Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: 68wyKH/WrN3ZiDgkbGxrnwJRgpg/ac3377K6zoxxMH0=
Subject key identifier: 73:E4:EC:31:D0:29:E2:98:62:80:03:D7:74:EB:71:8A:64:19:29:D1
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 019F9F27D49F0FCAFF5898AF8C617DCE6506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 08AC
Signing time: Sun 26 Jul 2026 16:00:15 +0000
Manifest this update: Sun 26 Jul 2026 16:00:15 +0000
Manifest next update: Mon 27 Jul 2026 16:00:15 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: oUpwVPJcqlDa70aRhAnk1saJdtPz8A1KkitFhvYr/Ys=)
2: q4Ty8nMMQ4uHQ_jd585KCsdADRE.roa (hash: mEEFLdBEQ2NqJsxoY/z4GLGz394s4HaBIKdAwtz8jWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:27:d4:9f:0f:ca:ff:58:98:af:8c:61:7d:ce:65:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Jul 26 16:00:15 2026 GMT
Not After : Jul 27 16:00:15 2026 GMT
Subject: CN=73e4ec31d029e298628003d774eb718a641929d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:9f:89:7d:d7:74:4f:3e:69:da:cd:81:05:
52:c9:21:84:02:0c:32:d7:24:a5:80:7b:38:c1:48:
f5:10:ec:f1:8f:b4:6b:93:03:e6:86:d2:37:77:b5:
ab:3f:d7:a1:b8:a5:a4:f9:16:2c:e3:72:f0:ac:00:
ed:62:6c:d3:3d:50:90:ac:ba:02:19:a5:d4:5e:54:
0e:83:5e:27:80:78:d4:c2:f7:70:67:67:d6:98:c1:
ca:f1:1c:8e:a6:f5:54:1d:a0:aa:ca:54:b0:15:19:
88:ad:5f:6a:8b:2f:f5:ef:1a:8f:25:61:d2:ef:0a:
d5:a5:e9:4a:38:96:41:a7:80:78:f8:cc:72:e0:0a:
06:f5:8c:e6:64:10:ea:cc:8e:0a:7a:81:00:b9:dd:
c6:68:ef:43:d1:49:4c:00:25:83:09:0b:e0:57:89:
eb:64:f7:fe:b3:19:1a:28:65:40:5a:a6:28:a7:e8:
5b:17:70:8d:05:4f:a0:fe:59:98:c1:b5:43:c7:0d:
84:03:f2:cc:c5:6a:07:25:0e:c2:09:98:ff:1c:07:
db:9d:ae:29:f7:58:e2:6a:65:d0:ca:9d:c5:24:4f:
6b:67:5c:2f:4b:6c:23:27:82:34:96:22:13:97:4d:
35:43:d2:eb:41:b7:77:f3:a6:bf:a1:fe:0a:ff:a9:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E4:EC:31:D0:29:E2:98:62:80:03:D7:74:EB:71:8A:64:19:29:D1
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fa:b7:c0:5b:c5:a3:50:24:d0:5e:62:15:cd:01:be:81:c0:
39:44:28:b0:52:ca:88:af:04:e3:7d:d6:3d:b1:60:bc:42:b5:
9f:1e:73:c2:08:4f:58:d5:81:37:4a:a1:26:0b:ac:b9:7a:d3:
b0:e9:53:a5:67:f3:70:7c:73:ef:57:fe:0a:c5:4d:24:4b:78:
72:13:ea:f3:82:24:6b:4b:e1:92:7a:22:57:3a:1f:41:71:ab:
80:b1:ae:95:6d:7e:72:24:3a:ca:6e:84:6f:1b:a1:af:03:a5:
28:5d:d3:b4:23:c8:90:56:13:67:3d:5c:68:7f:89:b5:fa:34:
ed:3c:70:9a:70:a9:16:56:ec:d5:cc:f4:fe:48:67:53:0b:6a:
30:a9:fd:0a:49:b7:af:a7:70:bb:0b:4f:c0:7b:d0:4f:f8:b5:
b1:34:7a:9c:f4:ca:6b:98:2e:20:cf:d7:9e:d8:7a:e5:77:d0:
45:c3:ba:f5:8f:e7:ee:aa:d5:f1:35:11:21:fa:9d:fd:b6:b1:
a2:09:4f:eb:ce:10:d2:03:1b:7a:28:b3:38:1f:a8:5b:f6:62:
51:f6:7c:60:27:f0:b2:ef:9c:5c:2f:fc:ba:8d:2c:05:cf:3f:
d7:6c:f0:7a:6a:61:d0:0a:81:79:41:b2:ba:a5:4c:9c:73:98:
10:76:eb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:16:49 2026 by rpki-client