Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
File: pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft (raw, json)
Hash identifier: AmiDX8DlG5Tn7/UfMklrzDfGWvvCkApGmtWuj49pcUU=
Subject key identifier: 2D:B3:92:04:8B:5C:E7:59:FA:1A:37:95:19:FC:29:54:5B:F5:3C:3C
Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
Certificate issuer: /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Certificate serial: 01A0C70F1F74164732F3C642C8D573AF7BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
Manifest number: 0491
Signing time: Tue 22 Sep 2026 03:00:52 +0000
Manifest this update: Tue 22 Sep 2026 03:00:52 +0000
Manifest next update: Wed 23 Sep 2026 03:00:52 +0000
Files and hashes: 1: 6phx-w5UIxjdX_HJEdkzEKdfgmU.roa (hash: SGPInug9Hk9CwPLCuVMV05j3spVvBaapQvXlXlYZ4gY=)
2: pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl (hash: QQ/sSMmxBlGlpjlNh1EK2hVkgNX15Cm+kcQt/3AYJdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0f:1f:74:16:47:32:f3:c6:42:c8:d5:73:af:7b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Validity
Not Before: Sep 22 03:00:52 2026 GMT
Not After : Sep 23 03:00:52 2026 GMT
Subject: CN=2db392048b5ce759fa1a379519fc29545bf53c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:06:f3:bc:f2:fc:2c:ab:c0:df:1e:80:a2:
71:68:ae:e5:3b:64:44:b8:c1:52:52:e4:78:f1:eb:
6e:c3:9e:6e:88:b2:47:72:26:6d:7e:f6:31:be:c1:
87:02:e1:8e:d2:a7:7e:4a:35:2d:0e:1e:7c:70:b8:
c7:c2:4e:42:22:a7:c5:d6:9e:bc:7c:67:f6:90:a9:
11:04:4f:d8:c7:60:27:7c:6d:af:3d:6f:9d:44:5e:
51:29:50:cc:22:09:5a:f6:a9:5c:db:5e:b1:1b:d3:
5e:96:85:eb:77:ac:79:cf:56:60:ad:47:33:18:4f:
c6:a2:67:f2:f6:2c:e2:37:52:82:64:8a:78:b2:4b:
dc:ed:0b:5a:4a:72:94:29:5a:42:ed:f8:c5:1c:ef:
5e:79:3e:43:5d:16:06:d8:fa:92:bd:f0:02:42:44:
6a:13:9d:83:90:e2:82:90:ae:7b:b6:de:75:12:cf:
26:87:fe:79:8f:1d:0d:78:54:90:46:0f:c4:87:3e:
b7:55:e2:26:03:3d:9b:f6:3d:31:7b:91:3e:51:b5:
37:53:c5:28:29:e4:5f:fb:a0:70:a8:ef:44:c5:a2:
81:78:22:16:33:f3:db:85:15:b5:47:44:b8:cd:5f:
5f:af:37:9a:0c:4d:51:d2:ff:af:84:53:ce:54:e1:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B3:92:04:8B:5C:E7:59:FA:1A:37:95:19:FC:29:54:5B:F5:3C:3C
X509v3 Authority Key Identifier:
keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d9:a6:2f:39:85:30:9a:00:1f:ae:14:eb:ec:fe:ae:72:ca:
24:0a:36:f3:c3:52:65:be:4d:96:b6:12:4e:a3:c0:7f:99:77:
da:cf:e5:30:78:70:e3:e5:ca:8d:cd:bf:7b:ee:81:e8:3e:3c:
2c:20:fd:52:2a:97:d2:17:e2:b8:e0:8f:29:b5:6f:7e:d9:81:
7e:12:9c:6d:2b:f3:ab:8f:c7:5c:42:c4:13:82:96:7c:93:c0:
03:5e:ee:bc:69:59:d4:67:1c:2e:ed:4b:ff:8b:c2:62:39:6b:
b5:88:0e:c5:09:72:e4:fd:25:af:83:bc:9e:65:5d:5f:32:16:
09:f6:bd:a0:43:50:f9:16:c1:b9:30:a3:1a:67:9d:f2:d4:ec:
4b:b0:48:a1:d9:2b:95:23:e8:54:39:9b:a6:59:5c:70:98:46:
9f:70:47:2f:33:51:d5:66:b0:e4:c3:3d:b9:4e:47:99:2a:8d:
bb:1f:d3:47:f5:ad:36:76:d7:91:11:30:8d:1f:16:84:ff:f1:
f0:49:ee:f4:18:69:e1:55:cb:d7:e1:00:68:5d:a0:4f:1a:27:
95:ad:9e:59:8f:b4:89:00:45:e0:fc:8f:ac:d8:e0:4a:fb:b9:
df:c7:36:fe:9b:93:57:50:1c:a5:34:ff:98:59:eb:42:fe:95:
d2:09:b8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:09:05 2026 by rpki-client