Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: mtq2c7pSH7suQjK7WSa2LE63osABwkXTaT/yS6hGaB0=
Subject key identifier: FF:B9:46:2E:71:92:B7:32:B1:5B:D0:0C:74:86:B0:E8:DF:44:C6:55
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 019D3789588A0F580A1B0ECE3BE6FEF17502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 0CB8
Signing time: Sun 29 Mar 2026 03:00:41 +0000
Manifest this update: Sun 29 Mar 2026 03:00:41 +0000
Manifest next update: Mon 30 Mar 2026 03:00:41 +0000
Files and hashes: 1: 1-m2fud3k5EzmiZRoBhOtqfySzmI.roa (hash: HOvFww4yxsynh17q+d5C89mxcrHn4M7iS7z+Y3frs9U=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: /k2i1UuFOs1nipOuhB0iwrcxJG/FUY96n2PN2E8wA9s=)
3: e89SBhBBaL18qejVEfgQtSemlB0.roa (hash: Gc/uVJGxURscBi9WA9foLpSF+kUOEix1bWq345u58KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:58:8a:0f:58:0a:1b:0e:ce:3b:e6:fe:f1:75:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Mar 29 03:00:41 2026 GMT
Not After : Mar 30 03:00:41 2026 GMT
Subject: CN=ffb9462e7192b732b15bd00c7486b0e8df44c655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b1:00:19:a6:ad:3c:9d:2d:b2:6d:db:7c:ba:
ee:d6:bb:bb:ee:37:bd:fb:59:21:a2:e7:35:08:48:
e0:dc:79:bf:d6:6d:32:04:d6:ee:ad:07:fc:ac:1d:
a0:95:65:d6:38:22:99:46:f9:3c:bb:30:01:7b:9d:
07:57:7c:7a:7d:d6:92:01:8d:1a:17:9c:35:34:32:
de:ec:22:75:c6:68:83:d1:86:1f:0e:e4:6b:ab:63:
84:92:27:2c:4f:d8:78:7d:74:6a:6f:9d:19:d0:a2:
a5:4d:d8:af:83:11:da:ac:2a:74:ed:72:fb:9b:63:
1d:16:47:5b:00:f0:a9:97:54:be:4d:db:6e:f3:3e:
35:9b:75:78:55:9a:ee:9d:7b:83:79:f9:ff:19:7a:
21:b6:27:79:cc:96:b2:4d:d6:18:7c:42:46:fa:9f:
4e:8f:a5:5f:01:90:df:a8:c9:e8:ac:4c:67:42:a2:
1b:ac:42:09:ee:84:c9:1e:9d:5c:fc:ce:1c:37:87:
a6:df:82:d6:e5:ef:5b:10:00:6f:00:e9:3e:25:de:
34:aa:75:41:d0:da:e4:87:23:60:e9:80:04:d4:d1:
40:10:1b:dc:c9:bc:19:fd:16:b8:37:fc:90:de:1a:
46:12:0d:33:7a:67:c5:72:cf:42:5e:8d:58:27:29:
2f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:46:2E:71:92:B7:32:B1:5B:D0:0C:74:86:B0:E8:DF:44:C6:55
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:23:6c:32:94:d2:06:ba:23:48:3f:24:0c:a7:7d:ab:19:ee:
56:a9:f2:57:6e:63:7e:ce:ea:62:31:7c:6b:af:8f:5b:e6:c1:
0b:92:c9:ac:e2:f1:0c:51:0e:3c:b4:b2:2f:80:a8:92:df:5b:
7b:cb:a3:d4:7c:8c:a2:63:3f:40:69:bf:d2:1f:6e:4e:91:cc:
40:be:4b:e5:d7:77:a2:71:16:7a:67:82:39:3b:4a:e0:76:7f:
6f:55:7f:1f:43:eb:7b:31:01:13:c4:77:06:9b:fe:a2:4f:ec:
ab:96:bb:1d:92:96:9d:0a:49:83:dd:29:c9:b7:0e:37:a4:27:
54:51:78:3c:b2:37:57:23:5c:fd:cd:ea:74:f5:29:2a:0c:d2:
c4:0a:e7:f7:b9:ba:0e:93:6d:d4:5e:e9:f1:28:62:5e:f9:de:
79:6a:39:96:79:6d:6d:7f:f5:7c:5c:ca:fb:40:4d:67:75:97:
0d:ff:cf:87:bd:28:42:3d:d9:4b:55:ce:2e:ab:2b:40:cb:eb:
d8:3e:79:db:73:b2:53:66:c9:48:f0:8a:46:b3:4d:d7:cb:2a:
72:67:d7:f2:ee:9e:6c:bd:08:71:63:9e:a1:7a:a3:e0:4e:6d:
85:e4:5c:5b:e2:30:9d:55:f2:00:81:5d:53:e8:d5:aa:c4:08:
a9:b0:db:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:07 2026 by rpki-client