Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: VqRWxlun+bW1NFdyL4O905nnr0yFEpiTsmTMYmyygf0=
Subject key identifier: 5B:90:5E:07:FF:36:ED:E3:C3:83:52:4E:BD:C5:C0:80:45:25:2A:8D
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 019EB57B4FDAEFE505DEBD19398A387ACA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 0833
Signing time: Thu 11 Jun 2026 07:00:17 +0000
Manifest this update: Thu 11 Jun 2026 07:00:17 +0000
Manifest next update: Fri 12 Jun 2026 07:00:17 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: KJz6WAn9Ydk9Trw1JnQ97RAjkUAFAWzoqQ9WBRBNX/Q=)
2: q4Ty8nMMQ4uHQ_jd585KCsdADRE.roa (hash: mEEFLdBEQ2NqJsxoY/z4GLGz394s4HaBIKdAwtz8jWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:7b:4f:da:ef:e5:05:de:bd:19:39:8a:38:7a:ca:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Jun 11 07:00:17 2026 GMT
Not After : Jun 12 07:00:17 2026 GMT
Subject: CN=5b905e07ff36ede3c383524ebdc5c08045252a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:bf:81:07:10:37:27:ca:ca:d6:43:45:41:
7e:62:2c:0e:29:da:16:2e:e1:e1:55:3d:f9:21:a3:
96:4b:97:de:1e:70:81:32:d7:5e:6d:8a:0f:f1:d6:
df:ea:13:0a:15:fc:5c:ca:48:56:b5:65:cf:22:be:
27:8a:c1:cf:37:6f:6e:1b:2e:9a:67:ec:56:4a:77:
7e:c4:d4:a3:fd:81:d3:49:10:98:76:31:48:f2:3a:
be:61:38:48:ff:9d:3b:d5:86:86:cb:2a:9e:ac:99:
b8:bf:f4:73:1b:5c:53:0e:bc:01:0b:ba:66:fe:00:
24:38:22:2a:e8:4f:e2:ef:f1:2a:e6:1e:c0:db:af:
a4:b9:d8:24:64:ac:66:7b:83:1d:37:f5:15:51:8d:
4d:81:2f:07:6a:6c:0c:58:24:22:15:1e:3b:90:bc:
d9:e2:f8:27:15:cf:41:27:56:5a:61:86:ca:59:e0:
2b:fb:83:17:fc:7b:85:4f:97:f7:32:a8:93:9a:b1:
a4:f5:f2:75:1f:00:89:48:81:63:b5:40:f0:60:fe:
60:b7:e7:21:fb:d0:1a:13:80:f6:1f:58:cd:ad:79:
1b:4d:12:25:bf:50:55:0e:21:c9:f7:ce:cd:8b:c6:
8b:2b:5e:34:58:a2:e0:15:e6:01:8b:34:40:cd:2d:
10:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:90:5E:07:FF:36:ED:E3:C3:83:52:4E:BD:C5:C0:80:45:25:2A:8D
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bf:dc:0e:d2:a8:1d:d8:6d:5d:77:cf:7a:4f:26:4b:a8:c8:
c6:6d:ee:28:c2:37:90:27:ca:99:fb:c5:78:23:c2:9a:1e:c3:
ee:1d:de:55:89:38:20:ab:52:01:c8:13:fa:9e:ec:39:38:e0:
b4:17:a8:3d:66:30:8f:20:a5:2c:48:4d:a9:1f:d2:d5:7b:d1:
ba:c0:14:85:dd:17:73:71:b8:99:95:16:95:04:f7:9d:47:5f:
3b:19:ac:79:55:02:ea:29:9b:78:4b:6e:f9:a3:9b:b5:38:14:
14:62:40:1d:17:ab:8d:ce:b9:a6:dd:46:cc:5f:4c:77:f9:3b:
ab:ec:57:91:bd:70:1f:15:ca:09:f1:d5:a3:35:8c:36:34:dd:
75:aa:8e:4d:88:7b:b8:bd:f0:39:7d:bc:fd:1e:e9:5f:17:fd:
90:0a:46:70:6a:de:3c:b4:c3:d9:34:7d:ac:13:c1:08:9a:2a:
9a:26:26:1a:c4:8c:65:86:bc:9d:24:4a:1c:d3:ef:7b:92:0e:
89:be:59:5e:3d:fc:6a:ec:c0:6c:d9:66:ee:83:46:69:34:fd:
0c:87:45:45:49:b0:0d:d0:82:d0:26:50:79:9b:f7:2a:cb:8d:
49:16:db:2a:43:d8:56:4b:3c:9d:1f:6b:7c:f4:64:65:ea:1b:
26:16:e3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 15:52:31 2026 by rpki-client