
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
File: pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft (raw, json)
Hash identifier: oSErCwQHjVPJNxz+jBYEcbYAmmmgfz86Sukk7I1bk1s=
Subject key identifier: 22:6F:BB:2D:2F:27:7B:7E:DB:4A:41:60:98:F1:B1:F2:2F:F9:35:11
Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
Certificate issuer: /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Certificate serial: 019D3977B4F15AD1D43833228D6ECE810082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
Manifest number: 02BA
Signing time: Sun 29 Mar 2026 12:00:39 +0000
Manifest this update: Sun 29 Mar 2026 12:00:39 +0000
Manifest next update: Mon 30 Mar 2026 12:00:39 +0000
Files and hashes: 1: 6phx-w5UIxjdX_HJEdkzEKdfgmU.roa (hash: SGPInug9Hk9CwPLCuVMV05j3spVvBaapQvXlXlYZ4gY=)
2: pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl (hash: c/upDERvn0bFiFkwV1oJAInmIKef7dfaW25eqmjdnFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b4:f1:5a:d1:d4:38:33:22:8d:6e:ce:81:00:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Validity
Not Before: Mar 29 12:00:39 2026 GMT
Not After : Mar 30 12:00:39 2026 GMT
Subject: CN=226fbb2d2f277b7edb4a416098f1b1f22ff93511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:c5:27:98:81:eb:ef:54:8a:22:cc:80:66:
a1:9f:d4:50:40:ff:bc:63:52:7d:3b:5c:c7:fd:a4:
90:8e:5b:46:9e:2e:3d:24:e8:9f:25:94:3a:7e:93:
80:3e:1d:a2:48:8d:d9:03:e4:f8:31:e5:19:06:78:
04:c5:fc:8a:68:df:d4:f9:15:cf:11:43:d5:fe:28:
5a:e3:6b:96:fe:51:84:40:0b:ea:34:79:51:50:64:
de:cd:59:b2:7b:7d:ba:9d:53:64:47:b0:4a:33:12:
0a:fe:e6:4e:a7:d9:97:13:fc:15:c7:4f:2c:2e:44:
28:e3:78:f6:2a:4a:04:c4:fc:b5:5e:b0:e2:9d:18:
5c:73:c7:b5:6b:75:09:ee:71:eb:11:b2:e3:34:bf:
61:3d:64:f6:8b:a6:d7:66:55:12:88:96:2b:06:84:
bf:82:f3:ed:9b:01:84:4f:65:09:82:70:9c:ce:7c:
5e:c2:a8:31:cb:5a:2e:90:02:25:76:25:45:9e:77:
46:01:f4:b5:62:16:0e:cf:5a:54:41:48:b5:10:d0:
35:1d:6c:bd:a9:db:a0:15:3a:38:56:77:06:57:c2:
bc:6f:93:82:dc:29:62:77:fd:94:51:ce:0c:c4:22:
78:12:bf:0e:c1:4f:cc:90:f3:8a:59:3f:3e:ec:5c:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6F:BB:2D:2F:27:7B:7E:DB:4A:41:60:98:F1:B1:F2:2F:F9:35:11
X509v3 Authority Key Identifier:
keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:73:fb:4b:31:e1:b4:8b:e1:dd:f1:a4:64:aa:c2:c3:ce:57:
d3:a5:b5:85:84:c4:b4:ab:6a:f6:06:23:4b:ad:d9:08:e8:de:
80:9f:8d:95:27:45:37:2e:46:21:a1:6a:7c:af:95:53:07:e6:
c2:de:e2:9f:b8:78:ab:04:41:38:69:fc:4a:b0:cc:6a:eb:5e:
b4:59:63:65:a2:0f:1c:72:80:f0:2a:81:ed:da:19:b2:fc:d0:
bb:82:47:6c:a5:7e:ef:0e:86:e4:7f:7e:56:9e:53:d7:25:9a:
e1:ba:89:ee:6d:9a:f0:94:20:09:ab:7f:59:2a:e0:e4:78:21:
ae:50:9c:49:7d:13:1f:ae:8e:99:74:99:8c:ce:9d:c9:38:31:
bf:e1:f4:bb:65:bb:72:2b:2a:84:cc:52:13:c1:55:1a:d1:5a:
c4:08:e9:4b:39:32:90:c0:c0:11:01:f1:97:29:f2:53:21:b7:
a0:90:3c:2a:50:03:c1:52:e3:a2:34:b8:91:44:e4:a6:5e:b1:
67:63:c5:38:f0:10:85:48:90:f0:9b:ef:12:01:7c:4d:45:09:
99:d5:11:c3:8e:ef:a9:2c:2c:cf:b4:4d:54:5b:e7:02:df:fe:
ef:ec:98:7c:fc:b2:26:0e:40:f6:f9:a8:cd:ab:da:cb:61:56:
67:cd:c2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:46 2026 by rpki-client