Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
File: PQh2wA4DdvdzPbJEMAEg0xQL290.mft (raw, json)
Hash identifier: MHJwtrKfLCDwv7jsAXQQkGhOxSglnr8w9rvf1t7ovW0=
Subject key identifier: A8:9E:77:A8:F4:33:37:2F:26:0B:B5:5D:D7:0E:DF:56:70:9F:63:A1
Authority key identifier: 3D:08:76:C0:0E:03:76:F7:73:3D:B2:44:30:01:20:D3:14:0B:DB:DD
Certificate issuer: /CN=3d0876c00e0376f7733db244300120d3140bdbdd
Certificate serial: 01A15CD58326B31D6B17C9EC99706DD00A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQh2wA4DdvdzPbJEMAEg0xQL290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
Manifest number: 78
Signing time: Wed 21 Oct 2026 05:00:58 +0000
Manifest this update: Wed 21 Oct 2026 05:00:58 +0000
Manifest next update: Thu 22 Oct 2026 05:00:58 +0000
Files and hashes: 1: PQh2wA4DdvdzPbJEMAEg0xQL290.crl (hash: 5hrAwn0kE7H8gROozqUAGQP/f/vB0nGqusTqRR3euzE=)
2: nq9bgSbvA0TB3aKoI2LSbdxmVpY.roa (hash: pKofBy3cQfkluUFTKQ828uE/AR/hkHrzVvjmkrkzCnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQh2wA4DdvdzPbJEMAEg0xQL290.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:d5:83:26:b3:1d:6b:17:c9:ec:99:70:6d:d0:0a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0876c00e0376f7733db244300120d3140bdbdd
Validity
Not Before: Oct 21 05:00:58 2026 GMT
Not After : Oct 22 05:00:58 2026 GMT
Subject: CN=a89e77a8f433372f260bb55dd70edf56709f63a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:ff:f7:f7:74:51:30:14:66:9b:1e:8e:97:
b6:9a:9f:8c:1a:da:32:4b:a0:19:41:38:27:47:e2:
11:fe:b6:6a:c1:64:fe:83:0f:aa:ad:1c:a7:39:7a:
03:0c:46:4f:37:78:7e:f7:96:b2:2d:a0:20:c1:c6:
55:ad:cb:da:d9:10:01:9f:94:ed:26:ed:bd:1a:e1:
01:de:b4:db:8d:74:a1:95:b1:e5:7e:25:e0:08:e8:
8d:1c:2c:e5:2b:16:fe:ca:97:b8:cd:c9:96:1c:3b:
99:0d:2b:f4:a9:1b:c4:34:5f:a2:ab:8d:9c:fe:95:
9d:9d:32:a2:5e:a4:ac:9f:04:e1:aa:39:75:2b:13:
e6:ca:56:9a:96:26:5a:e5:ba:05:d9:f7:5a:8a:6f:
ec:87:81:6e:e4:db:79:34:13:df:49:9c:17:e8:19:
0b:a7:74:d5:f8:0b:eb:35:0e:a0:cf:d8:79:8e:df:
2e:ff:d2:08:9c:e5:95:c7:54:c6:88:48:ca:4b:54:
99:0c:67:87:a7:61:10:cd:1a:e7:f6:ec:0c:b0:e3:
4a:61:0e:7d:ea:e8:dc:b3:e3:69:1b:13:e1:5c:1e:
45:47:83:f3:bc:f2:6c:e7:72:fb:08:64:c3:f9:17:
ab:91:47:45:4a:fb:4b:2a:86:f4:ab:8f:fe:bd:f2:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9E:77:A8:F4:33:37:2F:26:0B:B5:5D:D7:0E:DF:56:70:9F:63:A1
X509v3 Authority Key Identifier:
keyid:3D:08:76:C0:0E:03:76:F7:73:3D:B2:44:30:01:20:D3:14:0B:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQh2wA4DdvdzPbJEMAEg0xQL290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c8:2d:6d:6e:af:72:28:a4:de:62:fc:b9:89:2f:c7:1e:91:
59:32:8c:cf:da:5f:9f:7e:63:12:25:e8:b5:3a:42:29:4d:fd:
ba:21:58:2b:2d:ac:ba:11:2b:6a:7c:77:57:53:34:a7:71:07:
08:18:42:e7:08:72:9b:fd:e2:c8:61:6e:6b:5f:4d:86:83:2c:
2f:80:6d:2c:8d:7e:c8:5c:7e:f4:2d:ea:e7:33:b2:80:84:4f:
63:28:53:ec:c9:04:78:10:05:ac:b6:5c:b5:09:5a:f9:5b:42:
8e:4e:30:04:f8:47:4f:0a:f4:6e:31:3b:76:3a:cf:97:74:00:
01:e9:db:42:3e:b3:57:e9:ea:72:38:44:82:29:01:df:80:62:
15:45:1f:e5:dd:fe:fe:ff:39:92:45:a3:1c:5e:20:83:b1:46:
bb:76:cf:69:f2:85:1c:fc:ec:24:1b:8d:2b:7f:67:bd:e9:38:
75:65:34:cc:38:e7:18:61:ba:88:d0:cb:ca:63:c8:de:e7:2e:
dd:2d:3c:2a:ae:83:1e:77:c7:4c:8f:2c:7a:f0:b7:2a:87:75:
71:3f:25:7b:68:b8:c0:27:ed:93:75:4b:7d:fb:15:d1:c8:bd:
19:3d:4a:cc:6f:76:bd:66:5c:f2:74:35:6e:d3:2c:ae:03:16:
3f:f8:41:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 16:18:21 2026 by rpki-client