Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: kRvTw0mgE1HGSMNuCvDCgmzCOc8xxIuFKbkIDb/4ksQ=
Subject key identifier: CC:64:B5:54:FD:AB:3E:A0:2A:F5:6B:24:B8:D3:5C:1C:93:33:7C:13
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 019CABA1D631B3F8ABF232F087541E9766C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 0F60
Signing time: Sun 01 Mar 2026 23:00:35 +0000
Manifest this update: Sun 01 Mar 2026 23:00:35 +0000
Manifest next update: Mon 02 Mar 2026 23:00:35 +0000
Files and hashes: 1: 4d9-6h6RHLAtIkxDu8GiYTASn8o.roa (hash: gqqQTnXdL5PKtQ8KN/lbpQCpkcfM5mWMVs9m29iW+Pc=)
2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: XZPKFve8Zc+8kgkafXXt9VXdH+pJJ6wbPjjAnNdORXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d6:31:b3:f8:ab:f2:32:f0:87:54:1e:97:66:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Mar 1 23:00:35 2026 GMT
Not After : Mar 2 23:00:35 2026 GMT
Subject: CN=cc64b554fdab3ea02af56b24b8d35c1c93337c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:ed:3a:da:bc:65:8d:b9:42:6f:17:53:85:
24:e2:b5:30:24:61:90:82:b9:70:18:ee:47:74:81:
fa:7d:19:69:88:9d:10:5f:f1:44:76:1c:97:11:fb:
85:52:3a:02:dc:9d:f4:1a:02:45:88:38:9b:6b:c2:
b2:81:2b:ec:cc:e0:24:f0:0a:d8:b2:4d:92:f3:a4:
1b:59:d3:e5:63:d9:63:0f:9e:89:e1:90:48:81:06:
39:91:ea:8e:6d:b2:6d:43:95:a6:9f:32:e2:c8:3f:
8e:6c:64:6b:62:b3:d7:61:71:c8:2e:b7:61:4c:86:
62:80:c9:a5:35:b5:b3:ef:e7:75:b2:11:39:fb:cf:
fd:0a:b3:22:0e:db:c5:8b:bc:43:0d:6f:2b:3e:36:
68:f3:a9:d7:84:63:7c:b6:9e:2f:65:2d:0b:97:35:
c4:83:4a:80:3e:6c:2b:dc:28:63:b9:87:dc:c7:45:
87:7c:29:84:67:49:13:d9:c3:1b:e6:b8:6e:6f:72:
b0:58:d9:86:81:18:a6:a7:ad:20:86:49:63:60:7e:
82:f5:f1:e5:6a:30:f8:59:85:a3:7c:ae:69:21:0d:
2d:69:a3:a1:1e:97:7f:7d:7a:f4:27:bb:41:64:a3:
e6:59:d5:6b:8d:37:02:77:62:8f:e2:53:a9:51:cd:
16:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:64:B5:54:FD:AB:3E:A0:2A:F5:6B:24:B8:D3:5C:1C:93:33:7C:13
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7a:46:88:dd:19:9e:f7:b2:81:ba:f8:9c:b9:6c:6f:0f:88:
ba:13:85:fc:cd:11:9c:e9:87:25:88:a4:13:16:d3:59:6c:5d:
c3:47:d1:fc:3b:a5:0b:8b:f0:ad:c6:70:72:6b:67:4d:37:01:
8e:21:59:de:d0:ab:1e:5d:91:2b:31:d9:51:8a:34:59:f4:84:
c4:55:2e:48:40:37:89:67:8d:61:94:5b:8f:0d:57:3f:88:0a:
df:ce:8a:fa:05:00:41:cc:c7:c4:c8:3a:c4:51:ec:e5:43:50:
b5:2e:c3:4a:d6:70:23:70:02:ba:df:1d:c2:c3:5e:a9:51:bb:
82:0c:b2:63:69:c6:e1:9b:43:c9:f5:bc:b2:ca:e8:b0:6d:6a:
92:0e:bb:9b:43:9f:dc:aa:d1:58:f2:05:3c:41:3f:f5:de:60:
35:7a:f6:6e:46:54:2e:4d:c4:44:85:c6:bd:f0:33:81:e2:0d:
17:a1:07:58:b3:e7:96:55:bf:0e:f0:55:0a:e2:63:13:17:66:
2a:a0:46:88:4d:97:b5:78:a0:fa:73:da:ec:d6:d6:0e:db:39:
dc:f7:ff:c7:45:ea:5a:03:3c:28:ca:d5:af:7c:cd:7a:6e:d9:
6c:69:7f:ab:ac:f2:39:9e:0d:53:e2:cc:03:ad:12:8f:4e:d1:
29:a5:ac:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrodYxs/ir8jLwh1Qel2bDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YWE5Y2FkZTkzYmU2YmE3YzhhYmIzMjM4MzE4MDc2MzE3
ZDYwN2QwHhcNMjYwMzAxMjMwMDM1WhcNMjYwMzAyMjMwMDM1WjAzMTEwLwYDVQQD
EyhjYzY0YjU1NGZkYWIzZWEwMmFmNTZiMjRiOGQzNWMxYzkzMzM3YzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEXtOtq8ZY25Qm8XU4Uk4rUwJGGQ
grlwGO5HdIH6fRlpiJ0QX/FEdhyXEfuFUjoC3J30GgJFiDiba8KygSvszOAk8ArY
sk2S86QbWdPlY9ljD56J4ZBIgQY5keqObbJtQ5WmnzLiyD+ObGRrYrPXYXHILrdh
TIZigMmlNbWz7+d1shE5+8/9CrMiDtvFi7xDDW8rPjZo86nXhGN8tp4vZS0LlzXE
g0qAPmwr3ChjuYfcx0WHfCmEZ0kT2cMb5rhub3KwWNmGgRimp60ghkljYH6C9fHl
ajD4WYWjfK5pIQ0taaOhHpd/fXr0J7tBZKPmWdVrjTcCd2KP4lOpUc0WHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxktVT9qz6gKvVrJLjTXByTM3wTMB8GA1UdIwQY
MBaAFKaqnK3pO+a6fIq7MjgxgHYxfWB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFxY3Jlazc1cnA4aXJzeU9ER0FkakY5WUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hOTcwYzYtYzExOC00NTJlLWE1NmYt
ZWM0NjdmYTg2MzZlLzEvcHFxY3Jlazc1cnA4aXJzeU9ER0FkakY5WUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hOTcwYzYtYzExOC00NTJlLWE1NmYtZWM0NjdmYTg2MzZl
LzEvcHFxY3Jlazc1cnA4aXJzeU9ER0FkakY5WUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHpGiN0Z
nveygbr4nLlsbw+IuhOF/M0RnOmHJYikExbTWWxdw0fR/DulC4vwrcZwcmtnTTcB
jiFZ3tCrHl2RKzHZUYo0WfSExFUuSEA3iWeNYZRbjw1XP4gK386K+gUAQczHxMg6
xFHs5UNQtS7DStZwI3ACut8dwsNeqVG7ggyyY2nG4ZtDyfW8ssrosG1qkg67m0Of
3KrRWPIFPEE/9d5gNXr2bkZULk3ERIXGvfAzgeINF6EHWLPnllW/DvBVCuJjExdm
KqBGiE2XtXig+nPa7NbWDts53Pf/x0XqWgM8KMrVr3zNem7ZbGl/q6zyOZ4NU+LM
A60Sj07RKaWsoA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:25 2026 by rpki-client