Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
File: pnQBXVCbXU85bqNjNp6ddP-tdZM.mft (raw, json)
Hash identifier: U5boYNnH9Fe4AttegQTzIusvxaFwhMr4B3yhB5jkK6k=
Subject key identifier: 12:F2:9C:A7:F1:C4:EF:D0:72:1C:BA:B5:FE:E2:F1:B9:75:6D:64:FA
Authority key identifier: A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
Certificate issuer: /CN=a674015d509b5d4f396ea363369e9d74ffad7593
Certificate serial: 019CAA587D3F51F25DB819F2317D42581D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
Manifest number: 16DF
Signing time: Sun 01 Mar 2026 17:00:51 +0000
Manifest this update: Sun 01 Mar 2026 17:00:51 +0000
Manifest next update: Mon 02 Mar 2026 17:00:51 +0000
Files and hashes: 1: aHohvmZrJOOZrpMAIOpcUZD835k.roa (hash: Lfp+q62MRXSn7ts6IZsilj9kYQPjsgFts0IvrL3U2wc=)
2: pnQBXVCbXU85bqNjNp6ddP-tdZM.crl (hash: 8VoVuF3tZrj/AMuLgTAHZkrYq9U1oNB3aKu7RiUkI5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:7d:3f:51:f2:5d:b8:19:f2:31:7d:42:58:1d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a674015d509b5d4f396ea363369e9d74ffad7593
Validity
Not Before: Mar 1 17:00:51 2026 GMT
Not After : Mar 2 17:00:51 2026 GMT
Subject: CN=12f29ca7f1c4efd0721cbab5fee2f1b9756d64fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:1f:19:4d:03:a0:5e:a5:fc:25:fe:42:22:
7a:0e:a1:b3:78:a3:4d:7e:b5:7e:42:89:38:ed:b6:
e7:ad:ba:40:c9:8a:29:29:55:cf:16:47:95:cc:88:
45:24:09:10:1a:c9:78:a9:5c:71:72:18:4f:bd:1e:
f5:21:58:79:94:e3:6c:22:27:22:c8:a4:70:4d:b1:
37:64:a4:60:06:8b:fa:13:2a:d4:76:8c:66:54:b7:
87:61:78:e8:7e:00:44:b0:cc:84:e5:1e:c8:3a:a0:
15:73:06:6a:29:bb:27:1b:77:e0:e7:c6:94:b7:5c:
26:d7:97:85:1d:a2:e5:45:08:5b:be:54:62:c2:9f:
8c:02:e3:ff:9f:d9:25:4d:7c:04:8a:35:79:2a:b6:
5b:bf:43:cc:8d:4d:5e:4a:12:58:71:db:a4:75:f9:
9e:86:18:d3:a4:66:5f:bd:2d:d6:9d:10:fa:76:df:
67:2b:c5:ac:1a:7d:92:0e:5f:69:f0:ec:e3:57:99:
23:8a:86:a6:d6:1c:24:f7:7c:50:30:b9:b2:fc:aa:
4c:2a:9e:d8:df:88:37:b8:de:68:be:68:06:06:be:
fa:b8:e6:a4:33:cb:e0:56:62:d2:4c:99:52:05:86:
05:b7:eb:48:51:51:ab:2f:72:ba:23:e5:8a:df:9d:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F2:9C:A7:F1:C4:EF:D0:72:1C:BA:B5:FE:E2:F1:B9:75:6D:64:FA
X509v3 Authority Key Identifier:
keyid:A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:46:46:b1:2d:62:9d:bb:7a:71:65:3f:9c:43:06:8d:c0:0c:
a9:1a:6a:e3:03:e6:83:3b:45:ef:0f:1e:8a:2a:a2:0a:f6:79:
c5:17:c8:10:c0:31:17:2c:ec:69:db:9b:16:7a:b7:85:6d:d8:
1b:17:11:1c:cf:1e:4a:f4:60:4f:f4:9a:d0:c6:e7:38:3f:0e:
98:5e:58:1e:b7:46:05:09:51:94:03:1e:1b:95:41:e5:0b:59:
57:95:1a:16:57:7a:69:d1:64:25:5a:1f:07:80:00:1d:b6:b1:
23:cc:0d:0e:26:59:83:27:1d:dd:99:c4:55:56:54:50:eb:b1:
d1:65:b6:e1:36:47:d5:ac:aa:d7:1c:3b:e0:0a:31:62:1a:a3:
79:37:8f:55:98:fa:2b:c7:16:73:a2:29:07:1b:55:34:5b:91:
5e:eb:28:ce:45:9d:c9:f0:6c:56:00:f6:24:63:89:94:71:86:
f8:d6:53:86:b6:82:51:1a:b8:62:21:9d:ff:a9:23:8e:73:4f:
3f:2f:5b:d0:cd:0f:b9:0a:4e:69:73:22:97:85:6f:ba:b7:42:
19:3a:38:61:3b:60:c1:14:8b:33:82:2f:07:ed:60:8a:ea:4c:
fa:58:74:37:8e:50:7c:dd:98:31:55:21:0a:1d:39:5c:0f:7e:
d3:d0:47:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:54 2026 by rpki-client