Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: uhGPWVkV6X7SrcJ0sWkYMNIIga89qaP3YE6HwyGbWUk=
Subject key identifier: 54:95:F5:95:C3:A3:38:09:60:84:F8:1B:99:BF:03:75:55:A0:D4:CB
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 01A0C88F32CD0B3AFD90432EEBBB4A110821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 0946
Signing time: Tue 22 Sep 2026 10:00:22 +0000
Manifest this update: Tue 22 Sep 2026 10:00:22 +0000
Manifest next update: Wed 23 Sep 2026 10:00:22 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: cPRcyqwkkozS2Da2wyylexhmE06ZupmQb/I2+MrGXpQ=)
2: q4Ty8nMMQ4uHQ_jd585KCsdADRE.roa (hash: mEEFLdBEQ2NqJsxoY/z4GLGz394s4HaBIKdAwtz8jWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:32:cd:0b:3a:fd:90:43:2e:eb:bb:4a:11:08:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Sep 22 10:00:22 2026 GMT
Not After : Sep 23 10:00:22 2026 GMT
Subject: CN=5495f595c3a338096084f81b99bf037555a0d4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:dc:69:e7:d2:fb:6f:80:66:af:ec:dc:32:
ee:bc:10:38:e6:fe:a6:67:d7:a9:3f:47:3e:73:51:
37:30:9f:38:e2:b9:24:c3:03:42:02:90:21:b2:55:
40:94:3d:69:14:1d:48:a3:19:df:12:5e:ed:6b:c7:
97:e3:f4:bd:dd:3b:cb:49:c5:56:19:d2:1f:cd:43:
ea:93:be:d8:fe:2c:f9:79:03:6e:a5:57:31:b6:8a:
43:c5:a6:16:0c:e8:c1:e6:b6:d6:ff:7c:56:c2:e2:
5d:c9:2b:bf:cf:25:14:7e:0d:1c:b4:83:b3:06:d7:
94:20:43:d1:83:9c:9c:b7:51:74:05:1b:a6:d9:72:
2d:50:4c:12:fb:5a:cc:23:02:87:65:9f:81:d1:81:
d6:82:09:c3:68:4d:6e:63:c1:0b:e5:f9:b3:d5:89:
d5:df:03:21:f9:28:e7:bc:8c:2c:fe:00:b9:8d:bd:
10:9f:87:66:2c:b2:b1:a6:3b:0e:7b:b2:20:98:8c:
93:91:75:a3:4c:e9:2d:22:a4:04:b2:5f:60:0b:7a:
ea:5f:f0:ef:84:c8:73:42:13:34:03:ad:7e:30:15:
02:f8:ee:4d:ef:43:f5:06:7f:88:18:08:21:a7:13:
cc:8c:21:4f:93:18:44:34:d8:b8:21:33:73:f6:44:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:95:F5:95:C3:A3:38:09:60:84:F8:1B:99:BF:03:75:55:A0:D4:CB
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fb:5b:16:a4:92:c1:d3:1e:7b:ee:a2:aa:d5:b6:77:54:58:
22:64:d8:fc:c6:2a:65:f9:d5:01:88:b5:59:09:09:e5:c1:75:
cb:a1:96:0b:d2:bf:a3:76:bb:cc:bf:7c:4e:01:25:3c:e0:cd:
09:68:2c:13:34:c2:80:72:07:65:25:93:70:25:59:ae:96:c4:
ab:80:94:cf:38:fe:a2:2b:e5:25:27:71:b8:f1:0e:69:26:8a:
ff:49:fc:98:e5:7d:d3:11:ca:c0:8a:da:77:0f:0a:0b:be:ac:
7b:d3:ba:81:8e:13:b4:46:27:b4:98:15:b4:8b:4b:34:2b:69:
ff:e4:f2:3b:13:1b:8b:ec:56:3d:98:2e:63:06:21:2d:7c:ad:
19:b6:8c:ac:c9:33:85:9d:12:9f:f3:fe:a5:0a:1c:e7:cc:48:
35:ac:16:ee:40:fd:90:76:59:aa:50:a2:2f:d5:ad:f2:b9:2d:
f3:30:03:d2:eb:d0:5d:aa:12:c2:e1:45:53:86:4b:55:76:20:
dc:cd:58:a1:f3:e4:28:68:01:a8:b0:c4:1e:ee:11:c6:a0:ac:
ad:25:a1:47:1e:3d:ea:ea:9a:42:01:f5:ed:e4:d9:f6:db:12:
80:ed:69:89:73:e6:dc:eb:d7:f6:1e:33:eb:08:6f:4c:ae:c3:
46:aa:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:20:01 2026 by rpki-client