Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier: W1wmWPRKAFx3VitOO9egH1zeGhIo73QYZ0bTbGQ3bp4=
Subject key identifier: 4B:91:02:EE:F7:87:45:59:AF:B1:6F:B5:28:40:7C:6C:1F:21:84:95
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 019D352D612DDB7CE55C8CC8D1CF27EE14BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number: 17BB
Signing time: Sat 28 Mar 2026 16:00:59 +0000
Manifest this update: Sat 28 Mar 2026 16:00:59 +0000
Manifest next update: Sun 29 Mar 2026 16:00:59 +0000
Files and hashes: 1: 1-UtCMLoYpQTccw0rAaKnjr3aeP4.roa (hash: N8latQNhGiEjvdqVYf+HsgaWPueV4r0S9nawy713xeE=)
2: 1-aNnq3G-3Uph4CDICNHGtMEexzM.roa (hash: COcKotvyQgXvt7JUDGUl9yoEfHAlHiTxt2Sp6dfcn4M=)
3: 5O5myP0lF1xP1jJEoQe9pSgv1NY.roa (hash: 1Ly5GkaJNn9NGiJHBbBhR411FTMTwdqj9zg5X4o1rJs=)
4: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: vFZCMeEN/MQJdxwVjaJVszM3p3o2s7v6rqmN8OIl8pM=)
5: QB5DaA1MIwR5ikAvXA3gM5FxDQY.roa (hash: QVnUg9rir6hPV0SWbkI+uNhJZ6Bpm1g1EMmNwsSmgyI=)
6: Zae_gMNSGLYpjvDka3zKlP-S3hQ.roa (hash: KFAqhbt9W5g+ZaeRsfu703acWAo0iC27yLXUw/eFD2k=)
7: dBqvOag7Vn6SMH5-RRqsLXHXhvA.roa (hash: l+RlXCW7RTqPoNsvx1EDw/ugEa8VniO9ekXCbH/csAk=)
8: eIAvi_fRWFUTaXHfkY48zizgI6I.roa (hash: zlK7AxneUnvHvJcK0AMBNR80xbI0s9cOUQ5f2N58mBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:2d:61:2d:db:7c:e5:5c:8c:c8:d1:cf:27:ee:14:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Mar 28 16:00:59 2026 GMT
Not After : Mar 29 16:00:59 2026 GMT
Subject: CN=4b9102eef7874559afb16fb528407c6c1f218495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:1a:23:3e:0e:43:75:24:fe:b2:5b:bf:ee:
a1:02:e6:ba:f5:44:e9:2e:33:60:1d:4b:ca:f4:0f:
68:95:55:66:f5:b7:f0:1e:bf:a6:83:1d:d7:aa:b9:
0a:98:d2:78:f2:84:9d:33:e3:58:82:ff:48:df:74:
fc:d7:bd:4b:b0:f2:e5:4f:48:24:fc:3c:ac:72:e0:
82:24:29:0e:b9:15:26:cb:fc:5e:4c:05:ab:5a:ae:
df:84:9a:c0:7d:ca:b0:5d:3d:5f:8b:07:d3:e5:1f:
21:2c:59:da:52:d2:d0:4b:a2:1e:e2:f0:82:32:d8:
63:16:46:75:60:74:89:f4:e1:93:75:46:e6:8d:da:
bf:99:35:df:2e:19:e3:d7:5a:45:9c:86:a6:52:27:
10:82:c3:ef:81:94:4b:33:a4:b5:9a:8d:b8:30:e5:
bb:43:d9:ab:9b:9e:5d:c3:3a:61:33:95:e3:bd:21:
54:15:75:4e:8e:02:59:ac:1d:c4:08:b2:b9:bf:82:
3d:06:97:b6:50:8e:84:d0:74:86:35:f1:e4:a6:8b:
b4:c6:b8:1c:48:41:65:1c:5a:f4:c4:e7:02:47:03:
35:1c:7e:72:a0:fb:ff:68:eb:9d:9b:25:b4:ac:f9:
27:9f:68:42:9b:24:fa:55:81:09:06:ea:13:64:cc:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:02:EE:F7:87:45:59:AF:B1:6F:B5:28:40:7C:6C:1F:21:84:95
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:21:3d:e1:86:c6:45:22:a1:c2:00:ab:e9:f2:0c:de:c8:b1:
dd:77:46:24:48:d9:a0:74:94:b6:fb:fd:49:83:d8:8d:a4:d9:
85:14:2e:13:8a:05:f9:5a:8c:8b:b3:33:61:c9:63:38:a2:6b:
6d:40:80:7b:77:8a:ca:da:6e:7d:ae:30:6c:44:39:ff:12:39:
02:fb:9c:74:b1:36:77:67:6b:37:f1:1a:c9:1e:54:7e:88:2e:
17:d6:16:ec:22:96:60:07:9a:73:b7:81:b4:ac:e2:3c:02:4c:
16:7c:6c:7b:8a:27:b2:2a:cd:4d:29:1c:d4:13:7b:2d:6c:58:
c6:15:01:06:a6:47:f6:3c:c8:c8:f4:59:ea:dc:71:94:81:42:
29:f3:d6:3c:82:a7:b7:1f:a6:a1:c2:8a:88:48:12:33:b2:a3:
9e:ba:af:43:28:d4:ec:85:85:14:b2:35:fa:6f:80:1b:93:ca:
1b:4f:56:20:e1:f5:78:de:17:65:fb:03:b3:ef:45:8f:df:bd:
2e:2b:af:62:98:50:63:9f:f6:7a:d5:0f:a4:06:09:a7:02:49:
5c:72:ec:f4:31:88:ed:2a:4d:ee:06:4a:7c:1d:1f:71:16:04:
12:70:27:06:87:c4:7f:81:ae:8c:a5:10:84:51:13:81:9c:d1:
41:46:a4:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ01LWEt23zlXIzI0c8n7hS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMDQ4MzUzODczNzQ1M2UyZjU3ZmZiNTc0OTljMzkyMmU4
MzYzNmQwHhcNMjYwMzI4MTYwMDU5WhcNMjYwMzI5MTYwMDU5WjAzMTEwLwYDVQQD
Eyg0YjkxMDJlZWY3ODc0NTU5YWZiMTZmYjUyODQwN2M2YzFmMjE4NDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZcaIz4OQ3Uk/rJbv+6hAua69UTp
LjNgHUvK9A9olVVm9bfwHr+mgx3XqrkKmNJ48oSdM+NYgv9I33T8171LsPLlT0gk
/DyscuCCJCkOuRUmy/xeTAWrWq7fhJrAfcqwXT1fiwfT5R8hLFnaUtLQS6Ie4vCC
MthjFkZ1YHSJ9OGTdUbmjdq/mTXfLhnj11pFnIamUicQgsPvgZRLM6S1mo24MOW7
Q9mrm55dwzphM5XjvSFUFXVOjgJZrB3ECLK5v4I9Bpe2UI6E0HSGNfHkpou0xrgc
SEFlHFr0xOcCRwM1HH5yoPv/aOudmyW0rPknn2hCmyT6VYEJBuoTZMxGSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuRAu73h0VZr7FvtShAfGwfIYSVMB8GA1UdIwQY
MBaAFD0Eg1OHN0U+L1f/tXSZw5Iug2NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEt
NjVhNDZjOGU0MWU5LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEtNjVhNDZjOGU0MWU5
LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiE94YbG
RSKhwgCr6fIM3six3XdGJEjZoHSUtvv9SYPYjaTZhRQuE4oF+VqMi7MzYcljOKJr
bUCAe3eKytpufa4wbEQ5/xI5AvucdLE2d2drN/EayR5UfoguF9YW7CKWYAeac7eB
tKziPAJMFnxse4onsirNTSkc1BN7LWxYxhUBBqZH9jzIyPRZ6txxlIFCKfPWPIKn
tx+mocKKiEgSM7KjnrqvQyjU7IWFFLI1+m+AG5PKG09WIOH1eN4XZfsDs+9Fj9+9
LiuvYphQY5/2etUPpAYJpwJJXHLs9DGI7SpN7gZKfB0fcRYEEnAnBofEf4GujKUQ
hFETgZzRQUakcA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 19:49:15 2026 by rpki-client