Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: sKecIMkcdxo0U/VIQOK2Wdoo69KejltWJwx9iyH+2Jw=
Subject key identifier: 0F:9C:92:8A:19:1E:1C:99:53:5B:E1:4C:6A:48:F2:8A:8E:0A:7D:96
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 01A159D44E9C989059EF913437800DBF84EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 0EDC
Signing time: Tue 20 Oct 2026 15:00:48 +0000
Manifest this update: Tue 20 Oct 2026 15:00:48 +0000
Manifest next update: Wed 21 Oct 2026 15:00:48 +0000
Files and hashes: 1: 1-m2fud3k5EzmiZRoBhOtqfySzmI.roa (hash: HOvFww4yxsynh17q+d5C89mxcrHn4M7iS7z+Y3frs9U=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: 1nYt2xYF9rgWysgWL1opXfEPyd/huAZO0gr6ffPol68=)
3: e89SBhBBaL18qejVEfgQtSemlB0.roa (hash: Gc/uVJGxURscBi9WA9foLpSF+kUOEix1bWq345u58KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:d4:4e:9c:98:90:59:ef:91:34:37:80:0d:bf:84:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Oct 20 15:00:48 2026 GMT
Not After : Oct 21 15:00:48 2026 GMT
Subject: CN=0f9c928a191e1c99535be14c6a48f28a8e0a7d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:ad:ec:2d:4e:1f:22:5e:cd:89:43:68:5d:
41:5b:dd:2e:cc:d4:62:df:0d:73:ca:5d:11:c8:ae:
fb:30:0a:63:3c:b1:c3:bb:d3:de:7a:e8:bd:db:49:
fe:84:9b:0c:0b:c5:b2:10:95:58:b1:41:88:3e:d3:
1d:4b:d7:f2:b7:a3:a0:cb:75:b7:c0:2e:d4:b9:68:
2a:27:5a:12:02:31:74:a8:d4:51:dd:08:10:65:d7:
7f:48:36:a4:3a:1a:dd:a1:bf:a1:07:55:1f:44:7b:
55:87:c6:04:33:41:85:44:19:e6:f4:85:c9:dd:04:
92:49:cb:11:c3:24:ac:7f:23:2c:b9:34:30:58:3f:
45:28:93:c9:d0:34:6a:5e:82:05:eb:95:64:99:12:
85:8f:1e:18:61:1c:79:a6:ec:34:44:e2:68:40:24:
97:a4:e2:e1:ef:c9:0e:ca:52:f4:4b:ff:4f:a5:dc:
60:ff:72:a6:42:ef:14:fa:b3:45:f5:3b:61:59:61:
cf:7f:b5:f1:32:0c:28:da:8c:7c:02:ba:7d:be:cb:
d7:ab:1a:ba:03:ab:08:60:8d:dd:fa:2c:ad:eb:8d:
2d:7b:f1:bd:83:be:6f:35:e9:7f:48:9e:ec:a3:5f:
78:4c:d2:2e:c3:1b:b9:6f:4e:af:ce:d2:c3:14:1d:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9C:92:8A:19:1E:1C:99:53:5B:E1:4C:6A:48:F2:8A:8E:0A:7D:96
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:35:62:16:99:38:84:bf:7b:b6:97:4d:c6:98:ce:95:a9:63:
72:8e:30:01:b2:95:48:69:83:0a:66:c8:72:8e:fa:49:d3:c2:
a7:e1:15:d9:81:81:f0:ba:05:d7:03:41:1e:7c:0f:65:e7:aa:
83:46:6f:d9:4b:46:a8:56:6e:22:82:df:f9:a8:9f:8d:c9:91:
ff:fc:2f:e1:55:74:78:e3:9b:59:15:25:17:28:ea:d2:5c:48:
52:98:03:48:b8:4c:47:02:50:f0:69:59:8e:36:41:a8:13:6f:
39:66:ee:37:05:1f:21:81:2c:fd:fc:6d:20:96:d3:f1:21:5d:
4c:7c:85:ee:cb:4d:7c:96:8a:b7:52:1f:5b:db:81:97:a5:b3:
29:78:5b:c2:b9:0b:0d:05:ef:5e:c7:fd:76:47:51:68:f7:0e:
3c:bb:81:57:4d:e5:ce:cf:11:26:f7:35:fe:70:d9:39:11:a2:
ab:f2:19:d6:8f:cf:a0:39:b8:98:98:cf:da:9b:3b:51:42:2c:
46:fb:d6:9a:33:bc:19:ac:e6:41:d4:89:52:1d:ea:dc:c5:01:
e4:61:40:e1:f8:64:ef:5c:41:7b:c2:bf:f9:86:40:c7:72:b1:
91:6a:fe:13:c8:d5:8c:96:61:92:7d:bb:22:22:1e:da:f9:3d:
11:fa:88:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:04:20 2026 by rpki-client