Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
File: pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft (raw, json)
Hash identifier: tK9zC2raff9kta3cpTCwIoU5dO7vT9D7Nhl5jUxbOUw=
Subject key identifier: 9E:86:62:84:7A:2E:2F:09:3B:3C:14:63:11:59:17:C3:97:97:68:42
Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
Certificate issuer: /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Certificate serial: 019CAE6C606289C58002E0140960FD579FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
Manifest number: 0272
Signing time: Mon 02 Mar 2026 12:01:03 +0000
Manifest this update: Mon 02 Mar 2026 12:01:03 +0000
Manifest next update: Tue 03 Mar 2026 12:01:03 +0000
Files and hashes: 1: 6phx-w5UIxjdX_HJEdkzEKdfgmU.roa (hash: SGPInug9Hk9CwPLCuVMV05j3spVvBaapQvXlXlYZ4gY=)
2: pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl (hash: M3SQMvf5PceSKxkix1F049H2U+0I+mYZq9qjOcfaaIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:60:62:89:c5:80:02:e0:14:09:60:fd:57:9f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Validity
Not Before: Mar 2 12:01:03 2026 GMT
Not After : Mar 3 12:01:03 2026 GMT
Subject: CN=9e8662847a2e2f093b3c1463115917c397976842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:f3:e8:53:a9:c1:ed:04:f0:76:4e:ac:2b:
d7:8f:a0:86:62:5c:d3:1b:a0:c3:e9:2a:0d:7a:3a:
5f:dc:b7:5b:eb:23:37:30:43:8a:43:01:fd:85:e6:
b5:45:20:e7:f0:4e:e8:31:5a:e3:f0:e3:5a:6c:43:
cf:52:f6:79:84:b5:cb:64:7f:16:b3:7f:bf:a6:70:
41:98:18:0c:99:5f:f3:97:b4:19:85:32:2e:3b:42:
e3:fb:db:9b:5d:ad:54:15:05:34:c3:2e:cf:c3:22:
f2:a1:de:2f:d3:c3:48:81:5c:1c:f2:7b:fc:4a:51:
d9:e2:a6:fa:69:19:12:21:18:32:3b:0c:49:77:88:
67:0f:c8:74:cb:92:a7:8b:f9:7b:e4:80:21:ec:46:
95:cd:cc:ab:a8:2b:97:86:91:5e:6a:02:a9:cd:03:
27:cb:70:75:d0:07:10:22:1f:d0:0e:84:4f:72:5e:
d2:7b:47:0c:88:f8:45:ce:a9:fa:bf:69:ab:8e:82:
77:eb:5b:83:90:a9:69:31:4c:bc:3e:39:9d:64:ed:
3a:12:7d:68:10:1e:a8:ef:40:cc:ed:f7:bf:29:1b:
3e:48:e6:ac:69:48:3c:c5:5f:59:5d:37:78:b3:2c:
28:f7:96:b5:22:06:10:a6:20:c6:b6:df:26:9d:cb:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:86:62:84:7A:2E:2F:09:3B:3C:14:63:11:59:17:C3:97:97:68:42
X509v3 Authority Key Identifier:
keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8d:b8:3f:70:eb:fd:43:22:49:80:15:74:38:85:f1:a0:bd:
d5:14:5b:41:34:a4:6f:bb:ff:90:74:89:4c:3d:f0:52:10:b3:
4b:45:28:31:4f:cc:2a:38:7f:7f:d0:43:ee:a0:54:81:59:47:
65:92:16:03:e1:0f:a4:38:2f:9f:11:81:1e:d5:b6:3a:68:0e:
d4:14:73:a1:20:2d:1a:a6:b9:4d:3e:f7:88:ee:cb:28:9c:14:
1a:23:1f:b9:3c:7d:d7:fd:a5:c8:7e:01:6f:b4:ca:cb:94:57:
55:34:ce:ae:e1:cb:99:16:d6:63:69:1b:e3:86:64:37:a6:91:
d9:4a:96:f8:58:ef:f9:09:23:6a:16:a4:0c:db:f5:20:81:81:
9e:79:54:68:4e:97:9c:39:c1:07:a8:f6:ff:db:7b:41:87:dc:
0b:a7:da:05:97:c9:7b:3d:c5:d1:74:99:0f:fd:8b:92:ac:06:
59:2e:f9:e3:2a:c7:8f:3f:47:13:d4:f9:7a:71:17:f6:bc:1e:
5e:75:ba:b5:c3:b1:3c:be:ba:60:70:2c:11:bc:ab:27:63:96:
14:bc:3a:34:a8:3f:d9:16:b8:32:cf:14:56:57:f0:56:59:68:
0b:8f:ed:fa:7b:46:c8:65:d0:b1:e3:3d:7c:8d:7e:0b:f6:0e:
bb:dd:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:46 2026 by rpki-client