Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
File: pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft (raw, json)
Hash identifier: OVNi9opQKKvunlwoC/anYSRAI/oIWQwR/B5FT3l0FPM=
Subject key identifier: 90:5B:A6:12:07:C9:08:18:DB:A6:AC:62:95:6A:D7:87:6D:31:DA:6E
Authority key identifier: A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
Certificate issuer: /CN=a5541609cd947bedfc99125840030108a3f141c1
Certificate serial: 019CAF4873AF144D174E8628436AA9324276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
Manifest number: 01BE
Signing time: Mon 02 Mar 2026 16:01:26 +0000
Manifest this update: Mon 02 Mar 2026 16:01:26 +0000
Manifest next update: Tue 03 Mar 2026 16:01:26 +0000
Files and hashes: 1: Jcx0b1zHDF9UJEjNraMW7Wkin54.roa (hash: OyMTt7xgc2x7/DsfiJtLeI1ThqbxPs1lS0m0QvvcPzI=)
2: Xf5rpKoBI7BsYh_voz1J6f7LZno.roa (hash: yCI1kMz5PIyVImE2jYrenMk6gjrCzrC62f+tybJ0tIQ=)
3: pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl (hash: bfrzwWhh/38obimdOpDGNI52LUY3R0vGd/vK+eDEna4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:73:af:14:4d:17:4e:86:28:43:6a:a9:32:42:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5541609cd947bedfc99125840030108a3f141c1
Validity
Not Before: Mar 2 16:01:26 2026 GMT
Not After : Mar 3 16:01:26 2026 GMT
Subject: CN=905ba61207c90818dba6ac62956ad7876d31da6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:7b:1a:19:ce:9a:42:d0:59:59:8a:5c:f7:
5d:7f:42:bf:f8:b2:5c:b6:8a:00:79:d4:f9:9f:37:
7f:1a:f1:13:f0:b3:5d:75:73:a7:f4:cb:a2:5f:7e:
a6:f2:8b:ab:c0:ce:f7:62:d4:3a:b4:b6:f6:81:b1:
03:f2:7f:ba:b3:5d:d5:67:71:36:fe:11:34:a9:44:
5c:e8:e6:ca:b5:dd:4b:b0:4d:82:a5:3f:ee:67:2e:
65:6f:7b:3b:22:bc:b3:25:c6:5f:c5:16:1b:19:c9:
f3:dc:d4:d1:6e:60:ed:a1:40:c6:b8:70:c3:29:4b:
d2:e9:cb:90:fc:e1:67:2e:7d:7b:08:6a:f2:f7:a9:
32:26:94:63:27:c0:3d:d2:68:96:aa:8e:4b:32:20:
86:3d:4a:89:ce:8e:0c:4a:92:a3:7f:c9:b3:18:fa:
b4:df:e8:43:06:16:45:8c:f8:78:43:20:e5:32:1c:
59:93:cb:60:88:fc:39:c2:51:8b:5f:9f:58:f7:02:
51:f7:eb:53:89:a4:62:20:e2:2e:87:1c:59:05:56:
52:03:68:8e:a7:de:e8:d7:23:e7:38:57:08:ba:f8:
ae:54:7d:28:8d:03:05:cb:0f:43:30:d0:bf:68:f1:
72:46:32:98:b3:c7:f1:98:45:98:f5:66:31:97:f6:
49:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5B:A6:12:07:C9:08:18:DB:A6:AC:62:95:6A:D7:87:6D:31:DA:6E
X509v3 Authority Key Identifier:
keyid:A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0c:6f:40:51:4e:ba:f6:bb:b9:58:75:88:76:41:ea:80:ac:
07:2e:0b:6e:7a:cc:75:d5:8e:61:6b:a7:ce:c1:4b:2e:03:38:
f2:73:85:3a:2d:93:b1:5a:14:92:a7:2f:bb:7d:f3:f8:79:51:
2e:57:89:70:c6:43:d7:b1:dc:04:0f:d7:05:c5:a5:6b:b5:f0:
93:e6:dd:dd:1c:29:78:13:5c:6d:31:24:b0:49:a6:f5:3c:c1:
3f:c0:73:b3:8d:41:6b:61:71:ef:ee:c1:e0:b8:04:ee:be:c1:
a4:a9:ca:0d:4f:0a:7f:92:48:cc:74:04:8a:fe:7b:91:3e:da:
c3:69:79:31:83:23:e4:f5:c5:0f:ed:50:66:3a:2d:06:6b:84:
3c:a5:0d:81:31:d5:ab:ea:2b:1e:1f:cf:c6:cc:4a:ab:41:da:
bc:77:f1:a4:02:07:c1:8f:e6:6c:51:5a:b1:dc:eb:e3:18:9e:
d7:6a:3a:fb:f4:ca:99:b3:c2:06:1f:6d:8f:e5:e6:24:03:b2:
7b:8c:6e:18:04:52:7e:46:56:10:a1:9f:e6:ae:36:a5:66:3c:
74:e4:c5:da:68:6c:c1:cb:5d:a0:3c:c2:75:d1:1b:57:cf:7d:
62:5f:71:b6:bd:c9:e8:74:92:63:a1:fc:03:dc:9e:7b:2f:7d:
47:92:aa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:02 2026 by rpki-client