Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: B0tNIcaCeSf8GpBA9EZ1bQbW7jC+vGrUs+IKz++HNdQ=
Subject key identifier: 68:90:C6:0F:88:E4:89:CF:8F:40:76:E7:54:73:90:2E:3C:6A:6D:04
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 019D389C2ADB33C91EDE4BF6F4B82AF098E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 0FA9
Signing time: Sun 29 Mar 2026 08:00:51 +0000
Manifest this update: Sun 29 Mar 2026 08:00:51 +0000
Manifest next update: Mon 30 Mar 2026 08:00:51 +0000
Files and hashes: 1: 4d9-6h6RHLAtIkxDu8GiYTASn8o.roa (hash: gqqQTnXdL5PKtQ8KN/lbpQCpkcfM5mWMVs9m29iW+Pc=)
2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: RJlGXEaH2K0CDPMgDh8FALHn4sDvSAps4RePycjgIIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2a:db:33:c9:1e:de:4b:f6:f4:b8:2a:f0:98:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Mar 29 08:00:51 2026 GMT
Not After : Mar 30 08:00:51 2026 GMT
Subject: CN=6890c60f88e489cf8f4076e75473902e3c6a6d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:be:d1:a1:80:c0:79:15:c4:87:2c:bf:9d:
c4:2e:4c:06:e6:bf:0f:24:9a:ac:dd:40:49:29:e7:
5d:86:94:db:10:a4:48:65:20:c7:a7:45:7b:d6:1f:
ba:e1:f0:dd:2b:a5:90:12:0b:69:68:49:11:c8:7a:
05:d2:b0:31:91:17:0f:42:5d:7c:50:c8:96:92:34:
e8:47:e0:9f:c1:16:13:f2:b8:53:31:e6:51:90:10:
40:52:fc:64:09:7b:df:b7:cd:4f:01:93:4b:69:b5:
e9:1a:c3:b7:48:b4:6b:10:60:0e:ad:6b:a0:70:84:
e2:ff:98:73:1e:53:b4:f3:a8:45:68:e7:cb:48:e8:
5b:13:0c:62:53:46:ee:d1:bb:01:17:ad:8d:19:d5:
56:20:e5:d3:8d:5a:e3:ae:3b:67:55:5d:ce:ca:be:
01:4f:96:81:9b:71:d3:94:6e:6c:02:21:00:6a:99:
2b:ae:af:00:a6:c7:16:5e:6c:4a:d1:1c:ea:82:e5:
5c:32:3b:3a:53:7a:e4:50:f7:42:5a:19:ed:ba:06:
2e:da:d8:de:5b:94:0e:66:54:9e:c9:8c:9e:d3:91:
df:23:d7:cb:ec:57:35:84:5d:17:81:35:f9:3b:c0:
24:4f:81:09:6e:20:db:71:d7:33:9b:89:a2:a3:ca:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:90:C6:0F:88:E4:89:CF:8F:40:76:E7:54:73:90:2E:3C:6A:6D:04
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:1e:5f:a8:d3:27:92:70:1e:a3:06:91:de:13:ea:a5:a5:61:
f0:aa:d3:c2:3d:75:88:4c:ce:bf:a7:8f:eb:29:ca:e7:84:19:
a1:de:92:bb:f9:55:30:15:47:cc:bd:bc:48:54:af:90:a3:ff:
46:1d:ca:dc:5b:48:f1:8e:91:4e:3a:79:e6:e2:f1:01:d8:b6:
0c:ec:0b:6c:34:57:ee:aa:bc:95:fa:a0:13:01:18:e1:4f:17:
db:a3:5c:cc:d9:7f:dd:b8:23:1e:14:12:29:56:11:7f:38:ec:
5f:84:10:5d:5a:70:ff:94:c8:f4:a7:0b:d6:ad:67:9e:51:e0:
2e:cb:1e:11:db:87:ad:41:fe:2c:cd:c2:ac:eb:67:f9:09:51:
af:54:e6:7e:79:26:49:00:df:e2:8e:13:70:2a:ad:b5:87:1c:
0e:b8:f6:88:e4:70:6f:90:33:53:ba:58:be:dd:b3:d1:33:91:
70:0e:0d:f4:13:3d:04:0f:87:df:bb:2a:27:1c:5a:9d:10:2a:
d5:96:05:ff:38:3b:34:ea:c4:02:38:cd:fa:04:05:f3:e3:58:
3e:08:a2:54:23:ae:60:6f:32:fc:31:b1:20:6c:d5:c3:00:4b:
c3:a8:f9:cc:55:21:1c:63:1e:45:ea:eb:7a:24:36:80:9c:5f:
83:5b:a9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:18 2026 by rpki-client