Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json)
Hash identifier: 5B3hhzB3rgtHy2sJuyUwEJlAClfwYkbh7mB/v6SBNmA=
Subject key identifier: 21:3A:70:32:71:8E:04:3E:88:ED:F0:A9:8F:CB:64:92:F7:90:2D:56
Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Certificate serial: 019D382E1D49982515287EEFB66D63586BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
Manifest number: 0E02
Signing time: Sun 29 Mar 2026 06:00:39 +0000
Manifest this update: Sun 29 Mar 2026 06:00:39 +0000
Manifest next update: Mon 30 Mar 2026 06:00:39 +0000
Files and hashes: 1: SV2RkPOuByS_r28T-8Z9LI6s33I.roa (hash: mWVfN5OIaVZHfY5wD08vtg6Nd4vEgRrrt33wmevn5GE=)
2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: PCW/iXoz8IAbr5WZ/ORnTy5Tbon7iNTopgW88YsM5go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:1d:49:98:25:15:28:7e:ef:b6:6d:63:58:6b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Validity
Not Before: Mar 29 06:00:39 2026 GMT
Not After : Mar 30 06:00:39 2026 GMT
Subject: CN=213a7032718e043e88edf0a98fcb6492f7902d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:05:bc:dd:6e:67:9a:2b:97:10:98:c7:44:
fc:40:10:82:d5:a5:28:ee:d0:42:fb:58:54:6c:e5:
fb:e5:1e:75:4a:34:d2:12:20:d3:d5:61:e2:65:4b:
f1:03:0c:0f:ac:a0:a2:09:60:e6:5d:ba:f9:1a:b3:
17:22:f8:d3:11:ce:04:ac:81:c2:cc:f9:f2:8c:67:
f9:fa:b6:66:1c:04:49:e8:9f:2d:c3:7d:89:99:9d:
85:b5:90:6c:7c:07:51:68:f5:ba:30:86:c3:cf:86:
18:c4:63:a4:e6:e5:cc:9d:86:1c:f4:87:ec:e5:1a:
f9:1a:81:1d:b3:5f:50:b8:8b:89:e3:01:0a:da:fa:
56:6d:4a:bd:de:17:eb:df:ca:55:21:94:35:0f:05:
03:8b:27:77:a7:79:9d:40:86:52:95:03:77:a7:23:
ad:04:49:81:bf:f7:fa:84:18:6e:25:b6:b6:f7:53:
f3:59:be:88:4a:b5:1a:c8:f0:b4:13:ec:18:4d:99:
c2:57:96:0f:68:48:8e:1c:62:7e:91:ea:78:d4:80:
bf:cc:eb:de:bc:00:33:bf:5f:ca:36:1d:b7:f9:dd:
98:55:94:66:af:98:b8:59:3d:09:db:cc:d8:f8:ad:
73:de:4e:14:94:35:77:2b:3e:7d:05:9c:7a:7f:87:
3a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3A:70:32:71:8E:04:3E:88:ED:F0:A9:8F:CB:64:92:F7:90:2D:56
X509v3 Authority Key Identifier:
keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7c:1c:62:c6:78:53:0c:65:43:42:c0:37:d6:de:b3:90:c3:
63:7c:4c:49:26:b0:29:43:9c:cf:b7:a5:d3:31:3a:29:02:6c:
d5:9c:bf:e8:16:e5:19:94:7e:5f:79:f8:da:3f:d9:20:ea:f1:
7f:2b:4f:6b:ab:a7:e8:25:62:b0:a9:2c:4c:9e:3b:90:e4:25:
8a:4b:7e:b2:30:21:fa:49:9b:06:d0:d6:13:c3:d9:49:17:fa:
c1:e4:d3:e5:41:5b:24:a7:3b:d6:69:e2:ab:8b:0e:11:6b:3e:
69:5a:1f:59:b8:1a:10:bd:ab:21:dc:7b:0a:6d:f0:2c:b4:92:
5e:6b:b9:22:13:04:83:ec:11:82:a6:93:6a:95:ab:72:ec:5d:
a0:29:ad:14:17:8a:7a:bb:4b:92:7e:26:52:04:87:ec:cc:2c:
11:d1:f4:29:de:10:95:bf:55:3b:9a:c7:93:2f:89:99:bf:be:
fa:07:53:63:9e:66:a5:28:68:49:d7:85:77:19:37:ef:6e:df:
86:5b:05:ec:90:17:03:c7:f0:fd:ba:6d:d3:fb:7e:63:6c:de:
0c:83:e6:8b:f3:9a:18:7d:cf:3a:fa:07:89:78:8c:f0:12:b5:
0d:db:aa:05:87:8f:4a:b1:04:bb:9c:23:c7:a6:77:23:71:7f:
28:a5:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:47 2026 by rpki-client