Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: RhTN5E5E8vWw4LsXbi/GeoL9Alj2d2dlLP2iZCc6uvs=
Subject key identifier: 22:AE:67:74:63:D2:40:ED:9E:5B:C2:2F:7C:CC:8D:B4:8C:EA:23:4B
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 019D98F421D4F31EBD07C9278A1F75553E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 0CA4
Signing time: Fri 17 Apr 2026 01:00:29 +0000
Manifest this update: Fri 17 Apr 2026 01:00:29 +0000
Manifest next update: Sat 18 Apr 2026 01:00:29 +0000
Files and hashes: 1: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: HxMa5CngYeFEkG3zUiq+ZV+0PnCQsJn53y/gRVSf1jo=)
2: VTDoK_HiASPo0rKQEESAmloV1uI.roa (hash: j/Uqiho+zYJi7PaZZVvRcMCOVoIn337nTlvuR4KCJ5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:21:d4:f3:1e:bd:07:c9:27:8a:1f:75:55:3e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Apr 17 01:00:29 2026 GMT
Not After : Apr 18 01:00:29 2026 GMT
Subject: CN=22ae677463d240ed9e5bc22f7ccc8db48cea234b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:94:fd:f6:9e:4d:94:52:b8:6e:03:a9:d6:
00:7e:07:d7:52:6d:76:2a:bd:24:ef:91:e7:e6:91:
d6:3e:db:df:17:e0:51:10:90:d8:c9:26:e2:25:10:
40:df:44:fe:d7:e8:cf:64:d6:e7:3f:7b:e4:ec:12:
cc:3e:1e:a6:f9:73:54:cc:14:1f:ce:b1:73:07:c3:
1e:67:b3:5d:97:b2:97:2b:be:88:bd:03:ea:ee:97:
43:e4:63:90:fa:f6:cb:1c:65:48:ee:b8:16:75:01:
43:bc:a0:de:ed:38:7d:2f:81:78:f5:23:50:bf:c8:
36:79:88:9e:07:b6:aa:ee:e0:6f:83:6e:ae:68:43:
bd:7e:93:e8:c8:6f:28:db:a6:83:bb:29:31:dd:c7:
60:32:64:7b:e6:55:ba:82:c5:4b:ed:28:0e:11:60:
c8:c9:99:d6:92:f5:b0:c1:e8:f3:46:e7:f5:cc:bf:
41:ce:d3:65:f6:bd:d9:f4:e0:fd:0b:02:eb:32:de:
60:75:10:e5:f5:55:cf:cc:45:92:54:d5:22:5e:ac:
be:2c:32:e5:ae:ef:86:a1:57:19:c7:27:dc:5d:88:
26:c9:df:51:5b:bb:fe:a0:f6:68:c2:be:2a:70:4b:
55:98:bd:29:f3:a9:c7:18:40:9a:1b:39:ce:e6:b9:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AE:67:74:63:D2:40:ED:9E:5B:C2:2F:7C:CC:8D:B4:8C:EA:23:4B
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:38:4b:5b:ba:65:de:44:8c:6c:36:54:fc:f2:be:ec:fd:93:
17:d7:2e:6d:3d:0c:35:b1:0f:49:d5:7d:d4:86:fd:e9:c7:2b:
c3:5b:95:71:42:87:b7:7a:75:49:3d:10:bf:9a:91:c2:52:60:
a2:5d:43:89:44:e1:1c:d4:fd:78:7e:e3:e2:07:73:4a:67:44:
7f:b0:01:a7:d5:fe:f4:c2:e8:46:9b:61:e4:6c:80:7b:55:d4:
63:d9:05:aa:d7:41:1e:4d:18:fc:82:82:1e:a6:9f:55:f2:24:
62:99:61:15:e6:a7:52:6f:c1:42:1c:40:7c:15:8c:03:c7:d6:
c5:ba:25:f3:d0:7e:59:b0:94:d3:14:7b:75:2d:0f:8f:71:a0:
55:f4:c9:c2:73:eb:47:db:60:7e:9c:43:3d:65:1e:7b:e8:35:
b7:97:ef:31:55:fc:68:9c:03:0e:5a:cd:70:45:a9:0f:b7:8f:
3b:fe:37:a0:8a:91:8b:5a:76:e7:16:b3:84:36:c2:a9:8c:ca:
ab:91:bb:7b:dd:e4:e4:d9:31:9c:8a:7e:46:3d:d3:da:a2:62:
e8:8b:ab:76:fa:fc:6f:fa:e1:8f:1f:8c:2c:b9:ee:9d:37:a8:
a4:72:54:f4:bb:7f:e9:94:b6:9b:b2:9f:28:82:81:c7:5b:4c:
77:ec:1d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:38 2026 by rpki-client