Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json)
Hash identifier: 8z/GCB9ncKzQth4gc2PSjLzqBOf4bghzKtRPPKnLUFM=
Subject key identifier: 61:82:0F:C5:0E:50:AA:B5:97:39:88:31:18:29:C1:76:2A:25:31:6D
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 019F8644869E2FC345AA009535B88767B314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
Manifest number: 12FE
Signing time: Tue 21 Jul 2026 20:01:05 +0000
Manifest this update: Tue 21 Jul 2026 20:01:05 +0000
Manifest next update: Wed 22 Jul 2026 20:01:05 +0000
Files and hashes: 1: gIBhWboHIlbVLsOrG6_KrzVsgsg.roa (hash: JloPm0symVV0m3PFdsgfuUWNtGXtbv/UJhvDlmOgv8I=)
2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: JalPDuUKY3E9FhTglgHtOP6ANi6bDXzS5lBceYB7Px0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:86:9e:2f:c3:45:aa:00:95:35:b8:87:67:b3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: Jul 21 20:01:05 2026 GMT
Not After : Jul 22 20:01:05 2026 GMT
Subject: CN=61820fc50e50aab5973988311829c1762a25316d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:07:16:ab:a8:af:09:9b:da:fe:32:64:24:
e2:27:15:0a:e2:4d:c6:21:32:f7:fd:14:f8:86:c4:
6d:6a:61:5f:f0:f6:b3:52:31:af:86:13:54:de:9a:
4c:3d:ce:5a:84:97:52:3c:22:7f:de:92:34:c5:2f:
68:de:d9:db:35:c5:79:d7:78:66:d2:0c:82:11:08:
19:17:53:89:35:9a:b5:d5:9e:b1:6c:b0:19:fe:d3:
48:15:f7:8b:cc:ec:55:65:da:13:a0:ae:b6:89:41:
77:9d:45:b9:67:77:af:35:77:e7:11:a7:f4:7a:4e:
d7:87:3d:8f:bc:98:31:75:f5:d7:c5:6f:db:69:b6:
60:aa:82:7e:8d:74:9b:f6:bb:99:15:3f:43:21:e6:
0d:77:b7:f5:be:f1:3f:22:22:4e:b6:ae:df:ac:b1:
25:8c:27:b8:7d:34:ed:e2:e3:e4:ae:ac:c0:ce:ac:
9f:fd:58:5b:bc:19:bd:dc:50:29:cf:35:be:dc:98:
57:84:72:3f:68:fd:96:d5:ba:0b:89:0a:ed:e9:17:
37:72:39:cc:cb:85:9b:9e:cf:5e:b3:81:ad:5e:be:
49:a9:51:41:9f:4f:09:64:85:96:77:fb:8a:74:01:
9a:1f:46:f2:de:7a:34:c4:02:bc:79:00:c2:f2:f7:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:82:0F:C5:0E:50:AA:B5:97:39:88:31:18:29:C1:76:2A:25:31:6D
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4c:fa:91:6c:73:53:01:79:ac:60:ee:c5:d2:0f:ca:f0:46:
70:b5:52:95:b5:b5:d5:4f:83:2e:ec:92:2d:90:ff:2f:93:18:
f5:47:b6:b3:20:2d:22:c0:50:c6:9c:5b:2e:c5:b9:ee:22:9c:
33:9d:fd:cd:b6:55:3c:08:19:be:db:65:53:db:93:b1:d1:55:
96:99:49:89:b6:c8:e3:00:4f:9a:f8:64:94:52:3d:cd:5d:a7:
78:8c:df:67:69:66:fe:b2:26:9c:3a:7b:68:8b:8d:25:21:39:
db:e7:4e:b5:2c:19:39:14:b5:fe:ce:f0:6b:6f:53:72:3d:82:
c9:39:5a:ee:be:e6:ab:e0:f4:b6:d9:53:e0:50:c2:55:40:2c:
aa:cf:bb:9e:5d:ef:1c:87:36:a9:51:46:7c:b4:df:c1:56:5e:
64:1a:2b:0d:37:bd:5d:4b:78:74:64:8f:19:c3:b5:9f:84:db:
71:0c:c8:13:64:64:5a:a8:93:30:19:8f:05:fd:ff:34:28:14:
3e:03:01:9e:ab:bd:e9:ea:aa:68:c9:19:00:81:97:d8:34:5f:
d4:54:3a:3b:02:fb:fa:fd:2a:99:47:ab:9e:4c:bb:c8:2a:c7:
be:de:54:26:94:f0:4b:a1:4b:e4:b0:13:d1:11:a9:6f:65:d1:
7e:9a:29:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:48:49 2026 by rpki-client