Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: 3cHGx9lW3aQiPp+gHLzN/RGBMZmpfoI2EzU6ZapuDaU=
Subject key identifier: A9:09:BD:DA:2B:16:10:77:7C:9D:EA:6D:B4:DD:BA:35:F9:7B:8B:14
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 01A0C70E8A61CA263606401D17CEBFAF2B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 0E4A
Signing time: Tue 22 Sep 2026 03:00:13 +0000
Manifest this update: Tue 22 Sep 2026 03:00:13 +0000
Manifest next update: Wed 23 Sep 2026 03:00:13 +0000
Files and hashes: 1: HorQfQpk5QNI-DQjYDQ0Cwg6x8Y.asa (hash: Z41X+sFeq9LhlSCbZalt/9PoFBU4I0bNyGLpE+EzFcc=)
2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: GKsV3GaUdmnIl9qPzXHncsTY1hq32aALLMtyPu0C17o=)
3: VTDoK_HiASPo0rKQEESAmloV1uI.roa (hash: j/Uqiho+zYJi7PaZZVvRcMCOVoIn337nTlvuR4KCJ5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:8a:61:ca:26:36:06:40:1d:17:ce:bf:af:2b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Sep 22 03:00:13 2026 GMT
Not After : Sep 23 03:00:13 2026 GMT
Subject: CN=a909bdda2b1610777c9dea6db4ddba35f97b8b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:18:8d:9b:f2:21:8d:a7:86:56:2c:07:17:
48:c2:71:56:7c:f8:08:39:f3:8a:28:e4:66:15:12:
bf:e4:78:51:e4:d9:2a:58:d1:a0:9d:c7:d0:8d:b1:
d9:8b:25:c3:8e:c8:55:63:49:77:1e:59:6d:2c:53:
71:90:cc:c1:6f:8b:52:7e:52:30:1f:cc:75:dc:59:
00:c2:80:dd:ba:45:d3:42:27:65:38:66:67:a2:6c:
69:83:05:52:5a:85:bf:38:6b:ab:ac:3a:f3:a4:8e:
30:36:04:06:44:60:5c:6b:df:8c:d7:dc:eb:69:54:
51:4a:02:c4:52:15:03:2f:67:91:48:5c:af:2a:5e:
17:75:15:b5:ca:89:51:d8:a9:e0:66:e8:0b:bc:a3:
bd:c9:92:21:44:aa:35:39:d7:71:49:92:55:02:bf:
d7:37:6c:ee:66:5b:58:da:3d:9d:9e:6e:94:2c:ca:
0b:68:03:7a:8f:37:83:af:81:01:84:71:10:aa:00:
a1:fa:b9:29:11:32:a4:f4:b9:aa:8f:b4:8b:55:a3:
f2:37:00:d8:9a:97:81:ee:46:fe:7b:a9:ee:87:22:
7b:4d:64:f4:49:af:c8:e4:b7:cc:b3:c8:e4:19:9b:
7b:1a:57:63:ec:b2:d8:3c:a8:04:a0:f1:df:ad:7d:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:09:BD:DA:2B:16:10:77:7C:9D:EA:6D:B4:DD:BA:35:F9:7B:8B:14
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a1:83:fd:64:90:69:76:48:17:7a:e9:7d:89:04:19:99:8f:
04:03:f7:0d:f3:24:54:ab:c7:3a:6a:cf:c0:6a:ed:2b:ab:3a:
4a:c1:17:0d:92:ad:11:45:e6:52:96:6a:7e:0a:59:8d:0c:2c:
6c:4e:39:b6:18:ea:2c:28:e4:35:2d:8f:4c:c1:c8:8d:87:c6:
f1:f2:ac:9f:c9:aa:7f:d4:23:7f:b8:46:6b:1d:00:24:78:e6:
1c:62:aa:4a:0f:3d:75:c4:70:12:8a:d2:81:ad:94:19:fe:24:
88:74:90:a6:41:41:08:88:3e:c1:37:16:36:ef:db:f9:47:47:
b4:b0:39:75:fe:68:11:d0:b5:45:89:a9:3e:05:20:81:cf:7a:
b0:c2:ca:4d:12:c4:90:2c:b7:e4:7d:19:bd:88:30:f8:23:6b:
fe:0d:88:73:be:04:fb:cf:e7:a2:eb:d6:98:6a:f3:de:a8:c5:
0c:b0:a7:7b:de:e8:23:42:36:06:cb:7c:28:5e:3c:09:9c:80:
94:0f:2f:aa:59:9b:4b:fd:3e:bb:42:5c:dc:f0:39:71:93:47:
e2:12:ff:42:45:c3:01:30:e4:41:da:61:27:fa:54:b4:4a:d6:
fb:de:4c:38:8a:8f:c3:d3:00:0e:6c:71:11:45:91:82:f1:bc:
58:19:73:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:33:42 2026 by rpki-client