Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: i6WClwbCAng4CEmk/BXBwwbO6TRCJpkTVPop1V98mnQ=
Subject key identifier: C5:37:6E:8F:FD:A4:E8:B9:BE:D4:33:9F:07:CE:11:04:FB:8A:D4:AD
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 019E5E9457BDA65063FA681E84A9074AC5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 04E4
Signing time: Mon 25 May 2026 10:00:40 +0000
Manifest this update: Mon 25 May 2026 10:00:40 +0000
Manifest next update: Tue 26 May 2026 10:00:40 +0000
Files and hashes: 1: JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa (hash: AXBExwmU9H7oRMKiGRczo0VIey6hczqitFMjI0jwK5E=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: VfqCQSGNPbrP4d+2s7FM2SCz1v2LFQHwSw6cldBy180=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5e:94:57:bd:a6:50:63:fa:68:1e:84:a9:07:4a:c5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: May 25 10:00:40 2026 GMT
Not After : May 26 10:00:40 2026 GMT
Subject: CN=c5376e8ffda4e8b9bed4339f07ce1104fb8ad4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:54:ba:69:cf:b3:8b:5d:2f:e4:a8:f8:57:
bd:20:d8:b9:67:fe:0d:17:3d:d1:3d:96:7d:ca:55:
fb:fa:5c:3c:2c:f5:cd:f1:19:68:93:ec:ad:64:6f:
26:c2:00:93:e9:36:4b:c9:9c:74:f1:ee:47:04:d4:
19:07:ba:b7:28:af:6c:d1:81:22:99:ac:d1:93:de:
0a:4c:f7:74:d5:9a:81:10:9e:20:90:5c:37:29:6b:
98:9f:42:06:65:19:ea:d6:a9:d0:ba:3f:5e:42:2d:
8e:5f:3b:de:ad:e2:be:a4:72:49:bb:34:6f:e6:13:
73:c5:78:d5:08:60:88:22:91:f6:99:6a:15:3b:ba:
ff:c4:f4:83:25:c5:66:f6:15:24:62:3a:95:2a:a6:
2b:d2:75:2d:f6:e8:58:77:34:b7:50:53:53:cb:5d:
18:88:61:18:3a:02:3d:d8:1f:13:6d:da:19:8c:14:
a9:df:c1:80:03:fa:15:1b:53:11:45:d0:38:ac:60:
2c:18:3f:3c:cf:d5:3b:43:73:d7:1f:91:f2:94:2f:
1d:23:c5:fd:2c:dc:e1:72:6e:d3:56:a4:6b:6f:e1:
af:5b:5d:60:92:ed:99:36:9b:70:8d:57:00:c8:12:
df:e4:b9:e5:74:8c:60:ef:4a:49:d8:c9:6f:8f:a0:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:37:6E:8F:FD:A4:E8:B9:BE:D4:33:9F:07:CE:11:04:FB:8A:D4:AD
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7c:b4:f8:77:e2:6d:3a:3f:6b:09:69:42:48:ce:51:88:67:
a1:57:5b:c0:8d:b3:fd:5b:6b:4f:de:08:d5:70:03:bc:c6:36:
ac:73:e7:0e:9e:17:f1:2f:e3:90:1d:cd:e4:cc:67:10:7d:8b:
ec:4e:dd:b6:55:3e:77:d1:10:0f:26:ce:1e:ef:43:29:9c:b8:
dd:e0:af:d0:3d:3c:77:ef:6e:82:e7:2c:f4:d3:a6:bd:ea:71:
b2:6e:c9:b7:16:c0:3b:6c:5a:3e:b2:76:cd:b7:c2:90:ba:51:
9b:53:cb:94:fe:62:52:89:ad:dc:97:2e:45:5e:7d:98:08:09:
a6:4e:fc:a1:6e:7f:fb:3a:66:c4:90:90:b6:56:3b:9f:1a:fa:
49:52:53:1a:1c:98:4b:ab:ea:8d:bd:50:87:47:f8:f6:a0:71:
d5:66:33:08:de:96:7d:c2:aa:6c:af:0d:be:e0:bc:4e:09:b0:
51:d7:d9:a8:e6:e2:41:74:24:31:a5:3b:42:fb:0c:16:63:fb:
7d:c8:03:46:cd:69:98:ab:4f:3e:db:bd:b7:5f:8b:da:23:b5:
d4:98:4e:2e:fe:fb:a2:82:6d:6d:97:0c:67:23:61:fa:3a:29:
df:bf:c1:80:22:13:1c:bd:9f:b6:52:a7:41:2a:39:ae:b4:2e:
69:03:de:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 15:05:54 2026 by rpki-client