Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: FuhWBoq9VQ7G87NTeVrd0hDBZNqDZflbHXoJPW0w9qw=
Subject key identifier: 5E:12:E4:38:ED:3B:70:0A:20:8E:93:51:C4:2E:5B:9B:93:31:A3:2B
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 01A0DCF2D0EDD18D44B1AEA18A1C4AB58EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 1A77
Signing time: Sat 26 Sep 2026 09:01:35 +0000
Manifest this update: Sat 26 Sep 2026 09:01:35 +0000
Manifest next update: Sun 27 Sep 2026 09:01:35 +0000
Files and hashes: 1: OxD51mZyUSy88WgP3TSafX3fVSM.roa (hash: ZUvDT5JmZoKJbZ2aaD6n8DqRqPOQ2yLOsnmhPBma0XE=)
2: Rqp6q80V5Lqgy6fApQicG0uIkYM.roa (hash: MiTXHdLJkzTFAdsQjyFK17euaeb3+FVSMfPmJuUxhJ8=)
3: lM0ykYh8wCH6poD1ByzZO951DOs.roa (hash: O0xjxg/OZFV2+IIvgGtT77zr81ND+/n3L2jks1YfEO4=)
4: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: PLpii5Tr2d0caYpYJSoZbAIvWoLJ0oBgRkqGu2+LBSY=)
5: tVTj2VfcWC8MlPPtw5H08Ah033c.roa (hash: vnVztEiFiRrUOyK2US2Elxv/6sJ52wKVTB11SJJl2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:d0:ed:d1:8d:44:b1:ae:a1:8a:1c:4a:b5:8e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Sep 26 09:01:35 2026 GMT
Not After : Sep 27 09:01:35 2026 GMT
Subject: CN=5e12e438ed3b700a208e9351c42e5b9b9331a32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:1d:83:9b:81:9e:3c:06:ee:20:ba:c7:30:
d5:f7:4d:8e:7c:54:56:7b:a4:ea:09:78:29:90:bd:
96:09:ca:49:50:ea:c2:31:02:6a:5e:d2:74:69:23:
1f:9a:de:8e:1d:72:5a:b6:2d:7e:41:c3:a8:bc:24:
c4:35:95:17:e5:8d:fe:ef:f0:a4:43:17:e9:c3:ed:
75:31:07:f7:76:37:3a:07:1c:4f:73:b4:40:40:d6:
74:8b:47:59:bd:2d:58:ce:3f:f9:dc:bd:0a:46:0d:
5d:41:eb:5e:df:ca:f2:58:93:23:70:db:01:0f:8d:
9c:b9:22:22:c7:00:61:48:38:5f:3f:90:df:fe:43:
6b:af:18:b3:5c:0d:33:d9:28:cb:b3:5a:a1:eb:6b:
89:e5:0d:bf:6e:65:4a:f9:08:7e:6e:bd:f6:65:d6:
3f:86:e4:22:f0:b1:42:77:46:ef:3f:28:b6:d9:f1:
de:de:f5:00:9a:c5:d2:03:93:2f:18:3f:69:85:70:
34:5d:e2:4e:66:5c:f2:dc:27:1a:a2:aa:02:55:5e:
4f:1d:5e:58:b5:75:44:5b:c4:ae:75:c7:5f:82:fa:
47:d9:e3:e6:07:12:59:4a:c2:6f:5b:3d:ad:a3:21:
ba:3d:1f:d5:3a:39:ef:1c:2f:4a:d1:50:21:3b:1b:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:12:E4:38:ED:3B:70:0A:20:8E:93:51:C4:2E:5B:9B:93:31:A3:2B
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:47:f3:f3:3e:ca:9b:ff:3b:c5:4d:d8:52:86:fd:ad:a2:e5:
d4:ce:f9:6d:16:23:ed:d4:bc:f4:30:fe:6b:88:10:f0:51:06:
46:71:89:de:f3:bf:66:f9:ef:96:61:b5:b2:e6:7c:55:e1:db:
9f:7f:4b:e6:03:0d:45:e5:be:3b:7e:e9:51:85:af:bb:25:e6:
ca:db:ed:b0:de:de:f3:10:da:32:83:e3:2b:48:55:da:26:09:
c4:50:74:6f:82:55:fd:d9:07:a9:ba:69:a3:37:ce:3e:14:d2:
cc:3f:fb:c8:53:e2:25:92:37:54:5a:84:74:65:2f:73:bc:33:
94:d5:10:15:2f:af:5e:8a:d5:7e:73:39:f7:88:a4:1c:31:59:
df:1b:37:13:b6:4e:e6:61:18:2c:4d:5b:a8:88:81:cd:e4:ab:
4a:5c:79:1c:56:a8:b1:9f:d4:fd:dd:29:bd:9c:d5:f6:d0:da:
65:5a:d3:b7:3a:28:9f:e2:5e:03:ff:8f:11:2e:f4:74:48:37:
2f:7b:b6:95:94:93:00:88:5b:da:f6:36:d9:d0:42:16:75:9a:
e1:08:f6:2f:de:72:95:37:2e:4b:71:ca:29:fe:7c:21:b5:51:
59:28:82:05:26:12:64:36:7d:0f:5b:0c:c9:fd:f5:67:25:c7:
f2:d7:a0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:28:08 2026 by rpki-client