Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: 6t87DwMJDhttu96gQcA6in/qn8fGMl4eUVz9p+oJcK0=
Subject key identifier: AB:C6:05:DD:8E:E5:69:CA:EC:D1:EF:D2:BB:9A:8E:99:41:65:0D:2B
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 019D9B1A2BD769EDDC8FAC2DB911FD584C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 0FDC
Signing time: Fri 17 Apr 2026 11:01:16 +0000
Manifest this update: Fri 17 Apr 2026 11:01:16 +0000
Manifest next update: Sat 18 Apr 2026 11:01:16 +0000
Files and hashes: 1: 4d9-6h6RHLAtIkxDu8GiYTASn8o.roa (hash: gqqQTnXdL5PKtQ8KN/lbpQCpkcfM5mWMVs9m29iW+Pc=)
2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: 3YWYQ48oJwOWIzopAw45rMFngEMJfz/HHy/IfsOwksE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:2b:d7:69:ed:dc:8f:ac:2d:b9:11:fd:58:4c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Apr 17 11:01:16 2026 GMT
Not After : Apr 18 11:01:16 2026 GMT
Subject: CN=abc605dd8ee569caecd1efd2bb9a8e9941650d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:49:c6:22:6e:37:67:cd:72:38:31:6f:85:
3c:65:ef:f0:bb:fe:b6:1f:c7:21:24:af:41:2b:ce:
0f:18:b3:65:16:4a:82:72:5c:31:1d:9e:e1:0f:79:
75:4d:37:60:1e:28:7b:18:53:c7:29:c0:eb:d7:89:
32:21:06:07:c9:eb:38:b2:2d:37:08:6e:06:f7:66:
5e:49:1b:90:13:49:3d:67:bc:ba:69:42:a8:ab:db:
78:09:8f:76:20:bd:98:9e:0b:a7:71:2d:75:60:3a:
e2:bf:11:8b:ea:5b:d7:f6:5f:01:6b:7d:07:19:6c:
78:59:00:89:81:f6:d4:5a:57:8b:e3:2f:95:9d:db:
ea:7a:ba:44:b6:5e:03:aa:e1:f3:44:d8:7b:cf:5f:
dd:dd:eb:bc:86:f9:2e:e5:a2:35:64:5b:30:69:a6:
3b:76:d2:73:ee:32:6f:91:76:6d:f8:81:7f:be:5e:
90:c2:b3:2d:34:fa:b4:34:aa:68:5f:11:32:cb:1e:
79:2b:ea:29:b3:a4:ae:44:a5:75:77:70:93:bc:cb:
9c:2e:33:c6:a2:3d:ca:98:61:fd:6d:cd:a0:34:5a:
40:43:59:47:e5:14:3b:5e:80:be:90:7a:dd:c1:90:
fc:f1:b1:f4:a6:e0:50:c6:79:4a:31:20:35:1f:1d:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C6:05:DD:8E:E5:69:CA:EC:D1:EF:D2:BB:9A:8E:99:41:65:0D:2B
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4a:e1:80:05:08:d2:59:8d:3e:a5:e2:d3:ac:58:0b:27:8b:
85:95:28:d2:cd:fc:16:2d:9a:25:48:7a:82:f5:86:fc:a9:60:
62:d3:7c:75:fd:55:1c:e7:46:07:db:85:10:2b:de:ac:fd:ff:
aa:69:ce:6d:e9:e9:17:d6:c0:ba:fb:9b:64:3a:ee:a8:75:ce:
94:f4:59:a9:86:14:5a:bc:a8:92:f0:35:22:df:8d:8c:36:9a:
7d:4a:95:8a:f1:bf:df:08:f7:e3:2e:66:9a:76:a4:f5:d7:1e:
28:f4:69:53:76:9a:4e:70:de:28:b9:4b:2c:b0:19:db:11:ad:
4e:41:94:03:f3:7b:4c:95:14:42:65:bc:24:ae:54:d3:9d:c7:
8c:44:09:52:16:aa:b2:d1:6f:13:2d:88:7d:f6:9f:a1:33:d4:
83:5d:3a:88:7e:d7:6e:69:61:de:5b:81:fc:2d:7c:6c:f9:b0:
90:d1:86:f1:c2:9d:a5:a8:20:5e:75:73:16:1d:39:d6:9a:c1:
7b:ee:7e:9f:0f:91:f8:da:49:b1:d6:69:af:82:97:8b:fe:b2:
04:dc:01:91:d3:59:78:bc:a9:43:87:b4:42:d0:cb:46:d2:07:
fc:5c:27:7b:c4:7d:c5:9f:90:1b:87:ed:f5:69:57:1e:e9:52:
b2:42:d3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:41:40 2026 by rpki-client