Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json)
Hash identifier: xrUPdex0PLYAZ+dslOD3dxW0uMOPw/asT05g00hdid8=
Subject key identifier: EF:A9:37:7C:E1:7B:08:33:E0:F2:2E:8B:48:85:5B:CE:17:01:EB:A1
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 01A06E02A233BF208DA0B331C352EACB6609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
Manifest number: 1376
Signing time: Fri 04 Sep 2026 20:01:01 +0000
Manifest this update: Fri 04 Sep 2026 20:01:01 +0000
Manifest next update: Sat 05 Sep 2026 20:01:01 +0000
Files and hashes: 1: gIBhWboHIlbVLsOrG6_KrzVsgsg.roa (hash: JloPm0symVV0m3PFdsgfuUWNtGXtbv/UJhvDlmOgv8I=)
2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: M0Njt21c0NNeYo7lpbWFg1uzRAIQrLL6PdUnCHQVIpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:a2:33:bf:20:8d:a0:b3:31:c3:52:ea:cb:66:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: Sep 4 20:01:01 2026 GMT
Not After : Sep 5 20:01:01 2026 GMT
Subject: CN=efa9377ce17b0833e0f22e8b48855bce1701eba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:9c:ca:42:0a:20:3f:47:9e:e8:d0:c7:6c:
11:14:00:fa:ef:54:48:4d:da:92:7c:a4:1d:17:21:
bb:e6:67:44:de:aa:8d:3d:b9:30:4e:14:d8:85:6d:
40:12:86:36:3e:17:31:ae:97:d0:1c:a5:cb:7c:aa:
ba:99:87:45:f5:fe:c8:db:d0:38:8a:84:65:04:0e:
4f:a5:fc:a3:c6:da:5c:14:53:99:29:95:e0:41:80:
93:cd:da:df:16:de:9f:b1:73:42:e3:6f:d1:8f:a2:
46:35:df:87:ff:b1:5a:fa:69:30:d5:23:bb:c2:34:
bd:bf:5d:d5:8a:89:73:66:3b:7b:b5:f2:90:60:61:
5e:d9:f0:a4:14:6b:fc:d8:87:98:d8:ff:f8:1c:06:
5c:7a:7c:0e:9c:30:36:2e:a0:46:f6:ba:3a:e4:6e:
b2:75:35:bd:a5:68:67:46:5d:0b:48:d6:4e:05:b6:
6e:0d:8e:34:54:af:f4:9c:b0:66:d6:b9:96:77:4e:
b8:b6:cc:19:80:85:82:3a:bd:f7:82:ee:b3:19:2f:
fb:53:4b:ad:84:2e:70:a0:65:32:82:73:9e:75:bd:
4d:d2:d0:d8:99:dc:cd:f7:f9:a8:a8:c8:74:37:03:
f5:14:80:51:9f:cb:6b:bc:e2:c2:6f:fb:ba:92:b9:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A9:37:7C:E1:7B:08:33:E0:F2:2E:8B:48:85:5B:CE:17:01:EB:A1
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f7:3d:20:55:71:4f:19:dd:a7:40:f9:4d:8f:7f:2a:9f:7f:
23:42:1b:e4:a6:a3:df:6a:2d:1d:23:f1:11:63:9c:a7:77:80:
e4:8f:96:70:08:dd:62:3b:85:dc:6a:47:51:4d:32:66:44:a6:
b7:7c:22:bc:e5:89:83:06:ec:70:68:d7:45:ef:b2:02:a8:f1:
eb:81:02:4c:3e:60:28:f3:a4:98:30:37:eb:25:0b:95:c7:ae:
c1:1f:a7:3a:9e:7b:35:65:e2:84:31:1d:14:d4:1e:ae:63:4f:
07:49:44:85:21:e0:25:4d:b5:aa:58:a7:ad:1d:7d:23:c9:c5:
6b:7b:6d:3c:b6:ee:71:ab:b1:cc:fd:cf:65:6a:8f:89:a8:4f:
84:0e:f2:1b:d5:5a:0d:3e:ec:1c:d6:7b:75:c4:79:47:37:ff:
c1:fd:f4:6c:e6:db:fc:a9:8f:f4:3a:ed:63:30:a8:1b:5d:ac:
f1:59:86:30:97:ec:cd:45:d3:71:39:7a:a8:a0:d7:db:8d:f2:
cb:96:c2:bf:61:7a:1a:2e:9f:b3:da:2c:9d:b1:d3:64:7f:8a:
76:0c:9f:d1:ad:08:a6:7f:d4:46:81:05:49:95:34:35:77:5f:
8a:f4:4d:9d:0e:5a:f4:b2:f3:6c:24:24:ea:c0:61:97:8e:24:
97:ca:d6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:51:22 2026 by rpki-client