Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
File: pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft (raw, json)
Hash identifier: wSBvwBNvfpyJEdcCTjOHQxdeNIJzYjFktsJiAtrjXqo=
Subject key identifier: C8:6B:0F:C2:60:03:18:DC:F6:CF:C1:ED:AE:CC:70:9D:2A:94:6B:EF
Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
Certificate issuer: /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Certificate serial: 01A13146431BB4BE5C1363C59FDA45B6E1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
Manifest number: 04C8
Signing time: Mon 12 Oct 2026 18:00:50 +0000
Manifest this update: Mon 12 Oct 2026 18:00:50 +0000
Manifest next update: Tue 13 Oct 2026 18:00:50 +0000
Files and hashes: 1: 6phx-w5UIxjdX_HJEdkzEKdfgmU.roa (hash: SGPInug9Hk9CwPLCuVMV05j3spVvBaapQvXlXlYZ4gY=)
2: pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl (hash: 5edL7D0kCFmAvLs1JPYkYcBrUeAkqkeOWqZjXhSFwcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:46:43:1b:b4:be:5c:13:63:c5:9f:da:45:b6:e1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Validity
Not Before: Oct 12 18:00:50 2026 GMT
Not After : Oct 13 18:00:50 2026 GMT
Subject: CN=c86b0fc2600318dcf6cfc1edaecc709d2a946bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:a1:f0:3d:20:64:fb:cb:9f:ff:9b:85:11:
c3:96:8d:13:be:72:f1:68:f8:1a:64:5d:b2:cf:c7:
2c:ad:11:68:1d:cc:e3:a8:16:67:16:fe:d0:1d:e2:
84:db:da:4d:b3:83:91:98:f0:7a:53:bd:f7:21:d0:
b3:22:e4:e8:2b:c4:07:a0:e1:2c:99:eb:83:9a:78:
ce:98:87:0d:90:28:1a:10:d6:fe:82:20:8e:ef:50:
4c:d3:a3:21:86:a1:0b:c1:37:61:92:20:03:bc:ec:
b9:10:69:7c:57:2f:3a:7c:ef:8c:65:d3:47:4a:36:
17:79:80:5f:b2:c0:60:d7:a8:96:24:f4:9c:6c:fc:
55:48:3b:6f:ab:b3:7b:eb:ed:12:f9:07:fe:af:21:
9a:bd:34:2a:75:79:d4:f2:c6:77:a4:65:9e:94:43:
a5:1e:a5:50:c0:6c:94:ec:09:44:1f:e2:4c:75:4e:
a6:f7:c1:58:67:b3:c7:77:fb:b2:6e:16:8a:ea:03:
03:4c:50:ad:31:40:0b:b2:1a:e8:7d:25:70:fb:8d:
2c:f8:46:97:21:c3:db:2d:c3:48:39:77:c6:58:c5:
07:30:32:51:35:68:23:42:06:ca:c3:e0:9d:80:d8:
21:7b:6f:7b:a9:df:e8:48:26:bb:ff:8a:b9:4c:73:
b6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6B:0F:C2:60:03:18:DC:F6:CF:C1:ED:AE:CC:70:9D:2A:94:6B:EF
X509v3 Authority Key Identifier:
keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5f:22:61:ab:f8:74:cd:71:79:6a:38:55:e3:e5:75:58:ff:
e7:54:64:96:37:82:1a:61:76:89:62:7d:18:a2:e1:21:9c:af:
97:ed:e8:12:49:b2:ee:96:ab:4c:ad:06:84:b6:85:47:3b:2b:
54:42:62:fe:a4:ee:4b:41:80:fb:e1:d8:f7:86:64:7e:4c:4e:
a1:21:21:d8:aa:ab:32:a5:bd:52:69:56:d4:88:f0:6a:f9:fa:
ea:4b:41:3c:b8:2f:ed:d6:79:5d:4d:29:e4:17:91:c2:4f:5f:
a3:51:96:eb:1b:29:61:33:43:e1:19:0c:68:65:b8:a8:5e:f6:
7a:f5:bd:25:1d:81:78:25:62:1d:a5:e6:20:63:8c:5b:a7:82:
07:2d:82:2f:19:c2:8a:f8:df:cd:d9:eb:5c:10:d5:67:ef:91:
bf:fe:16:39:db:37:8f:50:1b:42:e1:65:7e:52:62:53:02:d7:
b0:9a:b7:12:99:6d:92:43:f1:f7:48:43:ef:ea:99:50:50:07:
52:28:de:e7:63:90:f2:8f:e6:27:2f:5f:9a:e6:05:46:b8:77:
59:63:b9:55:f9:10:e6:54:d7:ee:7a:1a:db:0d:9e:d5:af:a3:
df:3b:99:57:8a:54:27:83:e2:bc:43:4d:bb:89:03:c4:0f:84:
89:46:d0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 21:15:03 2026 by rpki-client