Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json)
Hash identifier: 8uNS4DNGMXOtxzFlPThmkTX2q7PoJBatCceWNe8/8b0=
Subject key identifier: 42:49:6D:7D:66:BF:AB:50:72:DC:7D:D0:8D:5C:36:66:63:CC:EF:0E
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 01A12B44F921C8AD38F94671B44739D5477F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
Manifest number: 13D8
Signing time: Sun 11 Oct 2026 14:01:42 +0000
Manifest this update: Sun 11 Oct 2026 14:01:42 +0000
Manifest next update: Mon 12 Oct 2026 14:01:42 +0000
Files and hashes: 1: gIBhWboHIlbVLsOrG6_KrzVsgsg.roa (hash: JloPm0symVV0m3PFdsgfuUWNtGXtbv/UJhvDlmOgv8I=)
2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: Z4y+JpPHyEoewczWRbLaHQ9DNlFtI9tyAHbaHxrf7jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:f9:21:c8:ad:38:f9:46:71:b4:47:39:d5:47:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: Oct 11 14:01:42 2026 GMT
Not After : Oct 12 14:01:42 2026 GMT
Subject: CN=42496d7d66bfab5072dc7dd08d5c366663ccef0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:f7:0b:f1:f5:fc:14:83:49:a7:9d:82:c9:
1c:52:a0:97:29:29:86:b7:8c:2c:1a:e1:c9:e3:3d:
6a:eb:40:e7:72:1d:95:3a:77:e4:f6:03:23:aa:fd:
56:7e:9c:0e:fe:fe:ca:a0:d5:65:ad:29:97:40:b4:
06:8a:73:29:0e:52:26:8e:40:28:72:57:d5:44:29:
88:09:79:ee:38:1a:39:21:09:3f:ed:b5:b9:e4:83:
df:3a:ee:dc:c0:32:05:6d:26:b1:4a:3e:fb:55:a6:
f2:3a:0c:c4:ae:47:a9:9e:68:17:56:0a:f7:df:ac:
ab:a3:1f:65:d5:68:3c:fe:d7:bd:75:58:21:3e:95:
9c:25:54:8b:fd:9d:db:c2:0e:3d:81:b2:c6:bc:68:
96:77:fd:24:94:a0:23:9a:08:2f:65:9e:b9:8a:76:
70:06:fe:be:b7:6a:25:55:6e:fe:b2:f6:5c:8e:eb:
1f:c6:5a:5f:d5:eb:c5:5f:9a:d6:93:92:b1:d8:60:
6b:e6:ef:1a:8e:c8:93:32:05:6b:72:80:d9:dd:0f:
7b:b0:34:24:1a:7c:b5:b2:36:bc:82:76:77:76:f4:
6a:31:00:e3:c0:ba:52:38:cd:f5:43:cc:e4:08:9c:
dd:59:b1:55:69:90:2e:cc:fd:df:b6:56:1a:27:8b:
4c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:49:6D:7D:66:BF:AB:50:72:DC:7D:D0:8D:5C:36:66:63:CC:EF:0E
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c0:19:1e:94:38:f5:71:ff:8a:e2:c7:25:89:6f:1b:ea:91:
2c:0e:f4:9d:95:15:4d:da:60:79:cc:8c:f6:88:43:23:c0:2d:
d6:e6:d3:92:91:02:4b:e2:14:53:e4:c6:fc:6f:df:cc:a0:ac:
98:49:67:f4:39:7c:0c:9a:97:4e:05:1b:8d:fd:2f:49:63:c2:
18:f9:97:aa:dd:7b:50:b1:42:2d:4a:4e:ca:5d:71:bf:29:68:
02:ec:5f:4c:d2:fb:cd:ec:b5:e0:d8:24:3c:14:37:ea:47:7b:
39:da:a8:f6:6f:61:1d:9f:9e:3a:ce:5c:93:a1:d4:a3:8a:fd:
23:cb:e0:36:e9:7b:f1:5a:7d:9c:7c:d0:2f:b5:77:7f:a6:21:
6d:19:64:88:12:91:9c:32:9e:d9:48:b7:e2:3a:96:d6:9d:1b:
8a:e2:01:81:9b:3c:06:35:66:eb:cb:f2:c3:50:9a:e8:7e:f2:
38:d4:ed:f9:4d:43:09:28:1d:47:19:ec:a6:43:aa:0d:ea:e9:
ba:34:6e:8e:dc:93:e3:1c:cb:a0:f3:5b:e0:a5:b1:72:b3:f5:
05:52:3f:a2:53:37:e1:40:40:4f:92:2b:ac:2d:9e:2d:2e:47:
50:d2:0d:16:f1:bf:37:bd:68:b9:52:81:2b:0c:05:92:76:89:
38:1e:a1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:39:25 2026 by rpki-client