Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier: jsP+v4Je8g7Nv53GaDUQkdB7t7sGbYfnnhaR2Sj6wOE=
Subject key identifier: 90:48:B0:59:A8:F6:D3:41:44:BA:45:29:79:F2:39:4E:EB:29:52:78
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 019CAC0FE0F2D78957DAF01038BDE1DCCE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number: 070D
Signing time: Mon 02 Mar 2026 01:00:47 +0000
Manifest this update: Mon 02 Mar 2026 01:00:47 +0000
Manifest next update: Tue 03 Mar 2026 01:00:47 +0000
Files and hashes: 1: gJz6RmgOr74ogolKTIbJJ0khIbY.roa (hash: nc3zZ0AuWIJRv8B+9l+JRXdB9csW2X29DxKckbvvC9Q=)
2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: 1dUBmbouscvlrvcoRqcCRXDhmcTEpPNEf2Vq4PPmkPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e0:f2:d7:89:57:da:f0:10:38:bd:e1:dc:ce:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: Mar 2 01:00:47 2026 GMT
Not After : Mar 3 01:00:47 2026 GMT
Subject: CN=9048b059a8f6d34144ba452979f2394eeb295278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:09:bd:b8:97:20:88:3e:d9:54:36:f2:83:
e2:e0:2c:63:c6:da:bd:f1:01:b2:9b:17:a6:73:fc:
45:63:1b:5a:56:7b:6b:ef:12:e4:8f:04:e2:58:53:
f5:39:5f:60:49:19:85:4e:14:c6:53:e6:0d:87:48:
74:58:14:87:10:cd:a3:6d:24:17:0c:f2:8e:8b:90:
f0:fb:ae:6d:03:93:2f:2b:fb:4e:4c:89:c7:d3:1f:
93:54:91:68:c4:6e:cf:d8:c8:24:9f:36:6a:42:9f:
f7:49:f8:42:18:7e:b3:04:a8:30:36:43:c6:29:ef:
9f:e4:6d:96:ea:81:07:7d:83:f5:e2:35:e2:31:21:
fd:8e:3e:d6:35:71:61:8e:c1:0c:f3:cc:34:66:2a:
4a:19:47:17:ee:09:70:e4:42:c6:16:f6:fe:34:20:
cd:09:21:55:cd:e2:b0:1d:cb:5d:04:92:df:2f:b6:
ea:a3:67:69:4a:be:cd:68:9a:48:bf:2d:d2:9d:35:
8b:cb:5e:4e:9f:a2:c0:0a:41:f7:62:b9:c7:c9:02:
da:49:dc:1e:da:33:e5:bc:7d:e4:dc:ec:7c:53:fe:
5c:65:fe:1e:d4:66:3b:1a:51:8f:57:8b:54:08:d9:
af:0e:4d:69:72:c1:f3:27:72:86:07:b0:ae:8f:08:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:48:B0:59:A8:F6:D3:41:44:BA:45:29:79:F2:39:4E:EB:29:52:78
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c2:75:d8:86:37:5f:4d:f0:4a:96:d7:9e:27:22:ed:52:e0:
89:02:08:15:66:23:3d:71:fb:1b:12:1d:fc:2d:c1:2f:05:36:
2b:94:2d:70:ad:8e:cb:f7:4c:38:44:2d:fc:6f:2e:3b:cb:59:
cf:6d:49:fa:fd:72:43:d1:db:b9:7c:db:82:cd:a6:96:ca:1c:
53:4a:1b:12:ac:df:4b:25:28:b6:5f:7c:60:eb:1e:3f:9f:3b:
81:45:07:7d:24:5e:a1:fd:ff:a8:0f:0a:78:63:26:19:61:53:
5d:d4:2d:f7:00:e5:7d:fa:81:08:83:62:b3:21:c7:98:5c:bb:
22:a9:1a:17:24:9e:36:7c:9b:dd:d1:20:e8:8b:46:54:65:6d:
ce:4e:81:ee:0b:79:6c:cb:d4:af:e3:a9:8b:14:fd:5c:d1:4d:
b9:c7:ab:fd:a3:cf:f2:24:9b:8c:6d:f0:e2:53:d2:81:5b:4e:
44:24:59:2c:3f:01:dd:6a:d5:75:23:a3:99:8b:6b:80:13:57:
3f:2f:a6:5b:95:5f:db:e2:ad:e1:5c:9b:3e:7b:0a:3d:5e:05:
78:bb:1a:9f:e3:77:6c:b7:1a:43:f4:2b:2f:58:92:8d:a2:6d:
82:25:8a:9c:6f:f2:70:0d:a1:4f:ce:e5:fa:fc:5f:41:69:35:
9b:58:26:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:51 2026 by rpki-client