Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: 4S89w4V32Iby0w0BKGU6/sXNrTGYKQjXniewDvnE8m4=
Subject key identifier: 5D:E1:22:D1:5A:02:3D:08:38:44:14:50:28:E7:75:D7:6F:9B:C3:AF
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 019EBF233AB015C3584EDFF81FD3AD79BE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 0838
Signing time: Sat 13 Jun 2026 04:00:17 +0000
Manifest this update: Sat 13 Jun 2026 04:00:17 +0000
Manifest next update: Sun 14 Jun 2026 04:00:17 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: wi/5c2FGD7rpLYwFqOjHNexIQjkp1MQ9SB25D4B3U5I=)
2: q4Ty8nMMQ4uHQ_jd585KCsdADRE.roa (hash: mEEFLdBEQ2NqJsxoY/z4GLGz394s4HaBIKdAwtz8jWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:3a:b0:15:c3:58:4e:df:f8:1f:d3:ad:79:be:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Jun 13 04:00:17 2026 GMT
Not After : Jun 14 04:00:17 2026 GMT
Subject: CN=5de122d15a023d083844145028e775d76f9bc3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:8e:42:fa:f1:c6:64:1d:79:4c:81:ba:91:
83:e8:2e:a9:98:46:8a:f8:57:a3:d2:19:b0:c9:de:
4f:df:fd:db:84:0d:91:06:99:16:89:53:2d:88:45:
b5:34:0f:c6:52:ab:6e:c9:23:34:c7:8c:d6:40:63:
73:3a:c0:d2:71:da:29:b5:79:78:f9:f9:c0:b5:66:
49:d3:41:bf:60:7a:0c:ae:f6:07:13:e1:59:17:e0:
b9:17:9b:23:dc:9e:a6:7f:5a:c8:c4:7c:23:18:26:
00:3f:a8:3c:3a:22:00:e1:6c:4c:2c:07:2c:79:e4:
84:84:0b:34:66:f0:d0:f4:37:3f:94:cd:b0:dd:7d:
25:ce:7b:06:da:14:b6:1a:88:d3:b5:6e:43:14:d8:
53:6b:40:05:d0:13:6a:ab:93:3d:d3:35:13:3e:64:
6a:e5:32:fe:13:8e:9d:e4:1a:24:90:b3:81:10:7a:
66:d2:24:91:f2:21:d2:3d:75:23:26:e4:52:1f:42:
86:c2:32:7a:a0:f4:66:8f:be:15:39:f1:08:f0:c4:
2e:31:3d:d9:1a:ef:f1:b3:86:de:db:db:0f:6f:45:
d3:2e:7e:ec:03:73:bc:ef:b0:57:63:7a:25:85:b9:
d3:cf:43:86:45:01:60:cb:20:fe:6c:4b:96:db:4e:
ab:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E1:22:D1:5A:02:3D:08:38:44:14:50:28:E7:75:D7:6F:9B:C3:AF
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:da:e0:e5:04:57:6d:52:7d:03:89:b2:bc:ce:df:18:78:bc:
fe:43:9b:a6:d2:64:59:2f:54:ab:2c:bd:7e:42:db:13:66:c3:
b1:a2:1b:90:b8:70:e9:e7:da:40:46:bd:f3:35:96:aa:46:66:
16:9e:fb:95:9f:c7:57:1b:c0:22:f2:d5:af:fd:ec:b9:8c:de:
f3:81:48:3c:eb:4a:37:5b:51:74:bf:8e:f2:cd:c4:83:e7:66:
c4:cd:b8:83:31:1a:25:d8:f3:4e:51:10:d9:96:89:8a:5a:04:
68:9c:76:72:bd:f2:89:39:fa:1f:9e:9d:82:1c:60:fe:76:e7:
1e:90:e4:77:b2:b2:1a:62:74:d2:26:0a:d7:4d:a6:d2:b1:db:
3a:03:80:7f:20:a7:d7:f1:3b:b1:01:9f:e9:53:79:a3:2f:78:
be:25:54:68:70:e6:be:16:ee:11:c0:a1:47:b0:a7:c3:a0:d1:
71:79:21:c3:53:3e:96:f2:61:00:21:53:3c:0b:3f:93:62:84:
d8:96:42:7e:6c:5f:de:42:4a:cd:51:2e:cb:4c:96:a8:ae:4b:
fe:21:24:66:0e:c6:37:91:33:91:48:46:4f:4c:5f:6d:b8:7d:
89:1c:6b:32:2b:e0:3e:dd:cc:57:9f:92:19:4d:d1:5f:62:10:
4e:01:40:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:37:24 2026 by rpki-client