Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: utLJ27ImJQOA6vE95wFTZsNGAbi2LzRlM8AvLcSkRGI=
Subject key identifier: B5:D7:64:80:34:C9:32:AF:80:65:4E:47:A8:BA:C7:85:EB:F7:32:D6
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 019D390987429BA8D19C627CCAC9880FE640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 044C
Signing time: Sun 29 Mar 2026 10:00:18 +0000
Manifest this update: Sun 29 Mar 2026 10:00:18 +0000
Manifest next update: Mon 30 Mar 2026 10:00:18 +0000
Files and hashes: 1: JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa (hash: AXBExwmU9H7oRMKiGRczo0VIey6hczqitFMjI0jwK5E=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: PtZWektEYZlxoaflod1iZPg1YhEuu6FtfieTO04K0fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:87:42:9b:a8:d1:9c:62:7c:ca:c9:88:0f:e6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Mar 29 10:00:18 2026 GMT
Not After : Mar 30 10:00:18 2026 GMT
Subject: CN=b5d7648034c932af80654e47a8bac785ebf732d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:b4:89:cb:17:aa:6b:04:de:50:34:71:40:
13:b6:2d:ce:f3:75:d3:7d:95:1f:6a:58:1e:ef:f0:
82:41:69:80:4d:31:34:99:8b:a7:da:54:0d:03:0c:
8e:5d:d4:e3:e7:56:bd:c9:74:47:54:bd:28:ed:78:
38:71:55:91:74:94:a6:b0:2e:d5:ba:4c:7d:52:0d:
30:80:be:90:cd:a5:07:04:3c:75:19:3f:29:c2:f9:
51:49:2c:52:af:cb:2b:d7:13:45:f4:71:cf:b5:13:
8e:6c:91:14:0d:84:c5:7f:92:8e:04:c1:a7:f2:71:
9d:94:6e:db:77:0b:90:c2:49:34:98:48:5b:0a:5d:
2b:7d:29:d7:b3:6c:cb:5e:86:58:fc:9e:95:cc:52:
ba:d5:b2:51:09:60:e0:e3:31:b6:e7:52:13:f3:c1:
1e:4a:99:f2:c0:0a:ac:33:5b:79:63:df:27:db:a5:
86:12:cd:e4:8f:66:28:ad:58:f7:7a:df:3a:18:20:
22:e7:e0:8c:c0:70:9e:49:7d:be:05:83:b9:dd:0b:
0e:c2:46:74:ce:3e:e6:9b:47:09:14:56:d2:e6:cd:
1d:86:1c:e0:01:07:25:10:77:75:76:41:c2:ab:f7:
68:b6:d6:c5:aa:c1:4e:6d:f7:10:4f:09:38:6f:c4:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D7:64:80:34:C9:32:AF:80:65:4E:47:A8:BA:C7:85:EB:F7:32:D6
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8e:93:45:97:19:d8:80:65:66:6c:0a:ef:41:37:70:29:b5:
ea:e6:e7:48:f0:93:d3:8a:10:14:40:cc:ba:d5:b6:c5:48:83:
3e:22:67:f5:61:52:6c:e5:ca:e3:f2:77:52:a9:00:6d:43:75:
03:2f:f0:24:07:08:c9:2f:ed:51:63:cd:11:01:f7:7b:a2:50:
67:d7:12:72:34:9d:8a:7d:e8:1e:fd:29:a4:55:8e:e3:20:bc:
0c:c4:dd:8f:b0:a8:67:8e:3d:ef:5b:c0:c2:6c:ec:a2:29:0f:
4c:00:e0:a5:cb:67:c1:e4:b9:4e:bb:81:d1:c0:ab:52:96:41:
24:86:03:1f:07:c3:70:49:5f:f8:7b:6a:54:bb:7e:7e:a2:e1:
b9:6c:df:8e:1e:71:ad:6a:f5:2d:39:47:b6:bb:07:ca:cb:b5:
f7:d4:db:6d:9d:89:a2:2c:89:d8:d9:6a:04:c7:ce:2c:8e:2e:
fb:12:6a:fc:96:33:f5:a7:e7:82:e7:0b:19:26:d6:32:56:6e:
ab:65:48:8c:d7:c8:78:d9:62:8d:f0:b9:78:3b:1c:34:0c:c8:
c8:4a:44:3d:4c:e0:8f:be:8b:28:03:76:d4:f7:f0:bf:d6:4c:
6d:20:ad:2e:fe:29:b6:c8:b0:eb:6d:22:91:b5:de:f6:17:3f:
76:29:8d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:41 2026 by rpki-client