Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
File: pCqe9isMK_HTQWU5sqBKJlmMLEM.mft (raw, json)
Hash identifier: gBTVwZuyd299kbExvkjXMXaJIdlN0sXwa6li2/x/tXU=
Subject key identifier: AD:08:78:86:A5:57:F3:26:84:B8:7C:25:80:2C:31:D0:CC:62:29:CF
Authority key identifier: A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
Certificate issuer: /CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Certificate serial: 019CAA588D5F19B63DDA535B15AFC6E2482E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:00:55 +0000
Manifest this update: Sun 01 Mar 2026 17:00:55 +0000
Manifest next update: Mon 02 Mar 2026 17:00:55 +0000
Files and hashes: 1: fczzCkb_2eHkiaUh2loE1L-X3Dc.roa (hash: yQHHlNkF+vXwUUV14v/AjylpWEMjSzOv1ynBII4ZKEk=)
2: pCqe9isMK_HTQWU5sqBKJlmMLEM.crl (hash: zFJLzAzUwGCPp3rvv1IaptVvovYEk/NJ4avLuVI+oaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:8d:5f:19:b6:3d:da:53:5b:15:af:c6:e2:48:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Validity
Not Before: Mar 1 17:00:55 2026 GMT
Not After : Mar 2 17:00:55 2026 GMT
Subject: CN=ad087886a557f32684b87c25802c31d0cc6229cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2b:0c:97:34:c9:84:29:66:6c:24:b3:b8:2b:
b3:43:31:a2:38:90:05:cc:6d:da:a2:de:c4:ce:aa:
ac:58:45:e2:7f:17:77:f7:18:17:d2:ff:43:76:c6:
0e:91:78:d6:44:5a:a8:a4:5c:cc:b6:40:a2:bd:49:
a4:c5:54:7b:de:af:1d:08:ff:1a:56:19:71:ee:10:
ab:ae:43:a1:81:b7:32:cb:a0:6a:36:a9:0a:32:66:
87:f1:09:01:a7:d2:87:c0:96:f6:d9:02:f0:19:89:
07:d9:60:8b:33:74:fb:4d:0d:9d:f3:bd:98:87:7a:
77:98:5b:93:85:c3:66:11:7a:84:17:c8:ab:bf:76:
6a:53:fd:c2:e3:fe:e8:97:f5:69:5e:4a:48:3d:91:
32:aa:fa:30:97:85:15:14:6e:bd:7e:98:ab:4d:97:
a3:1b:54:10:e0:48:99:9b:92:bc:40:6f:59:0b:7d:
df:25:fb:8f:76:01:5c:19:9b:ec:64:12:cd:64:d4:
57:e5:80:b1:f6:f6:b3:7e:eb:ca:ff:44:df:5a:39:
29:22:24:c0:97:d4:e8:68:13:a4:cb:44:4f:81:b1:
fd:e9:c7:19:b8:6d:e4:24:96:39:36:ce:92:43:ea:
66:69:5c:73:89:6c:e2:5f:b2:fa:e5:a3:66:68:78:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:08:78:86:A5:57:F3:26:84:B8:7C:25:80:2C:31:D0:CC:62:29:CF
X509v3 Authority Key Identifier:
keyid:A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:03:28:07:07:5f:47:78:25:18:8a:2d:a5:1d:35:68:49:53:
eb:ae:33:8f:cc:30:56:18:a5:96:e7:06:c6:1a:0d:e2:d3:31:
31:9c:45:29:9f:00:64:f1:ee:c2:e5:d3:a9:41:e9:e3:13:ca:
fc:ef:29:53:e7:dc:1e:f7:59:e9:74:3a:1e:90:c6:3e:44:c3:
6b:85:20:55:28:8b:c4:bf:ce:d0:be:af:59:af:d9:61:1e:d9:
3e:a9:ee:52:1f:53:92:e7:47:63:54:c9:5a:2b:07:75:89:d0:
ae:c9:9c:f2:90:34:00:98:da:f9:72:2c:25:76:5d:57:0b:73:
88:c9:5b:61:dd:6b:8b:cd:bb:dc:d4:f0:55:c8:eb:fa:fb:d1:
a6:67:1e:86:67:6e:cc:56:11:22:bb:7b:d0:ae:01:9e:4e:0c:
8f:99:1b:19:b7:43:45:e4:07:f2:af:8c:64:eb:97:42:62:38:
e1:c3:21:99:01:1c:06:ce:fa:08:c9:85:d4:57:a0:c9:c6:93:
bf:12:be:96:a5:e0:aa:da:f1:01:62:cb:c0:2c:68:13:c4:bb:
3a:89:7c:9d:3a:66:b6:fe:a7:95:d8:5a:ea:83:a3:96:ab:b6:
7f:2d:25:ba:1a:1b:86:8f:46:39:16:10:1e:30:ca:1f:df:42:
91:7c:5d:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWI1fGbY92lNbFa/G4kguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmE5ZWY2MmIwYzJiZjFkMzQxNjUzOWIyYTA0YTI2NTk4
YzJjNDMwHhcNMjYwMzAxMTcwMDU1WhcNMjYwMzAyMTcwMDU1WjAzMTEwLwYDVQQD
EyhhZDA4Nzg4NmE1NTdmMzI2ODRiODdjMjU4MDJjMzFkMGNjNjIyOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSsMlzTJhClmbCSzuCuzQzGiOJAF
zG3aot7EzqqsWEXifxd39xgX0v9DdsYOkXjWRFqopFzMtkCivUmkxVR73q8dCP8a
Vhlx7hCrrkOhgbcyy6BqNqkKMmaH8QkBp9KHwJb22QLwGYkH2WCLM3T7TQ2d872Y
h3p3mFuThcNmEXqEF8irv3ZqU/3C4/7ol/VpXkpIPZEyqvowl4UVFG69fpirTZej
G1QQ4EiZm5K8QG9ZC33fJfuPdgFcGZvsZBLNZNRX5YCx9vazfuvK/0TfWjkpIiTA
l9ToaBOky0RPgbH96ccZuG3kJJY5Ns6SQ+pmaVxziWziX7L65aNmaHgF4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0IeIalV/MmhLh8JYAsMdDMYinPMB8GA1UdIwQY
MBaAFKQqnvYrDCvx00FlObKgSiZZjCxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcENxZTlpc01LX0hUUVdVNXNxQktKbG1NTEVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZDUyYWUtMzkyOC00NDllLTg2ZWIt
NjZmMDUzZjZhNGY4LzEvcENxZTlpc01LX0hUUVdVNXNxQktKbG1NTEVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yZDUyYWUtMzkyOC00NDllLTg2ZWItNjZmMDUzZjZhNGY4
LzEvcENxZTlpc01LX0hUUVdVNXNxQktKbG1NTEVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwMoBwdf
R3glGIotpR01aElT664zj8wwVhillucGxhoN4tMxMZxFKZ8AZPHuwuXTqUHp4xPK
/O8pU+fcHvdZ6XQ6HpDGPkTDa4UgVSiLxL/O0L6vWa/ZYR7ZPqnuUh9TkudHY1TJ
WisHdYnQrsmc8pA0AJja+XIsJXZdVwtziMlbYd1ri8273NTwVcjr+vvRpmcehmdu
zFYRIrt70K4Bnk4Mj5kbGbdDReQH8q+MZOuXQmI44cMhmQEcBs76CMmF1FegycaT
vxK+lqXgqtrxAWLLwCxoE8S7Ool8nTpmtv6nldha6oOjlqu2fy0luhobho9GORYQ
HjDKH99CkXxdXg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:52 2026 by rpki-client