Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json)
Hash identifier: OpsSCp3uZG74eu4JsBcLQv5a/4x7LmBUz6J3cGpZQnc=
Subject key identifier: 56:A6:5B:78:AD:E8:29:47:2D:F2:83:A7:CA:BA:48:F1:85:95:F6:44
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 019CAC47104F1E169D1B33FC19A7DED2EB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
Manifest number: 1184
Signing time: Mon 02 Mar 2026 02:01:04 +0000
Manifest this update: Mon 02 Mar 2026 02:01:04 +0000
Manifest next update: Tue 03 Mar 2026 02:01:04 +0000
Files and hashes: 1: gIBhWboHIlbVLsOrG6_KrzVsgsg.roa (hash: JloPm0symVV0m3PFdsgfuUWNtGXtbv/UJhvDlmOgv8I=)
2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: TSskDdfJZ26c8kJU0fmJZm1B1I5oC4MSxGMwclGQ+ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:10:4f:1e:16:9d:1b:33:fc:19:a7:de:d2:eb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: Mar 2 02:01:04 2026 GMT
Not After : Mar 3 02:01:04 2026 GMT
Subject: CN=56a65b78ade829472df283a7caba48f18595f644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:74:22:be:2d:05:0e:c9:62:d1:83:97:ff:d9:
ce:23:67:3c:00:a2:65:cf:d3:23:8e:1a:54:40:21:
5c:bf:d7:f1:6a:b6:b2:19:c3:cc:1e:37:43:ba:21:
79:f0:e6:4a:ce:2e:c1:30:5c:9d:1a:0b:6f:bd:34:
d2:4a:94:62:5d:00:7c:77:2a:80:67:18:8c:74:bc:
cd:df:64:d5:4e:43:d6:50:33:bd:b6:1c:f1:55:23:
9d:67:9e:92:ec:a3:75:3a:b9:a3:de:f2:aa:21:2f:
84:73:4b:75:3b:34:d0:a3:59:83:7d:15:1b:ad:c0:
3f:c3:40:90:ef:c7:64:39:65:93:04:c9:ea:a6:9d:
d2:59:b2:8e:a3:1b:9a:a1:7a:cf:d2:9d:f8:37:25:
d4:bc:0d:f8:65:ac:26:f2:ec:9c:1a:44:c9:93:9b:
99:95:95:72:c0:f2:3c:8e:a5:e0:4a:14:66:75:c6:
c4:c3:59:52:50:32:66:70:7b:cb:a4:63:ec:7e:81:
cd:dc:14:36:e4:a2:1f:15:c1:5f:f1:8a:43:fe:28:
c5:7f:56:9e:c5:30:ca:80:c4:11:b9:83:3f:03:f6:
dc:32:63:f0:9f:39:ab:ef:15:51:67:6a:02:1f:1a:
e3:3b:e3:6c:a5:da:38:e0:03:ce:fc:fb:ed:76:1f:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A6:5B:78:AD:E8:29:47:2D:F2:83:A7:CA:BA:48:F1:85:95:F6:44
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ca:c5:94:36:6e:59:54:1d:8f:36:ce:82:06:a7:8a:32:b2:
6e:23:75:ba:e3:59:fd:5f:a8:d5:10:db:1b:6d:b2:50:91:c3:
30:1e:96:82:f4:bc:45:52:be:43:e2:6f:38:27:f0:72:8f:fe:
93:da:a3:f2:72:ab:60:b7:75:f8:96:a3:ba:52:f1:f5:1a:83:
da:2a:23:cd:a9:a6:42:2e:ba:9b:ce:5f:5f:20:fd:de:ab:3e:
ca:6a:8b:87:5a:66:de:89:5a:09:07:a0:37:74:83:d4:19:20:
1a:31:43:89:d2:4a:2b:ee:08:79:9c:ce:c4:31:68:bd:05:d4:
3f:3b:e4:ba:95:62:f0:2f:7d:dc:fd:35:85:01:f1:f2:87:73:
f4:d2:c0:23:e6:76:48:e7:60:65:a3:96:a3:11:ef:02:f6:04:
01:42:3d:16:64:cb:63:40:3d:b0:10:8f:44:53:99:13:49:e0:
54:17:ca:0b:47:de:9d:e2:52:cc:ac:d9:e5:6f:dc:d9:c7:a3:
6c:0a:17:dc:5c:aa:5e:26:5e:80:d3:54:51:c3:df:98:bb:80:
05:87:14:e8:4c:29:42:ee:e2:f5:bb:b1:49:e0:bf:03:2b:3e:
14:61:db:52:85:1c:15:1c:e5:b1:27:07:1d:77:4a:41:06:44:
92:89:ff:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRxBPHhadGzP8Gafe0utiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MDllODY1NzZjMDY1ZTE0YmZiZWU4ZjY1MmFiNmMyNzlj
Y2RlMTIwHhcNMjYwMzAyMDIwMTA0WhcNMjYwMzAzMDIwMTA0WjAzMTEwLwYDVQQD
Eyg1NmE2NWI3OGFkZTgyOTQ3MmRmMjgzYTdjYWJhNDhmMTg1OTVmNjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nQivi0FDsli0YOX/9nOI2c8AKJl
z9MjjhpUQCFcv9fxarayGcPMHjdDuiF58OZKzi7BMFydGgtvvTTSSpRiXQB8dyqA
ZxiMdLzN32TVTkPWUDO9thzxVSOdZ56S7KN1Ormj3vKqIS+Ec0t1OzTQo1mDfRUb
rcA/w0CQ78dkOWWTBMnqpp3SWbKOoxuaoXrP0p34NyXUvA34Zawm8uycGkTJk5uZ
lZVywPI8jqXgShRmdcbEw1lSUDJmcHvLpGPsfoHN3BQ25KIfFcFf8YpD/ijFf1ae
xTDKgMQRuYM/A/bcMmPwnzmr7xVRZ2oCHxrjO+Nspdo44APO/Pvtdh+WiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFamW3it6ClHLfKDp8q6SPGFlfZEMB8GA1UdIwQY
MBaAFKUJ6GV2wGXhS/vuj2UqtsJ5zN4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODct
YTBmNTc0MmIxYjA0LzEvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODctYTBmNTc0MmIxYjA0
LzEvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcrFlDZu
WVQdjzbOgganijKybiN1uuNZ/V+o1RDbG22yUJHDMB6WgvS8RVK+Q+JvOCfwco/+
k9qj8nKrYLd1+JajulLx9RqD2iojzammQi66m85fXyD93qs+ymqLh1pm3olaCQeg
N3SD1BkgGjFDidJKK+4IeZzOxDFovQXUPzvkupVi8C993P01hQHx8odz9NLAI+Z2
SOdgZaOWoxHvAvYEAUI9FmTLY0A9sBCPRFOZE0ngVBfKC0feneJSzKzZ5W/c2cej
bAoX3FyqXiZegNNUUcPfmLuABYcU6EwpQu7i9buxSeC/Ays+FGHbUoUcFRzlsScH
HXdKQQZEkon/IA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:23 2026 by rpki-client