Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: NKoa7yVvxTe2NIimPxVDKn+D1snkAPwSHtOOqRQP47I=
Subject key identifier: 53:EB:C0:C8:4D:42:C7:DC:E8:3A:58:2B:F4:06:CD:96:87:14:6A:A7
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 019D99994340FC2FA760FC94C4A1175826E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 07A0
Signing time: Fri 17 Apr 2026 04:00:51 +0000
Manifest this update: Fri 17 Apr 2026 04:00:51 +0000
Manifest next update: Sat 18 Apr 2026 04:00:51 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: IfWP1hzdr4snp9PhQ4zkx+Het0VfpsENDRqHk9dpcUc=)
2: q4Ty8nMMQ4uHQ_jd585KCsdADRE.roa (hash: mEEFLdBEQ2NqJsxoY/z4GLGz394s4HaBIKdAwtz8jWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:43:40:fc:2f:a7:60:fc:94:c4:a1:17:58:26:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Apr 17 04:00:51 2026 GMT
Not After : Apr 18 04:00:51 2026 GMT
Subject: CN=53ebc0c84d42c7dce83a582bf406cd9687146aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:43:f3:fc:fc:70:a8:ed:a5:3e:46:16:80:
e3:38:64:50:b9:18:cf:30:4b:8b:19:70:5a:5f:5b:
94:b3:cc:0e:93:db:e2:34:ce:4e:1b:14:77:8b:e4:
06:63:93:98:37:41:82:18:b5:78:84:37:94:58:d7:
e3:d6:62:0e:e8:fc:79:f4:e7:8b:1f:5f:f6:5b:14:
b2:1c:d4:8e:03:60:24:11:c0:9e:07:8a:7e:42:18:
5b:3b:cd:4a:3a:ac:87:45:1d:c5:df:75:28:25:ec:
ce:b7:1b:44:2a:2d:db:9f:ee:9b:09:81:ec:55:36:
8b:63:03:69:4e:f4:94:83:05:db:5e:6c:f2:6e:c8:
a7:ec:4c:f0:c8:5f:f9:63:f8:58:91:77:80:55:d5:
46:e7:29:05:06:22:4d:c4:ea:e3:10:52:6d:9c:a2:
62:62:9b:28:39:a6:7f:6b:48:6e:e7:c7:e7:60:a6:
4e:d3:58:df:91:3d:29:0b:d7:2c:b5:95:2e:79:71:
36:4d:8a:ee:bc:2b:04:90:91:98:7d:99:08:a0:a0:
11:d7:2b:7c:f0:dc:ac:00:7d:cb:ac:ae:aa:a8:06:
40:7c:82:35:f9:84:34:db:2b:ff:c1:3d:0e:db:d6:
f8:07:3c:45:68:44:b6:b7:32:0d:fb:b6:c6:47:4e:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EB:C0:C8:4D:42:C7:DC:E8:3A:58:2B:F4:06:CD:96:87:14:6A:A7
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:39:ab:93:ff:6e:df:ac:e1:70:27:13:1a:77:4e:05:fd:73:
21:4d:c2:b1:6f:20:10:b7:c7:ff:de:f2:f7:59:45:0d:74:03:
cc:b6:b3:28:38:20:09:96:6e:ee:58:49:8b:52:2b:47:c7:a1:
8e:90:8d:08:8a:48:09:a9:08:a2:16:64:dc:fd:85:9a:99:31:
44:11:f2:8a:92:e0:44:2f:d6:88:b9:38:23:16:9c:0a:b3:c5:
c5:4f:5b:75:72:1c:c0:83:dc:09:f3:b8:1e:16:46:7e:ec:7e:
42:a4:f7:12:8f:11:74:ff:59:7f:f7:70:aa:87:3c:6b:cd:5f:
17:6d:86:50:d5:96:46:27:f3:e2:80:e9:81:cc:75:73:32:3d:
d4:02:f1:bb:b6:d6:df:3d:a9:4d:45:34:9b:11:21:e6:75:2d:
73:1e:e5:81:df:c7:bf:db:67:95:4b:f6:81:da:2a:47:e0:2a:
92:b9:7d:72:53:ca:bb:a3:71:9e:ec:4b:08:52:6b:4d:d6:58:
91:78:d4:ba:9a:01:6d:1f:9f:0f:6d:ac:26:82:6a:09:d0:14:
39:02:84:62:26:bc:18:67:50:50:4f:ee:a8:a9:ff:83:f2:ee:
d4:b3:91:dd:78:13:57:1f:66:b5:30:a5:db:23:a5:e1:be:e7:
64:38:0a:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmUNA/C+nYPyUxKEXWCbiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMDFiZDk0OWM1NWVkMDdlNzAyNDJlMTUwMzNkMGE4NDc0
YTllMWEwHhcNMjYwNDE3MDQwMDUxWhcNMjYwNDE4MDQwMDUxWjAzMTEwLwYDVQQD
Eyg1M2ViYzBjODRkNDJjN2RjZTgzYTU4MmJmNDA2Y2Q5Njg3MTQ2YWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdBD8/z8cKjtpT5GFoDjOGRQuRjP
MEuLGXBaX1uUs8wOk9viNM5OGxR3i+QGY5OYN0GCGLV4hDeUWNfj1mIO6Px59OeL
H1/2WxSyHNSOA2AkEcCeB4p+QhhbO81KOqyHRR3F33UoJezOtxtEKi3bn+6bCYHs
VTaLYwNpTvSUgwXbXmzybsin7EzwyF/5Y/hYkXeAVdVG5ykFBiJNxOrjEFJtnKJi
YpsoOaZ/a0hu58fnYKZO01jfkT0pC9cstZUueXE2TYruvCsEkJGYfZkIoKAR1yt8
8NysAH3LrK6qqAZAfII1+YQ02yv/wT0O29b4BzxFaES2tzIN+7bGR04tHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPrwMhNQsfc6DpYK/QGzZaHFGqnMB8GA1UdIwQY
MBaAFD0BvZScVe0H5wJC4VAz0KhHSp4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDkt
ZTRlMGI1NTVhZDU5LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDktZTRlMGI1NTVhZDU5
LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTmrk/9u
36zhcCcTGndOBf1zIU3CsW8gELfH/97y91lFDXQDzLazKDggCZZu7lhJi1IrR8eh
jpCNCIpICakIohZk3P2FmpkxRBHyipLgRC/WiLk4IxacCrPFxU9bdXIcwIPcCfO4
HhZGfux+QqT3Eo8RdP9Zf/dwqoc8a81fF22GUNWWRifz4oDpgcx1czI91ALxu7bW
3z2pTUU0mxEh5nUtcx7lgd/Hv9tnlUv2gdoqR+Aqkrl9clPKu6NxnuxLCFJrTdZY
kXjUupoBbR+fD22sJoJqCdAUOQKEYia8GGdQUE/uqKn/g/Lu1LOR3XgTVx9mtTCl
2yOl4b7nZDgKfA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:28 2026 by rpki-client