Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: VzDbNFjgkZlbj4N0hHn9xeBiVLWC3nFqRJI9cFjbVE0=
Subject key identifier: 02:5D:46:41:45:1F:90:5A:1E:C0:A0:DF:7A:E0:4A:EB:80:20:04:51
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 019DA34193DA174DE218AD4A38218F5F5489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 07A5
Signing time: Sun 19 Apr 2026 01:01:17 +0000
Manifest this update: Sun 19 Apr 2026 01:01:17 +0000
Manifest next update: Mon 20 Apr 2026 01:01:17 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: EseJ0kIiOqgASCCSoKg4oCAvH0AHxZ7P8Yc3o+sIVVo=)
2: q4Ty8nMMQ4uHQ_jd585KCsdADRE.roa (hash: mEEFLdBEQ2NqJsxoY/z4GLGz394s4HaBIKdAwtz8jWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:93:da:17:4d:e2:18:ad:4a:38:21:8f:5f:54:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Apr 19 01:01:17 2026 GMT
Not After : Apr 20 01:01:17 2026 GMT
Subject: CN=025d4641451f905a1ec0a0df7ae04aeb80200451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:24:27:03:d8:d0:24:c3:40:86:da:bf:8a:
c9:fe:ba:cb:a3:bf:62:a5:d5:a4:47:da:28:4d:e7:
5b:4f:25:41:3f:94:14:71:5a:02:be:8e:0e:e9:77:
bc:e8:42:7b:64:04:df:8d:7c:3f:11:07:57:9d:2e:
dc:f6:02:3a:d7:aa:26:a6:6b:ff:a3:47:e4:b6:96:
69:45:18:91:bc:67:58:9f:ea:8f:39:f8:3b:ab:ed:
96:69:2a:35:d6:82:c3:c3:ef:5c:c9:8b:29:94:27:
28:69:c7:40:28:b7:46:cb:b8:a5:cc:7f:dc:05:b6:
17:a7:cd:c9:c6:1e:dd:52:3d:83:bd:a3:98:7b:de:
05:97:95:2e:89:69:ae:d5:24:6f:97:36:24:fe:fa:
f3:38:99:dc:c4:a5:5a:b4:04:3b:82:cd:c6:a6:58:
19:a9:2d:aa:97:c5:75:52:aa:a2:67:69:c5:56:4c:
1c:c1:b0:62:1f:c2:a4:0d:6b:a2:bc:74:bb:2e:64:
9f:cc:db:b2:38:2d:7e:00:7c:22:e1:f2:87:21:84:
55:59:5f:be:45:03:d2:1a:7f:48:60:f2:64:53:d8:
eb:bd:5e:61:ba:6d:84:13:da:c0:82:1b:03:31:29:
d3:bb:09:64:74:6d:ac:55:ad:08:75:65:0f:b3:14:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5D:46:41:45:1F:90:5A:1E:C0:A0:DF:7A:E0:4A:EB:80:20:04:51
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8a:49:cb:2b:e1:32:62:42:8e:2a:37:40:26:1f:51:d2:d2:
67:ba:8a:92:78:26:f9:7e:fe:39:8f:65:a6:20:4c:5c:6b:e3:
30:1d:fc:b1:97:96:a2:d1:52:25:8b:f6:3c:bd:9c:f7:d3:98:
9c:88:57:ab:40:f8:e3:dd:b8:c5:19:fb:7d:f3:5d:26:e7:ac:
db:ed:bc:ed:36:a8:79:65:68:f0:6a:0d:92:60:0b:f4:c7:fb:
25:c2:da:f1:0b:99:3f:9e:70:a1:59:24:8c:b3:d1:7b:41:42:
65:d3:31:eb:5f:09:15:45:7f:95:2c:b1:8b:00:5b:5d:bd:e1:
e1:c4:1b:2e:8b:89:00:c0:87:ee:c3:de:8b:a3:6a:aa:bf:21:
27:31:6d:d7:0e:9b:c4:4a:2d:0f:f9:90:28:08:ae:9c:9e:00:
51:98:3d:aa:42:bf:c9:53:0b:8d:0c:5d:9a:91:10:e2:e3:5f:
11:63:15:0f:4c:c4:60:72:9d:19:9b:7c:92:89:33:23:fa:f0:
5a:b0:12:80:c0:22:d8:4b:08:77:a5:6b:92:d5:89:bc:a3:98:
62:95:8a:c1:88:df:1b:7a:fe:c3:8c:fc:51:fc:62:54:4a:0f:
ed:f5:fa:f5:2a:f1:c7:e8:49:0a:24:aa:45:e2:d4:f7:e5:59:
bc:e4:92:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jQZPaF03iGK1KOCGPX1SJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMDFiZDk0OWM1NWVkMDdlNzAyNDJlMTUwMzNkMGE4NDc0
YTllMWEwHhcNMjYwNDE5MDEwMTE3WhcNMjYwNDIwMDEwMTE3WjAzMTEwLwYDVQQD
EygwMjVkNDY0MTQ1MWY5MDVhMWVjMGEwZGY3YWUwNGFlYjgwMjAwNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkEkJwPY0CTDQIbav4rJ/rrLo79i
pdWkR9ooTedbTyVBP5QUcVoCvo4O6Xe86EJ7ZATfjXw/EQdXnS7c9gI616ompmv/
o0fktpZpRRiRvGdYn+qPOfg7q+2WaSo11oLDw+9cyYsplCcoacdAKLdGy7ilzH/c
BbYXp83Jxh7dUj2DvaOYe94Fl5UuiWmu1SRvlzYk/vrzOJncxKVatAQ7gs3GplgZ
qS2ql8V1UqqiZ2nFVkwcwbBiH8KkDWuivHS7LmSfzNuyOC1+AHwi4fKHIYRVWV++
RQPSGn9IYPJkU9jrvV5hum2EE9rAghsDMSnTuwlkdG2sVa0IdWUPsxS2wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJdRkFFH5BaHsCg33rgSuuAIARRMB8GA1UdIwQY
MBaAFD0BvZScVe0H5wJC4VAz0KhHSp4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDkt
ZTRlMGI1NTVhZDU5LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDktZTRlMGI1NTVhZDU5
LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYpJyyvh
MmJCjio3QCYfUdLSZ7qKkngm+X7+OY9lpiBMXGvjMB38sZeWotFSJYv2PL2c99OY
nIhXq0D44924xRn7ffNdJues2+287TaoeWVo8GoNkmAL9Mf7JcLa8QuZP55woVkk
jLPRe0FCZdMx618JFUV/lSyxiwBbXb3h4cQbLouJAMCH7sPei6Nqqr8hJzFt1w6b
xEotD/mQKAiunJ4AUZg9qkK/yVMLjQxdmpEQ4uNfEWMVD0zEYHKdGZt8kokzI/rw
WrASgMAi2EsId6VrktWJvKOYYpWKwYjfG3r+w4z8UfxiVEoP7fX69Srxx+hJCiSq
ReLU9+VZvOSSVw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:56 2026 by rpki-client