Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
File: pCNxKB3-GQctEzndBIKyqvrVQs4.mft (raw, json)
Hash identifier: 6D6dzRKQGhKh1ReHc2gxIlaPli3GjUOMigeD8mN8cw0=
Subject key identifier: C1:2E:FD:15:C6:AF:7F:11:2B:4B:5D:67:2D:2B:16:E3:AE:51:58:24
Authority key identifier: A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
Certificate issuer: /CN=a42371281dfe19072d1339dd0482b2aafad542ce
Certificate serial: 019FA861FE38C78DA2695DA6B5E1DAC57153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
Manifest number: 0CAE
Signing time: Tue 28 Jul 2026 11:00:22 +0000
Manifest this update: Tue 28 Jul 2026 11:00:22 +0000
Manifest next update: Wed 29 Jul 2026 11:00:22 +0000
Files and hashes: 1: 5-fSRldHA_TyCo0Af_n4H7VHHoo.roa (hash: n/VVjN3d2+A+fBj8+Kv149bG42PjdEV7GiSsjv6L+Uw=)
2: JjXi4XbAnV9bj8nE6_XGuu1V074.asa (hash: O90Cg0AUX3YziSsowsx54UsgUbqTnyh9MTtkhA73QD8=)
3: pCNxKB3-GQctEzndBIKyqvrVQs4.crl (hash: 4uC9sJ6G5VTF5txTaJcR9NMUIcRyh38yc+C2KCdMkuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:61:fe:38:c7:8d:a2:69:5d:a6:b5:e1:da:c5:71:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42371281dfe19072d1339dd0482b2aafad542ce
Validity
Not Before: Jul 28 11:00:22 2026 GMT
Not After : Jul 29 11:00:22 2026 GMT
Subject: CN=c12efd15c6af7f112b4b5d672d2b16e3ae515824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:78:a1:6e:e2:15:94:af:c6:ed:6a:8a:19:af:
11:b5:d1:e9:31:ea:d6:01:3f:fe:b6:92:01:6b:11:
b1:2a:eb:ed:8d:7e:9e:49:d8:31:27:1f:fa:0a:0d:
3e:a6:7b:c6:14:e3:be:9f:40:34:3f:87:0a:ff:a4:
7f:f5:f4:23:d7:0a:b2:de:7c:f7:2c:bf:a6:9d:b4:
78:f6:6a:f1:da:95:5a:f7:8c:5e:b8:a2:37:88:01:
4c:0c:06:6e:d7:dd:6b:35:a4:58:4e:3a:9a:63:ef:
12:e4:66:93:d9:9c:71:f3:c9:a3:a9:61:8e:d8:30:
3e:ea:80:4f:55:6e:22:55:74:a3:7f:72:56:ba:cc:
9c:9a:85:ba:62:8c:e7:f8:f4:6f:9d:f9:5e:61:76:
71:f1:87:ea:b1:9f:2d:11:4c:d5:c0:e4:b3:1d:81:
33:60:da:0c:c4:95:6b:91:32:b0:99:b0:d1:69:ab:
84:0b:9d:89:59:af:30:1d:8f:33:b3:5b:85:1b:ba:
98:41:9d:e4:de:c3:dc:44:94:dd:47:ba:96:60:a1:
6e:78:38:6a:35:56:5a:54:03:eb:6b:3e:45:ee:2c:
b9:72:6a:ca:d9:e1:a7:cf:c1:af:de:ff:79:86:5e:
46:9d:a0:9a:d0:3f:17:4f:a1:0f:97:6d:d1:03:07:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2E:FD:15:C6:AF:7F:11:2B:4B:5D:67:2D:2B:16:E3:AE:51:58:24
X509v3 Authority Key Identifier:
keyid:A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1c:1b:da:9a:aa:8f:47:23:48:28:ba:83:2e:ff:6b:28:85:
45:ce:9c:13:ad:27:00:5b:25:f3:bb:41:b0:61:b9:bf:b8:62:
ac:ec:5a:ad:02:6b:56:79:d4:23:05:d7:25:1d:e0:40:e1:bf:
b2:f7:34:fe:a9:48:40:f2:df:53:c8:db:96:59:79:8b:e5:f7:
bf:00:ee:bf:53:69:f3:8a:3f:86:4c:4a:f7:61:f1:33:4e:0a:
54:8d:8b:41:69:17:2f:41:3a:a4:fa:bf:6e:94:74:b5:7f:dd:
c0:5c:66:f4:39:be:df:3b:b8:68:7e:f2:37:60:e4:0c:44:de:
17:80:12:da:b0:47:32:63:2b:e3:22:f7:b9:5e:de:91:c5:da:
26:47:64:f1:55:1e:f2:fb:00:64:d6:c5:a2:3d:44:2e:89:19:
12:61:e6:7d:77:12:16:50:66:f3:38:23:ec:fd:82:bf:08:d8:
e7:6a:5c:06:6a:2f:ae:bd:c9:2e:6a:8a:59:88:e4:e8:e7:f4:
19:af:6a:46:da:a3:2e:ec:da:36:f7:e0:34:3b:24:2d:79:19:
58:3c:65:87:f4:7e:c5:8b:9f:55:05:39:90:5c:b2:29:37:aa:
df:14:03:8c:19:86:a2:3b:c7:6c:f6:90:7e:e1:62:8d:b4:c1:
a7:1c:50:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:49:10 2026 by rpki-client