa:4b:df:89:c3:8a:c3:7d:8a:39:61:b6:0a:
c8:4c:9a:f9:34:e0:46:b9:30:79:dc:98:e8:3c:9c:
23:68:f1:af:55:79:a8:01:bd:70:eb:14:76:53:8f:
a0:87:4c:0f:a1:9c:b1:b5:11:a8:d3:eb:e2:ab:43:
de:fd:4a:92:5e:91:ac:8c:98:f1:70:f2:04:d9:5e:
c6:fe:00:c8:bc:a7:d0:ee:96:1b:9f:e1:00:de:af:
8e:f2:ac:35:79:fc:0f:af:88:84:cd:21:0e:3e:10:
ba:4b:8d:3b:d7:84:97:b9:15:2a:18:59:35:19:e4:
e5:72:03:fb:53:b3:9a:2e:8f:c5:53:4e:e2:a3:25:
b2:9d:51:f6:17:f4:d3:8a:b6:34:01:0c:29:10:50:
8b:4d:2d:9d:98:6e:db:f9:69:44:c9:6e:cb:ac:0f:
be:53:da:1c:1d:c7:91:f4:4f:c3:1f:a9:b1:e0:04:
62:c6:17:46:5c:ee:c1:e1:5d:d6:70:29:02:c1:8c:
9a:3e:ea:4a:e6:b5:23:8f:aa:45:38:90:5f:63:9c:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B9:42:23:7E:30:80:1E:17:E4:70:E2:56:72:32:00:34:1D:D5:3C
X509v3 Authority Key Identifier:
keyid:3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:78:cd:c4:cd:5f:f1:56:62:75:67:7c:97:a8:29:65:74:7f:
d0:55:f9:e5:7a:ea:8a:c6:03:6a:79:6b:bb:cf:12:b6:6f:97:
4d:49:96:27:57:a4:7d:f4:ec:20:d0:0f:ff:84:1b:92:f7:80:
b8:f3:23:60:7a:7c:17:9f:c4:68:f4:d5:52:ed:5b:fc:d2:a9:
d0:c0:da:3d:47:d6:60:00:b3:40:1f:c2:0f:ba:2d:be:b8:1d:
4b:06:aa:74:ec:c3:7b:bd:09:f3:1c:70:57:a6:c2:99:5d:f4:
6f:16:9c:04:c0:c5:cf:d7:fa:41:06:64:c5:b5:a8:6d:fb:08:
2e:3f:e9:7a:6c:e9:bd:50:42:a8:e2:b6:b9:22:15:e0:56:67:
55:c6:4d:c5:e8:4b:10:c2:de:7f:d0:91:6a:07:37:05:3f:d5:
60:c1:38:c1:45:f5:0d:d1:c7:46:59:10:86:1f:60:d8:76:05:
68:2c:5b:70:44:a4:4b:37:6b:31:f9:2b:cb:71:ff:08:e0:e2:
6b:28:d5:26:93:38:3a:5c:cf:2e:f9:00:d5:1d:28:58:b9:cf:
0a:56:39:ce:b0:37:c5:17:8d:80:7a:77:c6:7a:fa:6b:7e:b3:
15:cb:e5:3d:da:7a:6b:14:46:78:39:c8:f3:60:be:42:08:a8:
87:cf:c9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:41 2026 by rpki-client