Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
File: pnQBXVCbXU85bqNjNp6ddP-tdZM.mft (raw, json)
Hash identifier: S1Zr0Pj4SASG6x9LeRPJCx1P0j1ZYG5jzOpuAgQaX4s=
Subject key identifier: AD:06:A4:1B:CB:E1:3C:59:3D:5D:3B:CC:4F:82:04:E3:BF:37:32:2F
Authority key identifier: A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
Certificate issuer: /CN=a674015d509b5d4f396ea363369e9d74ffad7593
Certificate serial: 019D99D095008779C8C0A6C74BC76C9BAE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
Manifest number: 175B
Signing time: Fri 17 Apr 2026 05:01:16 +0000
Manifest this update: Fri 17 Apr 2026 05:01:16 +0000
Manifest next update: Sat 18 Apr 2026 05:01:16 +0000
Files and hashes: 1: aHohvmZrJOOZrpMAIOpcUZD835k.roa (hash: Lfp+q62MRXSn7ts6IZsilj9kYQPjsgFts0IvrL3U2wc=)
2: pnQBXVCbXU85bqNjNp6ddP-tdZM.crl (hash: hZ3WoP1rgRY/ojUIeIqbfhLTcSTLwNEHZVsyRC+K04Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:95:00:87:79:c8:c0:a6:c7:4b:c7:6c:9b:ae:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a674015d509b5d4f396ea363369e9d74ffad7593
Validity
Not Before: Apr 17 05:01:16 2026 GMT
Not After : Apr 18 05:01:16 2026 GMT
Subject: CN=ad06a41bcbe13c593d5d3bcc4f8204e3bf37322f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:3e:4e:78:d8:5a:d8:74:80:13:5f:6d:b2:
80:fd:f4:0b:c2:ae:c7:57:7c:30:2e:4e:02:f9:4b:
0e:94:13:52:5a:1e:86:1f:81:d1:fc:cd:d4:e4:8a:
ac:de:f8:71:bb:b8:f0:59:ff:eb:18:15:d8:40:57:
ab:98:af:40:72:91:1b:2a:af:38:65:df:82:ae:53:
fb:70:aa:07:2e:c5:73:f2:ad:28:b2:f3:29:a5:43:
c6:d3:c3:7d:dc:51:47:26:10:b7:01:fd:22:c3:af:
00:00:c5:32:ea:82:1c:31:9a:f2:81:be:32:5a:30:
e3:57:42:52:7a:de:2a:e6:21:c7:9a:8f:b7:15:5e:
7e:e6:39:64:0d:a7:6f:d8:ce:3c:c4:a8:d5:fd:d2:
93:85:79:96:77:4f:41:9c:ba:c0:56:6d:1e:04:67:
a6:69:b1:01:f3:88:a1:f5:d8:fb:38:d8:9d:19:fa:
60:70:19:05:73:47:93:54:8b:68:7b:a7:f2:74:e1:
53:a3:d0:4a:9a:2e:bc:65:81:8c:13:a4:fc:fb:1b:
83:26:6a:d8:3c:c5:97:ba:5a:8c:33:b4:6d:02:81:
a1:8b:3a:d7:f3:b2:20:bd:1c:87:97:46:eb:50:0c:
bd:3d:00:49:65:46:1a:ca:fa:e1:c9:70:02:8e:d4:
82:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:06:A4:1B:CB:E1:3C:59:3D:5D:3B:CC:4F:82:04:E3:BF:37:32:2F
X509v3 Authority Key Identifier:
keyid:A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7d:e2:e4:f5:ad:b4:71:84:84:87:d7:20:dd:26:3a:4c:ee:
23:e6:ba:dd:0e:16:e4:9c:5b:44:24:a6:bc:ba:6a:c4:2b:10:
fa:2d:af:d8:56:1d:6b:e2:5b:3c:d3:76:b5:b9:52:28:c6:0d:
a4:4f:87:8b:bb:5f:fe:5a:7f:da:71:22:c9:bf:86:68:97:f6:
66:56:50:fb:bb:1b:8f:d6:a0:e8:27:a2:75:65:47:eb:11:ef:
80:19:f5:97:07:21:3a:8d:dd:0f:8b:88:f8:42:d2:70:52:b6:
11:96:ce:11:fa:73:bb:c4:38:a5:86:87:02:e2:48:2e:25:2d:
ee:e2:5a:8a:57:0f:a9:a0:f2:2e:4c:29:ab:84:65:22:a9:f2:
6b:4e:6d:af:e9:b6:41:c0:38:f2:e0:97:3f:81:0f:b6:c4:78:
d0:87:ff:52:bb:3b:41:98:12:7a:85:ae:53:43:d0:bd:15:1b:
f8:df:25:2f:dd:47:55:1d:05:c0:85:b6:02:11:95:01:45:a7:
ca:88:00:b8:39:34:67:c2:a2:56:39:0c:b3:ae:68:f5:8c:e2:
d9:55:0d:5d:8b:5c:d8:98:98:7c:df:41:61:db:a8:b9:69:08:
a3:43:8b:d4:09:62:9e:48:77:f4:65:34:fe:c8:fa:a0:55:4b:
bb:9d:42:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:35 2026 by rpki-client