Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: IuTBEmwovvcDwh4HKdl7SoGX4uM+3vq38QzeS7dyFRg=
Subject key identifier: 96:2C:A8:1F:7F:47:6A:D7:83:27:39:3C:03:1A:92:34:71:22:45:0A
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 019D371B22217F6B187654CD2537ABE39F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 076D
Signing time: Sun 29 Mar 2026 01:00:18 +0000
Manifest this update: Sun 29 Mar 2026 01:00:18 +0000
Manifest next update: Mon 30 Mar 2026 01:00:18 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: q6H6pfakcKsBk14J83zNzeRR0xIX0OotJYby0P5ztl8=)
2: q4Ty8nMMQ4uHQ_jd585KCsdADRE.roa (hash: mEEFLdBEQ2NqJsxoY/z4GLGz394s4HaBIKdAwtz8jWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:22:21:7f:6b:18:76:54:cd:25:37:ab:e3:9f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Mar 29 01:00:18 2026 GMT
Not After : Mar 30 01:00:18 2026 GMT
Subject: CN=962ca81f7f476ad78327393c031a92347122450a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:1c:3c:24:30:04:02:61:61:ef:61:e0:b4:
7b:48:c2:5f:c9:cc:fe:aa:38:a7:d2:89:31:3b:a7:
2d:c5:cd:1a:af:65:ba:bb:a9:e3:3d:2d:9b:4f:92:
87:52:f5:8f:6a:dd:88:db:56:12:8d:9f:97:65:b2:
5d:56:df:a4:43:3e:15:0f:c2:14:9a:42:15:11:ea:
f1:62:f4:cd:09:3f:f9:95:26:94:c3:a3:b7:a0:c4:
b9:73:8b:38:8c:06:df:12:19:4e:1b:fa:40:4d:48:
9a:58:09:0f:df:34:c2:dd:d6:3e:b4:0d:f1:44:b6:
69:38:49:a6:92:b6:8c:5d:2f:9d:32:4c:b8:39:bd:
c8:3f:c3:01:77:db:75:9e:2d:eb:94:36:50:ed:98:
50:61:1f:93:79:24:e3:b3:4a:49:8a:f2:78:5a:6d:
a0:69:28:3b:86:77:54:d5:ce:72:1b:bc:ea:0b:f9:
a2:a9:01:d8:d2:cf:0d:51:28:fc:99:35:84:49:72:
63:d2:fb:be:41:a4:0a:42:87:d2:f5:e2:1d:3c:77:
28:b5:5f:de:85:c1:8f:94:2d:da:7e:b4:9b:e2:19:
eb:bd:3a:90:da:d5:1c:22:ae:a1:0e:c0:8c:65:ee:
ce:66:a8:90:3d:13:37:57:4a:40:9c:37:ce:c5:21:
38:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2C:A8:1F:7F:47:6A:D7:83:27:39:3C:03:1A:92:34:71:22:45:0A
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cf:a7:8f:dd:ff:d0:8e:8e:dd:94:2b:39:be:f4:a3:9b:61:
f3:1a:35:00:6d:9d:ed:8e:c5:a8:2e:ed:27:9e:da:8b:55:74:
38:b0:22:c5:51:1c:e4:25:c2:78:f6:85:a9:7f:43:bf:34:05:
a3:65:bd:a6:93:63:bd:7c:93:44:be:96:bd:3e:ee:ca:e0:6d:
0e:6d:56:56:4d:4f:8b:d0:ea:fd:38:09:33:56:cc:7d:36:19:
83:2b:a0:1a:3e:c9:52:22:a1:6f:09:ea:ab:81:23:f7:6d:d7:
4c:85:40:f1:d6:06:98:98:b6:95:58:64:88:7c:f0:5a:53:de:
2a:60:e9:ea:d9:63:91:e4:b7:f5:90:2c:d4:e4:7d:92:af:0f:
72:e9:6e:8a:c7:52:9d:cd:9c:9b:4d:49:19:93:3e:29:3c:d3:
a7:80:ea:25:39:16:16:b0:c7:36:64:20:c5:85:e9:16:72:9f:
d5:ba:74:11:fc:5d:7d:59:0c:3f:57:8b:ee:a3:84:37:1f:85:
57:22:24:a6:21:3d:5d:10:7c:1c:54:cf:b3:b7:bf:15:03:2e:
b6:27:fd:f0:bb:4d:c3:ea:52:b8:3c:d3:0c:10:56:71:c6:18:
90:b7:1c:02:84:98:17:c7:37:d7:fb:8d:46:59:06:a6:3b:85:
ab:83:7e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:29 2026 by rpki-client