Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier: THMacaeDTaNu2At5HRbHU87x3YizgQmNBX6bRfn4qcM=
Subject key identifier: D1:B2:0D:45:18:33:F1:61:08:4E:B6:48:24:DD:90:D7:41:40:85:04
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 019D371B9A4D8519726064A01E570A899BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number: 0755
Signing time: Sun 29 Mar 2026 01:00:48 +0000
Manifest this update: Sun 29 Mar 2026 01:00:48 +0000
Manifest next update: Mon 30 Mar 2026 01:00:48 +0000
Files and hashes: 1: gJz6RmgOr74ogolKTIbJJ0khIbY.roa (hash: nc3zZ0AuWIJRv8B+9l+JRXdB9csW2X29DxKckbvvC9Q=)
2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: YgB8oqioYv6iHOj36veV1H/CMDDjyJxHU89+X9MBScY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:9a:4d:85:19:72:60:64:a0:1e:57:0a:89:9b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: Mar 29 01:00:48 2026 GMT
Not After : Mar 30 01:00:48 2026 GMT
Subject: CN=d1b20d451833f161084eb64824dd90d741408504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:36:7c:12:95:94:6e:0b:b2:ee:65:5e:ac:
a4:8e:ee:b5:d4:84:9e:e8:ab:31:58:27:cf:5a:f3:
43:47:ae:c6:3a:7a:fb:96:62:6c:ef:33:86:24:3a:
92:f2:31:b0:08:93:6b:42:6c:eb:99:2b:7e:e6:1e:
85:1b:39:91:fc:ec:38:ac:74:b0:28:30:53:c3:59:
a4:77:86:50:f1:d7:e8:9a:7a:ec:73:75:3e:a3:92:
2b:3b:45:1a:b3:81:aa:b6:f7:71:4e:18:1f:58:3d:
35:9d:33:a6:06:1e:52:fb:d3:af:b5:c4:61:11:5d:
ab:d9:6a:55:df:cc:0e:6b:3e:29:93:4f:41:4c:fc:
9e:36:87:0b:74:1d:9f:1f:96:6f:36:ef:5b:5a:49:
27:83:de:9f:8f:09:df:db:1d:79:83:85:71:58:62:
ca:66:13:50:e8:ec:4e:ce:c2:30:2f:cf:66:0b:4c:
55:8b:8a:1e:ab:79:61:51:0b:de:13:54:66:6d:a3:
6c:24:1e:19:5d:82:19:5c:8a:d6:7d:db:bb:aa:3c:
2a:e6:07:72:81:52:9e:6c:c2:b8:90:70:bc:64:41:
0b:f5:ad:30:93:01:1a:1b:0f:0b:a3:ea:38:94:3e:
da:a1:aa:2e:a6:5b:20:54:04:c1:16:69:8d:9d:4a:
3a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B2:0D:45:18:33:F1:61:08:4E:B6:48:24:DD:90:D7:41:40:85:04
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6c:23:7e:b8:34:ca:e1:9f:66:81:49:b7:f3:da:14:b4:b4:
23:f9:08:4c:9b:7b:43:27:9a:79:2c:ca:29:6a:ed:1a:3e:55:
90:c8:50:dd:ee:10:20:43:ef:5c:82:9e:ae:b2:26:4f:8c:cb:
cd:5e:98:58:1a:7c:19:98:b5:09:5e:8b:af:2e:be:18:58:ac:
55:bb:aa:4c:27:79:be:24:e7:58:a9:37:06:f2:57:2f:ad:fe:
5b:bc:8a:60:36:d1:c8:a1:b6:fa:3d:38:f0:0d:27:27:9c:3d:
da:c8:06:da:b8:4f:55:94:8c:c1:99:96:6f:6d:e1:02:29:af:
b1:e1:9e:a5:91:16:c2:c3:9e:57:0a:fe:2b:3d:5f:c0:e7:a4:
ac:96:29:2e:9f:31:60:9e:fc:4e:94:ca:49:bc:f9:4d:3c:a0:
5e:31:9f:ba:46:bf:74:5d:40:13:11:f7:78:93:65:ab:d8:d3:
10:a9:f0:5d:75:18:d2:38:f3:ce:a6:22:9f:2b:db:c3:f2:99:
21:9d:e2:00:fc:3f:04:43:18:b1:85:cc:aa:96:21:b6:ab:a4:
09:a4:8d:08:58:51:2f:95:31:a1:63:a8:76:19:3b:16:82:7d:
cb:7f:17:bf:61:57:07:35:1a:2b:6b:a2:88:fa:d3:84:ae:76:
6b:e4:75:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:52 2026 by rpki-client