Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: H4AsUQ/PKIdtQ4aC/Kl8g9a/f/vR6q1OIx984W/mHbg=
Subject key identifier: BF:70:3B:59:A6:7E:34:A3:3F:5E:A0:CC:31:4F:5F:23:DF:26:45:A3
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 019CA9458B405E1C48A009F1480480F86BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 12:00:32 +0000
Manifest this update: Sun 01 Mar 2026 12:00:32 +0000
Manifest next update: Mon 02 Mar 2026 12:00:32 +0000
Files and hashes: 1: OxD51mZyUSy88WgP3TSafX3fVSM.roa (hash: ZUvDT5JmZoKJbZ2aaD6n8DqRqPOQ2yLOsnmhPBma0XE=)
2: Rqp6q80V5Lqgy6fApQicG0uIkYM.roa (hash: MiTXHdLJkzTFAdsQjyFK17euaeb3+FVSMfPmJuUxhJ8=)
3: lM0ykYh8wCH6poD1ByzZO951DOs.roa (hash: O0xjxg/OZFV2+IIvgGtT77zr81ND+/n3L2jks1YfEO4=)
4: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: xiyaiIN6fN57UPVT81WESKcox9noBFRvGNksy9mpdXo=)
5: tVTj2VfcWC8MlPPtw5H08Ah033c.roa (hash: vnVztEiFiRrUOyK2US2Elxv/6sJ52wKVTB11SJJl2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:8b:40:5e:1c:48:a0:09:f1:48:04:80:f8:6b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Mar 1 12:00:32 2026 GMT
Not After : Mar 2 12:00:32 2026 GMT
Subject: CN=bf703b59a67e34a33f5ea0cc314f5f23df2645a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:b4:f3:16:2e:29:d4:0f:ba:8e:e6:05:2a:
22:27:03:05:aa:c6:06:b4:ea:dc:96:66:64:b3:e6:
0f:b8:9f:db:a9:31:03:8b:f4:36:84:b7:80:3c:6d:
a2:c8:62:25:de:d4:7a:7e:09:94:10:e7:0a:56:fd:
44:16:5c:3a:83:ce:f8:89:0b:5e:60:02:1e:76:47:
de:de:ab:58:a4:0e:7a:55:46:72:4a:d7:40:d1:d3:
aa:f8:fd:44:3b:95:d7:ce:f9:88:fa:03:29:19:42:
5a:2a:fa:ce:ef:ad:24:8a:b4:02:3e:d5:03:6a:10:
8d:92:c5:c8:2f:da:52:52:42:4f:b3:32:27:26:17:
9d:57:11:50:15:9c:b0:76:44:ed:e7:f4:53:b2:0a:
7b:1d:65:33:22:26:a6:13:01:b1:27:b4:c0:d6:07:
44:eb:31:29:1a:fa:47:c5:eb:08:db:e8:8a:f0:af:
0b:2c:96:40:17:43:c6:7b:5d:dd:57:ff:8a:9a:8b:
f7:08:93:05:9f:57:d1:07:7e:5f:9a:49:61:c3:85:
68:92:aa:91:7b:3e:dc:c6:df:83:7b:af:d4:81:53:
d5:e3:9a:56:e6:e7:8a:db:1b:7d:fb:e4:30:cc:31:
e9:af:c5:68:03:f0:85:b5:2d:0d:06:f5:f9:2a:6c:
3e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:70:3B:59:A6:7E:34:A3:3F:5E:A0:CC:31:4F:5F:23:DF:26:45:A3
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e0:f1:c3:55:31:d8:15:19:2c:ee:2c:b0:1b:d7:b8:1d:3f:
f0:9f:df:be:dd:22:25:af:4b:33:ac:39:33:fa:09:d2:61:21:
58:6d:61:46:79:3f:2f:0f:2d:bf:80:54:b7:89:9f:87:27:41:
eb:b1:ea:2a:ab:50:41:09:07:6d:ca:6f:59:fe:e9:9b:80:df:
9d:95:f2:b8:8f:9a:88:0e:dd:ef:65:e4:4a:95:70:1b:43:9c:
2d:47:52:48:27:29:a8:8e:ff:53:d8:8f:85:ae:ea:29:60:8a:
ca:4c:21:ce:3b:d1:d3:89:f0:d5:b9:f5:19:9d:e4:27:2e:b8:
fe:9f:d9:30:c4:6d:2a:21:2c:2f:8d:03:75:4e:d3:08:16:73:
59:36:57:23:fa:26:3d:81:79:01:1f:6d:83:7e:fd:14:2c:17:
e9:32:93:83:ec:21:09:1c:af:28:67:ba:95:32:d7:24:e7:d5:
50:2b:80:80:0a:7a:28:a5:78:24:cc:94:81:7b:b1:3f:bd:bf:
87:29:19:fe:21:98:07:c1:6b:90:b2:e0:f8:f8:e5:ca:50:c0:
77:f2:4e:80:3e:b9:d4:de:fb:8b:4c:ab:89:49:9a:a7:4a:65:
d6:bf:16:cd:6a:f6:5b:f3:6e:1c:28:51:ca:25:44:ed:0f:55:
8c:c9:fc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:44 2026 by rpki-client