Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier: ssmxAqEg/Tg/igkxPq0cIteItcwprQAl7g6Vi/e3V6Q=
Subject key identifier: 04:A8:E7:35:6F:99:1F:1A:95:FC:89:36:7B:4B:69:65:08:B5:6E:CC
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 019CAA21BE9AD22F8B75E7DB17A501608C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number: 1773
Signing time: Sun 01 Mar 2026 16:01:04 +0000
Manifest this update: Sun 01 Mar 2026 16:01:04 +0000
Manifest next update: Mon 02 Mar 2026 16:01:04 +0000
Files and hashes: 1: 1-UtCMLoYpQTccw0rAaKnjr3aeP4.roa (hash: N8latQNhGiEjvdqVYf+HsgaWPueV4r0S9nawy713xeE=)
2: 1-aNnq3G-3Uph4CDICNHGtMEexzM.roa (hash: COcKotvyQgXvt7JUDGUl9yoEfHAlHiTxt2Sp6dfcn4M=)
3: 5O5myP0lF1xP1jJEoQe9pSgv1NY.roa (hash: 1Ly5GkaJNn9NGiJHBbBhR411FTMTwdqj9zg5X4o1rJs=)
4: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: Lo4iGhG0IoK6afDw5jVy0rxTA1bCoCISPaxC0anj1eo=)
5: QB5DaA1MIwR5ikAvXA3gM5FxDQY.roa (hash: QVnUg9rir6hPV0SWbkI+uNhJZ6Bpm1g1EMmNwsSmgyI=)
6: Zae_gMNSGLYpjvDka3zKlP-S3hQ.roa (hash: KFAqhbt9W5g+ZaeRsfu703acWAo0iC27yLXUw/eFD2k=)
7: dBqvOag7Vn6SMH5-RRqsLXHXhvA.roa (hash: l+RlXCW7RTqPoNsvx1EDw/ugEa8VniO9ekXCbH/csAk=)
8: eIAvi_fRWFUTaXHfkY48zizgI6I.roa (hash: zlK7AxneUnvHvJcK0AMBNR80xbI0s9cOUQ5f2N58mBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:be:9a:d2:2f:8b:75:e7:db:17:a5:01:60:8c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Mar 1 16:01:04 2026 GMT
Not After : Mar 2 16:01:04 2026 GMT
Subject: CN=04a8e7356f991f1a95fc89367b4b696508b56ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:86:bf:29:c2:df:4a:98:de:56:b8:81:6d:
7e:17:72:8d:30:0b:50:cd:28:3d:28:17:34:72:4f:
9b:31:ab:04:1d:33:ee:8e:3b:88:90:bf:9b:c7:f8:
ac:35:c6:24:ae:17:27:07:a9:3c:3d:f6:e2:1e:5c:
b4:ca:1a:73:f5:08:90:cd:3f:d8:1e:8d:dc:fd:b8:
71:f8:79:8e:11:90:0b:00:68:85:87:6c:91:17:47:
53:98:5d:46:a0:0d:fc:28:c4:dc:b8:46:cf:ea:dc:
fb:c2:3d:d2:9c:4a:b8:58:55:77:3b:9a:1e:95:da:
76:01:21:3c:d3:ca:9f:77:8f:ff:53:71:c1:9f:83:
d8:c6:26:f4:6f:b5:74:77:28:3e:24:b6:ad:2c:ef:
f0:83:4a:39:3a:23:fd:6a:fb:65:a9:04:ee:54:33:
bc:f9:9a:9d:61:63:05:6b:58:6d:70:80:4f:b1:5e:
70:3c:20:bd:07:aa:83:01:bb:01:8b:fb:12:5b:90:
26:73:07:39:6e:a8:26:9d:de:eb:4c:30:d5:a8:fe:
ad:0d:65:42:1b:41:16:ee:fd:97:5a:24:42:b1:c6:
8a:28:b5:ee:81:e4:af:80:8c:1a:85:35:81:50:19:
65:16:66:2b:7b:08:18:2d:63:2c:d9:a0:04:a4:5e:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A8:E7:35:6F:99:1F:1A:95:FC:89:36:7B:4B:69:65:08:B5:6E:CC
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:84:21:de:6a:1d:9f:aa:e7:de:ed:ad:df:9b:04:a1:bd:32:
bc:82:be:e5:46:26:88:8b:c0:16:5d:eb:46:9c:e7:e6:64:32:
0f:d4:d7:0c:95:65:18:07:37:e5:8a:d0:20:24:14:d6:db:8a:
75:78:ad:f7:40:f9:5e:1a:4b:20:8e:10:b0:eb:f8:0e:d9:ba:
a3:e3:cd:b6:98:3f:25:a7:0f:0e:24:6c:e4:c8:7c:e6:17:c9:
29:ed:00:32:ac:78:b6:51:32:3a:2e:81:50:75:1d:14:7e:c1:
dc:46:ac:51:82:8f:06:31:fe:fc:21:96:06:c1:c2:40:c5:96:
c1:c1:75:e2:ee:cb:15:53:1e:6f:99:87:03:ac:e1:20:28:e8:
86:91:b0:46:d1:28:15:3d:14:31:5e:d2:dd:e0:e3:38:01:27:
62:62:b8:f7:1d:cb:d7:2e:49:a7:76:aa:37:9e:53:b9:fb:27:
3e:d8:73:00:10:c5:43:87:3f:95:11:93:38:38:dc:41:5d:3f:
79:2f:db:d8:15:f8:f7:a5:f7:15:ab:be:51:0f:a2:bd:85:2d:
37:34:10:db:a2:27:0b:e1:15:92:28:13:0a:3b:62:68:ab:de:
3b:03:74:56:bd:58:d3:d7:c2:41:c2:87:48:c2:01:b2:8e:62:
4f:eb:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:20 2026 by rpki-client