Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: m1IoFcWL7vpLkzfU6uxraKYAmnJPI4CmF00ej1G1JN0=
Subject key identifier: FB:72:A0:14:EB:AB:55:6F:86:9D:B3:E8:72:38:BA:D2:89:35:76:4F
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 019CAA2140B0AF5464E831F5FFA5F3F9902B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 0724
Signing time: Sun 01 Mar 2026 16:00:31 +0000
Manifest this update: Sun 01 Mar 2026 16:00:31 +0000
Manifest next update: Mon 02 Mar 2026 16:00:31 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: tUe2XtycGwDHw3NVTh5u3cwbv/lNSbpq6gWWpkigGw8=)
2: q4Ty8nMMQ4uHQ_jd585KCsdADRE.roa (hash: mEEFLdBEQ2NqJsxoY/z4GLGz394s4HaBIKdAwtz8jWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:40:b0:af:54:64:e8:31:f5:ff:a5:f3:f9:90:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Mar 1 16:00:31 2026 GMT
Not After : Mar 2 16:00:31 2026 GMT
Subject: CN=fb72a014ebab556f869db3e87238bad28935764f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:91:59:81:83:18:7d:1b:36:b3:59:2a:0f:
a8:bf:fe:75:d0:a8:67:d0:42:4f:cd:b3:ce:9a:34:
df:29:5b:d6:3e:4f:6b:b2:a5:dd:78:a4:16:de:59:
f7:01:5b:03:ac:78:ff:54:18:b4:81:d3:a4:66:87:
26:be:e7:36:0c:a9:9a:db:86:44:a4:e3:a1:c4:6d:
85:a0:b0:c6:55:5b:d7:80:c0:dc:e6:2c:a6:e8:62:
6e:96:20:17:d4:dd:8f:6d:32:30:cd:e4:47:c4:d1:
e7:24:75:13:63:a3:6b:5d:d6:cb:48:15:f6:08:4a:
40:8c:57:49:8b:ad:08:24:22:f6:34:be:65:cc:14:
72:34:27:04:89:f4:b4:9a:6b:22:6b:c0:b3:2a:a0:
b3:b1:ac:ad:21:4a:6e:61:c6:3e:29:e4:46:0b:39:
63:51:64:98:d1:bf:19:75:d4:c4:65:72:da:1a:f0:
f8:01:bb:4b:5d:81:bc:06:c6:de:3c:fa:65:d1:71:
24:51:2a:7e:81:cd:61:da:ab:ed:fa:bd:37:4f:cb:
a7:17:4b:b5:6e:d5:ef:a6:a7:63:98:ef:05:2b:27:
13:25:7c:27:01:cb:e9:f8:16:a3:de:aa:51:6f:36:
15:f6:0b:7b:de:7e:97:40:aa:13:83:8e:39:38:8c:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:72:A0:14:EB:AB:55:6F:86:9D:B3:E8:72:38:BA:D2:89:35:76:4F
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c9:48:d9:aa:d7:23:8b:e5:03:4e:b3:ea:2d:d5:eb:5e:c5:
0b:e1:de:c5:ef:8c:23:79:8a:c3:71:c7:07:3c:2b:88:eb:ef:
36:f6:3b:64:f3:0f:2e:02:aa:39:4a:14:48:2a:07:2a:5f:37:
23:92:e4:e2:92:b9:9a:fa:a6:52:0c:86:ef:43:ef:62:a4:00:
1a:8b:9b:95:fa:1a:03:7b:c8:2b:64:f5:75:30:16:e0:e8:b0:
86:6c:e3:94:2e:14:10:f8:f8:79:68:76:07:71:ea:80:da:0e:
0b:98:4a:91:31:ce:04:1a:e3:11:96:ce:f9:1d:14:9a:c5:49:
66:2b:5d:68:57:d1:87:59:a5:82:7a:02:b5:e2:a1:c1:44:df:
9d:a3:cb:3e:d7:8f:f3:b2:f2:43:6a:57:5d:db:df:46:f2:f4:
64:e6:29:3a:20:c0:94:ea:c8:18:e7:3b:ba:8c:12:b8:b4:cc:
a3:4f:e0:e6:db:4b:fe:ac:7a:03:b3:37:9c:b2:9c:45:aa:91:
4c:9e:51:92:22:5b:80:84:e8:8e:32:d0:05:69:9a:09:ba:51:
28:cd:f2:00:f8:69:42:f9:ff:c5:75:4f:b8:45:ac:d9:cd:a6:
c5:cc:ff:d9:86:48:71:8b:7c:03:1c:a6:0d:cd:08:13:27:8d:
29:b9:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:59 2026 by rpki-client