Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
File: PQh2wA4DdvdzPbJEMAEg0xQL290.mft (raw, json)
Hash identifier: +HfP3j/jIBS1d8JOp8dnTcYyjZ38hwvYx08UJd6y4+w=
Subject key identifier: 0D:E4:33:C3:81:D0:8F:66:6B:57:48:2F:F8:1C:A7:11:C2:1D:EB:C5
Authority key identifier: 3D:08:76:C0:0E:03:76:F7:73:3D:B2:44:30:01:20:D3:14:0B:DB:DD
Certificate issuer: /CN=3d0876c00e0376f7733db244300120d3140bdbdd
Certificate serial: 01A1C70D054E600FB989592A7BDCE0596151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQh2wA4DdvdzPbJEMAEg0xQL290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
Manifest number: AF
Signing time: Tue 10 Nov 2026 20:01:21 +0000
Manifest this update: Tue 10 Nov 2026 20:01:21 +0000
Manifest next update: Wed 11 Nov 2026 20:01:21 +0000
Files and hashes: 1: PQh2wA4DdvdzPbJEMAEg0xQL290.crl (hash: eSeTwrzRUUCR0QfNhUECWacSJzS1RLvAQs/Gaf+PZLQ=)
2: nq9bgSbvA0TB3aKoI2LSbdxmVpY.roa (hash: pKofBy3cQfkluUFTKQ828uE/AR/hkHrzVvjmkrkzCnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQh2wA4DdvdzPbJEMAEg0xQL290.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c7:0d:05:4e:60:0f:b9:89:59:2a:7b:dc:e0:59:61:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0876c00e0376f7733db244300120d3140bdbdd
Validity
Not Before: Nov 10 20:01:21 2026 GMT
Not After : Nov 11 20:01:21 2026 GMT
Subject: CN=0de433c381d08f666b57482ff81ca711c21debc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:9d:3a:f1:ab:12:d8:52:4f:6e:ef:6b:58:
5b:db:f0:3e:64:ab:23:f5:d6:2e:e8:df:17:f1:cf:
1f:21:15:57:1b:6d:de:0d:06:55:9b:23:f7:96:07:
51:cd:5b:14:b1:5a:08:ea:9b:66:7a:a9:98:9e:89:
51:1c:3d:01:0f:7d:a1:b3:c4:07:06:e0:7d:f8:26:
dc:b3:9c:c5:9f:e4:4d:07:8f:88:af:ef:44:7a:42:
2d:92:1d:c4:07:a3:d0:f0:02:6d:67:e3:5f:ca:98:
05:be:24:4e:37:57:6a:ac:3c:52:2d:63:ed:cb:c6:
c6:91:4a:27:25:67:5d:07:d9:09:ae:88:b6:82:28:
2e:6e:e1:00:4c:bf:a7:2b:17:48:2b:89:0b:43:e0:
5f:fc:7f:e7:9f:cf:59:a3:72:96:eb:0d:b3:2e:46:
97:66:0e:f0:8a:ae:29:a5:ce:3e:7d:64:fe:f2:d7:
98:9b:ce:76:df:ce:eb:af:0a:88:1f:a2:1e:b1:08:
66:85:51:13:44:ca:64:dd:9d:b8:db:70:fa:36:8c:
54:13:b3:2e:9e:f6:45:b6:73:df:33:b0:80:d0:9f:
88:c7:f5:51:70:f1:3f:71:6c:20:86:61:a1:98:a4:
fd:9d:ad:93:4e:c0:9e:e0:51:fa:23:35:d1:94:87:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E4:33:C3:81:D0:8F:66:6B:57:48:2F:F8:1C:A7:11:C2:1D:EB:C5
X509v3 Authority Key Identifier:
keyid:3D:08:76:C0:0E:03:76:F7:73:3D:B2:44:30:01:20:D3:14:0B:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQh2wA4DdvdzPbJEMAEg0xQL290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f0:b2:3a:18:2f:f6:c8:ca:31:15:e4:8f:3b:70:a3:1a:61:
d3:61:8f:9d:75:0c:f1:0a:1e:87:49:f5:11:2d:79:08:de:1d:
53:a3:0d:2e:8a:a5:10:ff:18:58:16:da:95:f9:95:19:03:0d:
c5:7f:0b:62:36:6f:01:0b:aa:9f:77:83:fc:b8:06:bd:b9:d3:
63:bb:a2:f5:2d:c4:ee:6a:1d:73:f2:08:18:98:ba:c4:b6:8e:
fa:08:f2:8c:d7:81:6c:1e:07:0e:8e:88:b0:89:e9:84:8f:5d:
69:a8:78:5c:f1:33:aa:c3:4a:10:15:65:57:10:3e:74:3f:fb:
a2:c8:00:58:4d:17:02:41:76:7c:8e:5c:25:bc:bd:81:71:47:
16:ad:b6:75:26:e1:21:d6:a6:75:4d:80:a5:69:cd:ca:be:cd:
11:bc:13:ac:96:b5:ec:9d:4d:87:1f:a6:f9:d1:65:b4:f1:0c:
de:32:67:72:df:4f:58:92:72:9c:18:e2:cb:f7:11:f0:95:95:
10:a5:c0:65:a8:ca:e8:0d:61:18:07:65:75:d1:d3:d9:7a:fc:
3d:7c:6b:f5:34:16:69:50:20:8c:53:d8:e5:7f:7b:e8:05:bd:
f6:7c:1b:fe:53:95:71:3a:96:f1:34:d4:f2:ba:eb:f1:76:88:
10:6e:25:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 00:02:58 2026 by rpki-client