Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: sv9ZKaqjh8W5rtdNg8I++gmzRv5ctDggLDuP7O7u2qU=
Subject key identifier: 0B:60:45:F1:8D:68:8B:EE:9C:5D:79:DA:B5:76:18:45:50:EF:4A:28
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 01A17C290DDDEE64DA7DD83F038233ECD780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 0681
Signing time: Tue 27 Oct 2026 07:00:27 +0000
Manifest this update: Tue 27 Oct 2026 07:00:27 +0000
Manifest next update: Wed 28 Oct 2026 07:00:27 +0000
Files and hashes: 1: JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa (hash: AXBExwmU9H7oRMKiGRczo0VIey6hczqitFMjI0jwK5E=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: 8JDGy3zTJjzYucgmaYQ0VWYnGM9giZL91VhBbdV1SsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:0d:dd:ee:64:da:7d:d8:3f:03:82:33:ec:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Oct 27 07:00:27 2026 GMT
Not After : Oct 28 07:00:27 2026 GMT
Subject: CN=0b6045f18d688bee9c5d79dab576184550ef4a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:80:ca:74:0a:c7:ed:d1:42:01:ef:17:d6:
cd:fa:0e:56:ec:9a:b3:64:3b:2a:e2:aa:af:45:e6:
e7:34:bc:1a:7e:8f:87:ee:d2:1d:46:97:8c:27:4b:
a5:ba:0c:76:0e:f2:55:e4:2b:c6:79:48:e1:29:75:
64:d6:fd:1c:4b:8d:21:0d:4e:5e:ce:1c:6e:dd:75:
78:60:4e:9d:b3:0a:b4:c9:75:d0:f9:dd:77:ce:27:
09:93:79:8b:9a:ee:03:2d:f3:14:6f:7a:9a:a7:3d:
4a:94:73:e4:70:75:ae:b7:ae:95:06:b1:ec:6c:97:
fa:cf:31:eb:28:04:8f:8f:ec:f0:b3:c5:19:f5:bc:
48:67:5c:be:45:3c:b7:7f:16:d0:b9:16:90:1c:e1:
b2:aa:67:c3:12:2c:2f:38:74:91:bc:72:cf:0b:84:
d1:36:20:33:7a:7b:b9:28:db:a5:85:16:99:79:a8:
ea:fb:b3:61:4f:47:6c:ed:ae:bd:84:5c:54:18:b5:
00:02:54:df:f1:45:70:77:ae:4c:f8:99:13:8d:c1:
97:c0:1f:3a:28:34:c7:3d:37:67:c3:ff:54:81:a8:
5b:3d:bb:b6:f3:78:8f:73:51:8c:4f:6c:b7:93:e5:
52:db:ae:b9:56:0c:29:a5:ec:c2:26:7f:53:86:5a:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:60:45:F1:8D:68:8B:EE:9C:5D:79:DA:B5:76:18:45:50:EF:4A:28
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:08:fd:aa:47:18:6d:90:dc:e7:43:81:3e:f5:af:58:a2:be:
c0:07:c4:3e:94:2a:b1:9f:52:b5:a1:f4:25:e6:ee:3a:ef:0d:
b7:53:a0:aa:1b:db:e9:ac:69:ee:9c:82:28:5b:40:4c:b8:63:
cf:bd:87:e9:00:4a:6e:48:1f:4e:d1:d5:8a:d8:eb:61:3a:dc:
e6:2f:58:d6:31:b7:98:1d:ab:c7:c5:e6:94:29:c7:6c:b1:74:
22:84:e2:e9:99:21:97:12:b5:77:4e:2c:4b:fc:cd:e9:35:37:
7c:09:d1:7a:9f:8c:c9:c1:b0:d8:13:99:fd:da:1c:c1:6c:bc:
55:03:ee:52:e6:3e:8e:ef:7d:00:34:50:ab:88:2d:e8:53:95:
11:8b:c1:b6:4d:ad:b9:65:65:16:36:9c:49:9f:2b:57:85:92:
55:ad:47:7c:9e:fe:c0:0a:ac:78:91:05:ae:e6:a0:64:33:e0:
c4:cd:cf:0d:e9:dd:fd:ba:62:7b:bc:df:fd:3e:af:83:75:34:
74:19:fd:0e:14:92:f7:50:25:1d:8d:49:cb:9f:f3:00:2b:d8:
23:43:e5:a0:d1:ac:26:b3:ec:4a:c5:72:92:f6:d8:2e:aa:0a:
3f:70:4f:08:53:de:5a:2c:0f:2d:9e:11:15:3a:c7:18:3f:51:
30:8c:f1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:42:27 2026 by rpki-client