Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json)
Hash identifier: 3Y0uw2DtfrK3H90GI3x3ZdhuCRR8KpGRUjfve4OqF3A=
Subject key identifier: 32:0C:6A:6D:CE:20:A3:84:39:A2:75:19:9E:16:1B:FB:23:1B:C2:BF
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 01A189E4F616F12B3A7F8019395A9CEE5695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
Manifest number: 1409
Signing time: Thu 29 Oct 2026 23:00:45 +0000
Manifest this update: Thu 29 Oct 2026 23:00:45 +0000
Manifest next update: Fri 30 Oct 2026 23:00:45 +0000
Files and hashes: 1: gIBhWboHIlbVLsOrG6_KrzVsgsg.roa (hash: JloPm0symVV0m3PFdsgfuUWNtGXtbv/UJhvDlmOgv8I=)
2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: aeluHsbak7gvUm38MSSWfBoOSLPYl0Ds55+XRIdCo9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:e4:f6:16:f1:2b:3a:7f:80:19:39:5a:9c:ee:56:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: Oct 29 23:00:45 2026 GMT
Not After : Oct 30 23:00:45 2026 GMT
Subject: CN=320c6a6dce20a38439a275199e161bfb231bc2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:c5:3b:1c:1f:d2:d4:ac:ab:df:c9:47:bf:
52:2e:82:09:f4:1e:40:6a:ff:ac:37:3e:61:57:1d:
ef:cf:75:b9:73:ae:98:f2:44:ea:16:0a:ee:49:df:
a7:5e:ba:60:74:37:19:f4:8f:4e:d1:de:c6:5f:5c:
87:c1:a7:12:53:86:7c:8a:63:31:7f:79:3e:45:e3:
43:75:62:a0:4d:16:ae:a8:82:34:49:b0:c4:3a:b7:
b6:80:e8:1a:13:2a:ac:a4:70:0a:7d:85:17:40:17:
51:f5:1f:f9:38:50:e6:47:e7:8c:3e:92:d5:d9:93:
ec:85:70:cf:c7:2f:08:de:b4:4c:7f:cc:6a:b0:a9:
7b:00:e8:f8:1a:0b:7e:58:30:8a:66:f5:ac:a8:58:
fe:5b:0d:a7:07:45:89:d0:36:43:b1:de:ec:78:55:
6d:85:29:7f:b7:38:9b:e6:ec:f8:a9:60:06:fa:d3:
f1:a4:8c:2e:62:d5:b3:f7:38:3d:a8:31:86:8b:f0:
73:ce:a9:fd:83:65:c4:3e:d4:8c:a9:02:e0:ee:6c:
d6:14:b6:ef:9e:f1:0f:81:1e:a0:37:94:b5:69:9a:
d8:bf:fa:d3:d0:73:47:88:45:3d:6f:a1:d1:cc:8b:
82:77:22:af:9d:e9:c7:82:a3:44:79:1b:45:c1:46:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0C:6A:6D:CE:20:A3:84:39:A2:75:19:9E:16:1B:FB:23:1B:C2:BF
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fa:cb:cd:e8:a0:90:e4:62:42:81:bf:d3:aa:75:9f:3a:1c:
d7:52:ae:d8:dd:63:78:73:3d:27:b6:53:3d:d4:21:36:f9:f1:
8a:89:23:48:51:1c:d8:b0:02:d5:71:07:d4:43:42:6c:0d:f8:
83:3a:c3:41:24:d9:1a:9a:11:5b:c4:af:50:03:c3:ee:86:a2:
ae:02:4a:b3:b8:e5:e0:f9:9c:c0:39:15:f2:04:36:f2:c6:81:
b4:c3:de:94:fa:88:2e:03:8a:a1:b0:4e:c4:96:36:5e:f2:d8:
90:10:31:9b:87:cd:b8:9c:99:80:7b:9f:12:82:98:e0:5e:fc:
d1:ab:cc:37:fe:75:6e:1c:01:ea:88:83:6d:05:d1:70:fb:ab:
43:0c:80:e5:cc:c4:06:df:7f:fd:6f:36:e9:74:8b:19:a5:9c:
4d:5f:50:ec:e1:7f:0c:7b:d7:e3:eb:4e:70:19:f0:cf:9d:4f:
d5:a3:29:71:db:ba:29:03:8e:a6:ab:b7:42:d2:5b:cf:1f:7e:
fb:0e:fa:66:e8:67:03:d6:44:dc:7d:e2:b2:81:e3:ab:67:0e:
07:56:4c:d1:ea:2e:71:77:be:b4:61:e4:ec:30:1b:c3:8e:94:
25:3f:29:6a:d5:d4:ed:92:a6:91:e2:d0:8d:1c:3f:71:0d:ca:
4b:6f:68:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:11:22 2026 by rpki-client