Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
File: pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json)
Hash identifier: MOVxUTFhdXXh8sX30oPt0myjO8q3lBn8uxTcUAxVWQE=
Subject key identifier: DE:47:FD:71:9B:DF:C2:89:F5:DB:9A:1C:81:1E:1A:99:F0:5C:F5:66
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Certificate issuer: /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial: 01A178833FA972C96739ED5A260397E54E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
Manifest number: 0C35
Signing time: Mon 26 Oct 2026 14:00:29 +0000
Manifest this update: Mon 26 Oct 2026 14:00:29 +0000
Manifest next update: Tue 27 Oct 2026 14:00:29 +0000
Files and hashes: 1: pC1PxnBfbpu2eskCC6g9M0LEFYc.roa (hash: JhfK+r3Mm7DMr8mukWX8lT+1cq71+mLTWF1BdfN9lpc=)
2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: J0t9T052HrRYHIz929qiV5iSrmMtX6f2DCObbu0gJDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:3f:a9:72:c9:67:39:ed:5a:26:03:97:e5:4e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Validity
Not Before: Oct 26 14:00:29 2026 GMT
Not After : Oct 27 14:00:29 2026 GMT
Subject: CN=de47fd719bdfc289f5db9a1c811e1a99f05cf566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:42:be:58:8c:19:22:4b:8e:d4:13:ac:ab:
c2:f5:9e:89:4d:04:86:ed:eb:ea:1a:12:12:93:52:
72:1f:85:10:a4:08:98:a1:99:4a:41:8d:c1:0a:85:
70:af:e2:45:06:e7:c5:fa:a8:d2:a7:d7:58:3f:00:
05:28:9b:d4:40:f9:57:7d:93:00:4e:1a:d0:80:a1:
e9:87:a0:56:4d:eb:7c:13:35:f3:5d:3b:19:68:a0:
8d:ea:70:17:78:d1:57:13:b1:d1:80:fb:41:b6:96:
a6:2d:13:9b:92:ce:d5:1e:e3:e5:0f:7b:3f:14:07:
0d:de:5c:bb:b1:35:32:0e:d8:fc:5c:1b:1f:1d:93:
c4:f8:b2:8c:bb:15:87:03:37:3b:1f:37:b9:5f:aa:
8a:a7:94:31:3f:98:3b:a6:fa:45:a0:05:07:97:1c:
40:84:e5:93:e7:a3:19:95:81:43:db:1a:c4:a1:8d:
60:ab:94:39:b4:38:f3:3b:41:77:36:d4:bb:d5:9f:
67:42:14:ac:3a:b4:c4:61:54:50:19:20:69:23:b2:
5a:d5:66:0c:51:25:6f:ed:6b:a7:a9:87:8c:b3:b4:
ab:21:81:d8:25:38:27:fd:20:2d:00:07:63:b4:c6:
1d:79:72:b8:5f:e8:be:e4:f4:53:dd:97:05:ab:f7:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:47:FD:71:9B:DF:C2:89:F5:DB:9A:1C:81:1E:1A:99:F0:5C:F5:66
X509v3 Authority Key Identifier:
keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c5:a6:4b:fb:e2:1a:81:e8:94:d9:11:65:00:ee:02:eb:6a:
3a:b7:85:c4:b8:b1:be:14:75:3a:e5:44:57:08:3b:9e:24:40:
2d:6a:d8:78:6f:6d:6d:14:7c:d0:dc:13:06:f6:08:66:05:be:
2f:83:e2:a0:7c:02:66:f0:38:b7:67:73:d8:68:f0:f8:18:75:
74:54:46:4c:b1:ee:62:f6:ee:7c:67:c0:62:13:72:6d:86:2f:
ff:19:51:f2:6b:64:dd:f6:55:17:34:49:3b:01:ed:b2:b1:50:
99:95:a6:cb:07:70:44:95:7a:7f:52:c7:f7:ba:4e:5d:f8:a1:
d6:dc:88:c8:e2:22:28:67:41:5c:07:3c:e2:0a:c7:f3:db:61:
8c:6f:91:82:47:bf:db:e9:82:51:d3:b5:cf:98:98:32:1d:05:
a5:e6:3c:fe:b4:20:6f:23:34:ce:a7:1c:7e:0e:51:bb:ce:58:
f1:db:32:f6:54:4f:12:4b:c7:7b:dc:09:8d:ad:97:a4:60:cf:
f7:a4:24:a4:89:48:04:e1:64:3c:42:ec:3a:4d:c6:42:da:37:
95:c6:74:ae:cf:f3:54:08:b7:06:5c:7a:06:54:82:95:95:51:
bb:52:fd:52:81:8f:36:9e:99:39:37:c3:3a:4a:8c:42:e1:39:
23:63:b7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:55:51 2026 by rpki-client