Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
File: pCNxKB3-GQctEzndBIKyqvrVQs4.mft (raw, json)
Hash identifier: qHx3ytrfMsWuguenzXfdjZq4MLZolYPoZYQ31RkNftk=
Subject key identifier: 29:64:CF:71:6F:3A:EF:79:02:48:24:58:15:6C:CC:CB:32:D3:FC:95
Authority key identifier: A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
Certificate issuer: /CN=a42371281dfe19072d1339dd0482b2aafad542ce
Certificate serial: 01A0BE7947051E4B7E3871AC91C64372F260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
Manifest number: 0D3E
Signing time: Sun 20 Sep 2026 11:00:14 +0000
Manifest this update: Sun 20 Sep 2026 11:00:14 +0000
Manifest next update: Mon 21 Sep 2026 11:00:14 +0000
Files and hashes: 1: 5-fSRldHA_TyCo0Af_n4H7VHHoo.roa (hash: n/VVjN3d2+A+fBj8+Kv149bG42PjdEV7GiSsjv6L+Uw=)
2: JjXi4XbAnV9bj8nE6_XGuu1V074.asa (hash: O90Cg0AUX3YziSsowsx54UsgUbqTnyh9MTtkhA73QD8=)
3: pCNxKB3-GQctEzndBIKyqvrVQs4.crl (hash: QhRBNwX7hHGnw3suOMU8vA272zIXc8YRuMIDMivzIpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:47:05:1e:4b:7e:38:71:ac:91:c6:43:72:f2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42371281dfe19072d1339dd0482b2aafad542ce
Validity
Not Before: Sep 20 11:00:14 2026 GMT
Not After : Sep 21 11:00:14 2026 GMT
Subject: CN=2964cf716f3aef7902482458156ccccb32d3fc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:84:10:3a:d3:2b:14:b1:df:d6:d6:8d:af:
e0:bf:cf:1d:af:50:cc:1d:f8:b6:b9:ad:e0:b3:29:
6c:f1:a9:91:f8:97:cb:b2:5c:73:4b:fe:37:1d:15:
e0:8c:e5:9c:1b:64:44:f9:77:b2:a7:55:c0:c2:97:
20:40:fc:57:7d:71:f6:f4:39:4e:50:9e:d0:c0:bf:
49:40:45:3d:b7:f8:5e:60:c8:a9:74:19:ee:a3:ef:
ad:49:fe:8d:4b:36:e2:a9:91:58:37:b1:2c:cc:e2:
6b:51:eb:aa:ef:53:0c:98:e1:59:34:71:b5:a6:f5:
4b:58:7f:09:f8:b6:5b:51:26:26:8c:e3:68:b9:45:
77:df:d7:fb:ff:4c:f3:3a:57:a0:3b:d1:d1:2f:2a:
44:8d:a2:e4:1c:3c:3c:17:df:fc:f1:2b:56:5e:5f:
cf:d5:dd:90:7f:fc:cf:3f:2d:b2:fa:64:40:ba:91:
04:b1:28:3b:84:2f:85:ec:32:b3:b5:3b:ca:ee:04:
61:09:65:61:d8:0a:c7:af:1a:c0:da:4d:a9:e7:cb:
6d:34:cc:19:e6:91:99:a2:b4:22:c7:38:93:37:69:
4d:3c:56:95:3b:90:4b:7b:29:f7:ad:ea:a7:81:70:
a2:d2:01:46:21:9c:92:a2:84:57:30:f1:3c:cc:6b:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:64:CF:71:6F:3A:EF:79:02:48:24:58:15:6C:CC:CB:32:D3:FC:95
X509v3 Authority Key Identifier:
keyid:A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0a:8c:92:0a:17:dc:9a:d9:ee:fd:8d:68:29:86:ca:75:6f:
7c:87:96:4e:9d:5c:c0:2e:c0:05:00:cc:7c:89:80:58:6b:95:
08:57:fd:3c:e6:c2:ed:2b:de:d7:37:33:2c:6f:8f:01:a6:81:
b2:b1:73:1c:c8:43:ce:7d:87:a5:40:fa:7a:4b:49:98:18:4f:
d9:3e:25:b2:e4:47:e3:e0:c2:c7:86:64:1e:14:58:fe:0c:3b:
9e:19:77:db:44:85:ef:b4:31:0c:0a:b1:1f:98:88:70:3e:6c:
f0:0c:5b:6b:c0:54:91:c0:83:b1:a8:8d:23:f2:2f:b9:d4:fd:
34:d9:fb:c5:cd:4d:ff:9a:5c:e5:e4:6a:35:cf:a2:b2:47:72:
fc:49:d8:19:c3:5f:70:6b:f3:0a:d9:be:cc:5a:37:21:66:bc:
bf:01:48:cf:76:31:45:a7:3c:a7:ad:22:f3:d7:50:c8:17:a5:
e8:6a:38:98:ac:1f:15:5b:ac:98:25:a2:c6:9d:82:f7:eb:62:
6f:78:cd:df:bb:4e:a9:d0:6b:ef:12:24:51:1c:e6:7a:7a:5e:
f7:e0:5f:58:2d:e9:ff:06:5a:25:0b:1a:69:67:14:9e:b2:17:
96:93:5b:1c:2e:25:8c:dd:8e:d1:fe:66:0e:ba:9e:bd:7a:9f:
1d:f1:7f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:20:08 2026 by rpki-client