Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
File: PqU6yajcRG-34BE7aLOOlwwZ98w.mft (raw, json)
Hash identifier: HIZ9ZdjKSJ0QajLE2MU28xBw1ktvNbXuduKQwNnhgsg=
Subject key identifier: DE:6A:C4:FC:FA:FA:A9:85:94:24:51:80:D2:6A:43:F1:C5:1D:39:17
Authority key identifier: 3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
Certificate issuer: /CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Certificate serial: 01A08C7AE63DF00671DD4E962C7462246BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
Manifest number: 19D6
Signing time: Thu 10 Sep 2026 18:00:59 +0000
Manifest this update: Thu 10 Sep 2026 18:00:59 +0000
Manifest next update: Fri 11 Sep 2026 18:00:59 +0000
Files and hashes: 1: PqU6yajcRG-34BE7aLOOlwwZ98w.crl (hash: P3gpIfWHxL1z2dqqE+qWuglFXZ5VStzhiw29WHXVbsg=)
2: ugGgjfrNMaOwuHgQR5J_mmnCoSw.roa (hash: N5PN03imR/rPD+0R00oOm/EBGbZntmCDYE46dLOAj4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:e6:3d:f0:06:71:dd:4e:96:2c:74:62:24:6b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Validity
Not Before: Sep 10 18:00:59 2026 GMT
Not After : Sep 11 18:00:59 2026 GMT
Subject: CN=de6ac4fcfafaa98594245180d26a43f1c51d3917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:87:76:db:e4:58:be:48:77:b8:f1:3f:7b:
f1:ab:f4:e2:4a:b2:8d:32:4e:60:72:2b:c5:a8:ee:
43:8b:a7:df:28:9b:9c:5a:77:64:83:49:32:2c:90:
38:3c:ac:95:ce:82:04:b9:e2:1f:0a:92:b7:76:73:
4b:10:96:7b:ef:df:61:32:83:43:1d:01:96:3d:82:
2b:d1:75:f6:e9:09:e1:53:2e:73:1d:e7:18:fb:67:
ce:59:88:9e:29:18:4f:c1:84:9d:6c:53:70:82:4f:
19:f7:8c:7f:38:5c:64:f1:9f:01:67:cb:07:d3:bc:
5a:71:d9:9d:e9:c6:46:33:bb:ad:58:39:13:4b:a1:
dc:3e:7c:b8:e9:bb:05:23:c1:b6:b2:cd:3d:18:57:
fa:d2:b2:58:8f:ec:9a:51:ab:86:75:9f:85:8c:5d:
e3:96:fb:5d:76:b2:f0:46:af:18:44:92:34:1a:69:
80:b6:0c:f5:ed:b8:28:e0:6f:92:cc:b0:60:bb:53:
b5:90:6c:da:53:65:b9:c5:69:51:5e:33:a8:c6:81:
27:84:79:52:ca:8d:d8:9b:ad:93:96:b3:37:cd:39:
a6:86:58:e7:5b:b3:88:f9:1c:f6:6a:16:b0:36:e3:
ff:4e:54:ba:8e:64:b2:af:86:cd:94:81:a1:7f:2c:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6A:C4:FC:FA:FA:A9:85:94:24:51:80:D2:6A:43:F1:C5:1D:39:17
X509v3 Authority Key Identifier:
keyid:3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2e:60:81:97:6c:33:6b:5d:66:b0:1f:01:e8:ad:be:5e:d8:
70:d2:dc:28:6f:2b:4c:1e:88:9b:c2:0d:41:c7:7b:a3:a4:cc:
d3:34:da:d8:b5:08:1c:14:c6:37:9d:79:ad:e6:51:57:3a:d3:
58:3b:92:9b:39:aa:69:3e:17:43:b5:a0:61:4c:b1:3e:46:38:
2a:87:35:bb:84:47:9b:5c:3c:e9:9d:f6:7e:84:80:62:14:0f:
ee:83:08:b9:36:63:0e:df:68:44:06:90:7c:e8:70:2f:91:c4:
fd:c9:b9:66:80:81:67:39:ba:9a:57:9e:05:60:36:42:99:63:
89:55:a0:fd:96:f0:6c:26:cd:57:6e:fe:e0:bd:dc:6c:85:cf:
f5:34:e4:93:58:8a:29:50:95:57:26:64:2e:0a:ed:a1:c9:34:
2e:37:ae:32:5a:cb:22:84:d9:c2:30:9e:87:43:e0:f7:7a:d9:
4f:69:da:54:64:7b:34:1b:4a:67:bb:a0:33:87:07:0c:05:14:
40:7f:8b:3c:70:40:e1:2b:30:50:fd:18:53:fa:5d:dd:1f:28:
8b:22:05:31:f8:6c:a4:bd:78:42:74:5c:98:72:8c:a4:cc:01:
2d:ea:be:14:8f:4e:c8:6a:25:5a:ae:a4:33:0f:cc:24:9a:6f:
2a:47:1e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:08:27 2026 by rpki-client