Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: joCQoZUtZM9JDOhg2F3E28knEG7GzyHvha+nRaoN9fc=
Subject key identifier: C7:D6:E6:AB:E0:D9:84:20:6C:A7:B3:89:9F:04:1B:4F:7E:55:4C:CB
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 01A174703E4B2C2961862250F7E936DEE1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 099F
Signing time: Sun 25 Oct 2026 19:01:15 +0000
Manifest this update: Sun 25 Oct 2026 19:01:15 +0000
Manifest next update: Mon 26 Oct 2026 19:01:15 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: +e5DYSzupJBuwYaskDzYlsye9z3MTUwdJ+rcK4i8m1E=)
2: q4Ty8nMMQ4uHQ_jd585KCsdADRE.roa (hash: mEEFLdBEQ2NqJsxoY/z4GLGz394s4HaBIKdAwtz8jWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:70:3e:4b:2c:29:61:86:22:50:f7:e9:36:de:e1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Oct 25 19:01:15 2026 GMT
Not After : Oct 26 19:01:15 2026 GMT
Subject: CN=c7d6e6abe0d984206ca7b3899f041b4f7e554ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:b5:eb:03:5d:9d:d9:2a:35:de:7a:08:c1:
64:c5:7d:f3:3d:8c:c2:d6:99:5c:d7:73:e3:92:c0:
fd:01:e9:ed:16:47:e0:fc:a6:01:14:c5:e5:19:12:
0a:15:68:fe:84:0e:48:08:12:d9:66:f6:9f:d0:a2:
84:50:fd:e8:a5:da:17:14:7e:37:f5:92:5d:87:19:
9f:eb:d4:fa:ce:6f:4d:c0:29:bd:c7:bc:26:61:eb:
27:05:78:51:14:01:79:c4:c8:2f:cd:76:63:09:dc:
cd:77:d9:29:61:98:d6:ba:20:e9:bb:8e:0b:dd:47:
a2:0c:6a:95:66:29:f9:09:0b:87:5a:80:1e:62:38:
1c:8f:46:82:85:6f:12:fa:7a:35:c2:3b:85:a4:79:
bd:ee:70:d5:f1:7e:2d:de:27:59:59:5d:e4:cc:12:
53:ff:bd:db:9f:70:ab:d1:2f:c2:63:aa:a8:38:e4:
06:3b:43:46:71:ea:b1:30:86:e5:01:19:ad:1c:44:
e0:c8:20:c4:b0:86:37:91:3d:b6:fe:2d:af:66:73:
2d:b7:5b:f5:b6:f1:b7:e9:91:a0:f4:60:82:87:d8:
30:1b:dd:f4:c3:f4:fa:23:3d:14:0e:f3:99:57:ee:
88:39:75:97:5f:7d:01:0b:f7:ee:76:c7:19:3a:05:
09:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D6:E6:AB:E0:D9:84:20:6C:A7:B3:89:9F:04:1B:4F:7E:55:4C:CB
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d1:fa:20:88:a3:a2:4a:a4:f5:1b:4a:6e:51:d9:08:55:df:
28:97:82:02:87:df:af:ff:dc:4b:eb:62:27:0c:e0:e2:d1:77:
8e:ec:a4:fc:af:3b:38:90:cb:46:1f:ee:39:30:4d:e6:41:07:
18:89:16:d0:9f:c3:41:38:cb:25:3f:53:d0:6d:97:41:69:13:
ce:b8:e6:f8:d3:d1:9f:9d:01:31:b1:ec:ff:fd:76:45:4e:1e:
ba:c8:23:d6:23:35:f8:de:8b:8a:14:62:b7:bd:0c:06:b7:32:
80:e3:a3:a8:b0:1b:22:40:4d:68:55:06:75:f7:57:c7:8d:4b:
5c:8e:ae:e9:b0:60:7b:09:b2:dc:45:3e:e2:31:fa:5a:d9:1b:
68:d4:3a:45:cd:fa:dc:1c:fd:94:ea:79:01:9b:cd:70:29:03:
d7:c2:4b:bc:8b:b0:c8:b3:67:c3:38:eb:0e:08:84:94:00:57:
32:16:a7:f6:e5:32:55:18:02:3f:d1:a8:56:86:f7:6a:d0:28:
48:7e:41:12:3f:1f:23:b1:de:c5:31:22:96:f7:b3:3e:ca:ea:
a1:6f:7e:c4:cb:c2:6a:3d:90:e1:7a:e5:5d:4c:83:06:ae:03:
fa:bc:59:f0:1a:ad:93:e2:74:b8:cb:a8:92:0d:00:fb:c5:37:
a8:18:dc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:51:28 2026 by rpki-client