Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
File: pcEGAjxJWQSwQKy5l49Po7DF4tw.mft (raw, json)
Hash identifier: hZUoASGoW8K/Zjd+2tvHwe3UTEMqVUYKaMSMEAp/ZcE=
Subject key identifier: 0F:B9:6D:88:05:F9:D7:FF:DB:D8:5B:4C:19:C8:22:69:50:3D:AC:3E
Authority key identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
Certificate issuer: /CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Certificate serial: 019CAB33EC9B0702334DFE81C572B3D9E029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
Manifest number: 0675
Signing time: Sun 01 Mar 2026 21:00:32 +0000
Manifest this update: Sun 01 Mar 2026 21:00:32 +0000
Manifest next update: Mon 02 Mar 2026 21:00:32 +0000
Files and hashes: 1: 68UPM5ZsmGXwMBAVn_8jUY1Fadg.roa (hash: qNT09TFbUdpw52OzRnw8hL/bLyTOL8P2XrG/BC2dS1I=)
2: pcEGAjxJWQSwQKy5l49Po7DF4tw.crl (hash: CilVPvbdj38XOyUtdnlbs7I22IrOViJRzcSGk+fdSoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:ec:9b:07:02:33:4d:fe:81:c5:72:b3:d9:e0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Validity
Not Before: Mar 1 21:00:32 2026 GMT
Not After : Mar 2 21:00:32 2026 GMT
Subject: CN=0fb96d8805f9d7ffdbd85b4c19c82269503dac3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:c2:cc:c3:d7:bd:d8:5b:77:36:d9:f5:52:
ab:b5:b2:d5:4e:9f:aa:3a:38:03:e4:f4:22:64:74:
24:24:71:22:9c:36:14:bf:83:c1:9f:38:20:37:98:
ff:09:a0:58:ce:01:6d:2e:c6:e6:be:0c:6d:cb:67:
83:24:fe:3b:e4:b7:04:3d:36:1d:2a:9c:e4:af:7e:
c0:9d:b4:47:b0:03:a7:fb:e3:c0:27:1c:40:0a:4f:
91:f9:b2:57:18:3a:80:00:f4:71:7c:01:01:6f:09:
18:15:91:d8:54:89:07:9a:c6:de:a3:05:b1:77:d3:
bc:ae:1f:6c:ef:47:f8:e9:b5:6e:fd:63:c8:32:13:
46:89:ca:26:e1:01:05:f7:b7:6b:4b:03:83:b7:a9:
ef:f4:83:5e:db:f5:71:b1:db:14:bb:62:c5:3e:10:
26:7e:6c:ce:ff:e1:39:44:fc:95:10:c0:eb:47:13:
d7:87:33:2f:bd:5f:fa:4c:68:41:38:51:be:96:7e:
8e:3d:04:91:69:43:0e:d1:12:d7:ef:b9:da:4e:8d:
4e:e8:cf:25:aa:68:6c:aa:35:e0:e8:10:93:03:f8:
29:14:cf:7d:12:d2:3c:bd:6e:16:b5:17:a9:40:b1:
de:be:94:fe:57:a1:01:dc:74:d0:b2:d4:53:a3:d1:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B9:6D:88:05:F9:D7:FF:DB:D8:5B:4C:19:C8:22:69:50:3D:AC:3E
X509v3 Authority Key Identifier:
keyid:A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9a:2f:d7:cd:dd:bd:e5:a9:71:df:df:98:92:73:3f:b6:d4:
94:b8:68:90:73:39:f3:c5:74:49:e2:8c:f4:74:e5:c6:3b:d6:
46:3c:9b:4f:35:7f:bb:de:94:62:a6:99:71:89:16:69:08:c8:
30:c2:3c:92:01:5e:b2:45:03:d1:61:c1:18:13:58:41:0f:2a:
4d:11:22:d5:71:9b:8c:48:c8:22:a5:88:94:77:bc:ad:46:c8:
3d:6a:6d:cf:ee:58:5e:23:0e:63:eb:89:bd:41:82:c6:ed:de:
e9:77:74:d9:9f:6d:49:52:f1:36:2a:13:0d:9d:ce:cc:b9:e1:
7c:90:4d:80:8d:1d:5f:49:54:a1:8a:74:dd:ce:85:a6:30:ae:
55:3c:b5:82:30:e4:59:f4:47:24:d8:4e:c9:e8:ec:f1:1c:98:
6a:fe:a5:36:a6:e6:3c:a2:23:25:1c:a7:26:59:72:53:06:32:
aa:9f:ba:c4:71:18:01:d1:99:10:6f:35:8b:85:62:79:4b:42:
ce:4d:14:fc:04:5e:f0:c5:7b:43:04:86:7c:06:b7:91:85:88:
5b:11:6d:03:d9:9a:7d:e3:eb:3c:f1:1c:f9:6d:d5:bc:d7:02:
ab:5e:3f:bb:e9:4a:89:e6:4f:0d:4a:86:0c:77:10:c7:31:76:
19:a9:b5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:51 2026 by rpki-client