Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: 3sPs9whS78bBwlnp2lpxyDIk/NJ8gXaAEUgUy8UyJK8=
Subject key identifier: 6C:96:9E:56:07:55:BE:C8:33:FF:DA:D0:DA:A0:3B:8D:56:A6:87:E3
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 019CAB34A802E8E0413D67E765A0AE926E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 21:01:20 +0000
Manifest this update: Sun 01 Mar 2026 21:01:20 +0000
Manifest next update: Mon 02 Mar 2026 21:01:20 +0000
Files and hashes: 1: OxD51mZyUSy88WgP3TSafX3fVSM.roa (hash: ZUvDT5JmZoKJbZ2aaD6n8DqRqPOQ2yLOsnmhPBma0XE=)
2: Rqp6q80V5Lqgy6fApQicG0uIkYM.roa (hash: MiTXHdLJkzTFAdsQjyFK17euaeb3+FVSMfPmJuUxhJ8=)
3: lM0ykYh8wCH6poD1ByzZO951DOs.roa (hash: O0xjxg/OZFV2+IIvgGtT77zr81ND+/n3L2jks1YfEO4=)
4: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: CJy2quQvrIBworG3nDIETzIe/Ikx3ABx3AnRQFGlmGY=)
5: tVTj2VfcWC8MlPPtw5H08Ah033c.roa (hash: vnVztEiFiRrUOyK2US2Elxv/6sJ52wKVTB11SJJl2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a8:02:e8:e0:41:3d:67:e7:65:a0:ae:92:6e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Mar 1 21:01:20 2026 GMT
Not After : Mar 2 21:01:20 2026 GMT
Subject: CN=6c969e560755bec833ffdad0daa03b8d56a687e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:54:eb:20:b4:da:00:31:d2:3c:95:d3:8f:
3a:66:6b:a5:af:e1:60:b6:b4:69:65:5b:3f:af:8e:
a2:43:40:99:8c:f2:23:9b:59:bb:05:44:45:fe:01:
30:22:fb:b1:9d:55:c9:85:ac:ad:71:c5:36:7d:7f:
43:91:1d:b3:3a:a1:1f:91:7c:94:3c:6d:55:32:ce:
b9:66:43:bb:41:c3:d5:00:ed:19:79:67:6e:f7:1b:
19:af:04:68:b0:06:04:f7:be:1e:c2:d3:fe:d6:77:
f7:c1:79:e7:0c:c2:ee:05:11:92:26:d7:d2:0b:5a:
b1:a3:c0:c8:a3:7c:47:dd:26:d5:f7:fb:a0:7d:30:
75:67:1d:e1:09:ce:fa:a4:3b:4f:54:83:1a:cc:8f:
08:20:d9:42:66:65:67:68:92:c4:37:60:1c:9b:52:
88:cd:d9:f2:37:08:f5:70:1a:43:c7:a4:92:f5:ed:
fd:75:91:ce:5f:db:54:c1:cb:f8:17:6d:85:e9:7b:
ca:e0:9c:13:69:32:b6:5d:18:c8:f4:78:8b:fe:59:
04:65:d9:83:f6:a1:8f:62:12:3c:6d:f6:e4:03:93:
da:81:01:b6:f2:f2:1c:fc:06:ed:b2:01:0e:e0:1c:
bb:16:39:4d:6a:16:88:d5:6a:d3:17:81:ce:9c:1d:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:96:9E:56:07:55:BE:C8:33:FF:DA:D0:DA:A0:3B:8D:56:A6:87:E3
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2f:49:1e:d9:d6:2c:d1:38:aa:10:47:c6:eb:3d:ce:8f:63:
07:ae:75:68:8e:42:ce:9c:b8:03:44:de:a0:3b:75:bb:ae:11:
df:db:54:ff:2b:32:e4:c6:89:f7:af:5d:dd:c2:4b:3a:8a:fe:
33:0b:d0:57:a8:ca:9e:db:f3:4f:98:6e:ad:ba:ce:44:76:75:
bc:b0:58:3e:ff:ef:10:d3:23:56:a6:f6:d0:4f:2b:87:72:99:
10:62:4f:fe:bd:03:be:c0:63:cf:b3:74:bc:3d:67:5c:88:d2:
2b:2d:fd:e0:5d:32:ad:2d:fe:77:f4:4b:74:c8:ff:3f:bb:08:
1d:df:ef:e2:57:d7:55:e8:7b:2c:e0:ad:6d:1f:84:ed:da:94:
d4:27:69:77:b7:d0:02:e1:ce:ae:8c:81:83:2f:d1:f9:eb:80:
72:89:72:57:2c:46:80:9d:7f:04:42:97:60:f2:f3:bf:73:ce:
e3:ce:0f:3e:41:8c:a4:79:17:01:37:63:c1:c1:33:0f:eb:8d:
96:9c:10:4f:f9:26:f0:84:31:2b:45:21:5d:5d:3d:d1:b4:44:
c1:64:eb:93:aa:45:dc:15:2c:a2:07:00:d4:b5:76:bc:27:b7:
08:8c:1e:54:77:dc:8e:a2:30:04:01:54:05:ec:b8:d8:53:6d:
aa:b3:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:43 2026 by rpki-client