Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: vQasuqj5R9t97tCByPgBHy2YmIMvVXYdmQHMadddbfs=
Subject key identifier: 13:82:6C:9D:14:C2:54:E1:4C:FF:A7:72:D1:E1:2C:58:18:BE:61:E6
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 019CAB6AD62FBF50C25F6BBC3430F3E21341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 0C29
Signing time: Sun 01 Mar 2026 22:00:31 +0000
Manifest this update: Sun 01 Mar 2026 22:00:31 +0000
Manifest next update: Mon 02 Mar 2026 22:00:31 +0000
Files and hashes: 1: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: gYTdDQiahXpgjPVhU2lQ+oUc3HWaljTWfMB94U2bhWM=)
2: VTDoK_HiASPo0rKQEESAmloV1uI.roa (hash: j/Uqiho+zYJi7PaZZVvRcMCOVoIn337nTlvuR4KCJ5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d6:2f:bf:50:c2:5f:6b:bc:34:30:f3:e2:13:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Mar 1 22:00:31 2026 GMT
Not After : Mar 2 22:00:31 2026 GMT
Subject: CN=13826c9d14c254e14cffa772d1e12c5818be61e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:85:1f:04:bd:dd:c3:be:64:ea:cf:59:06:13:
f7:1a:cf:0b:60:3a:6a:2b:0b:4c:e8:20:9a:d6:ba:
cd:c6:a7:86:02:5f:7d:9e:52:2f:99:85:c4:15:2a:
1d:0e:52:fc:96:cb:29:51:7a:6b:10:b9:17:bd:6d:
37:d8:36:23:47:9a:39:42:91:75:30:ba:a4:e3:37:
cb:64:1f:a8:05:51:df:96:db:2e:35:67:a8:9f:9f:
3e:00:bc:53:33:9b:2a:1c:aa:34:3d:c6:04:e0:4b:
f0:ed:b0:c0:9f:9d:17:45:8b:f6:ab:6d:38:80:46:
ed:d8:92:ec:a1:b3:17:82:83:24:6d:97:15:08:1e:
32:2c:0c:e3:78:59:d7:7c:1e:a4:97:6c:e2:8d:40:
5b:8b:8c:c1:93:ec:64:6e:ce:1c:6f:27:30:25:26:
18:a4:3b:58:f5:d1:93:6d:91:db:69:d9:00:56:25:
38:e3:d7:83:4d:68:64:05:93:1b:48:94:8e:5e:88:
45:ae:cb:62:0e:1e:a3:ae:e7:68:1e:98:16:cc:e2:
1c:7d:38:29:20:e4:bd:4b:57:e3:7c:6f:dd:6e:be:
08:df:7d:0e:83:b2:03:c2:18:c9:87:5c:a4:13:0b:
69:84:7f:36:e0:c1:fd:1f:ba:c5:80:c9:e2:44:a1:
51:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:82:6C:9D:14:C2:54:E1:4C:FF:A7:72:D1:E1:2C:58:18:BE:61:E6
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b1:ed:12:5d:9b:9c:95:49:fd:0b:3c:2c:91:58:81:7a:98:
42:c3:53:f3:10:5d:7d:3e:de:32:05:28:87:cc:15:d9:36:57:
ad:5c:59:bf:55:c9:fd:6b:d9:a0:d7:59:39:6f:6b:50:df:bd:
7e:89:6e:85:2d:f3:44:c7:3b:9c:90:f1:ac:7b:87:3f:57:8a:
de:0d:54:f8:bd:ec:88:14:46:ef:41:c2:4a:59:11:43:44:e3:
ed:a3:89:90:e5:c7:dd:1e:4a:fc:bc:91:f0:11:ed:f7:94:03:
40:4b:8c:c6:dc:ed:9d:3f:75:91:c1:49:f4:1a:06:51:94:7b:
f7:6b:f7:f2:2d:53:bf:07:10:69:44:75:e1:93:7b:87:ca:76:
7a:f4:30:7b:3b:bd:e1:92:e4:17:a0:3b:39:aa:e2:cd:78:e6:
30:ab:5e:24:44:27:c7:f4:1b:66:d6:d0:21:55:29:c1:b2:1c:
af:a5:47:b7:1b:80:c2:99:f1:8e:b3:02:b6:d5:89:ab:43:5b:
2d:c2:0a:d3:37:ef:44:71:07:43:b3:18:36:4c:1f:a7:34:12:
84:fe:3c:1c:8d:b2:26:36:12:06:7e:f2:77:6d:da:ec:43:3b:
40:57:44:9d:33:5d:be:8d:e5:41:56:11:80:5a:16:93:ae:7e:
99:e8:2a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:13 2026 by rpki-client