Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
File: pcUihESYJRJgyNqrvCxeGp6PNf4.mft (raw, json)
Hash identifier: ruhG31S4oxTtK8U8MaXy2PDnZcPzAYx2J1W0DrapmF4=
Subject key identifier: A2:40:1B:5A:A8:E4:54:75:36:27:2D:17:07:3C:9C:84:2B:BF:43:EA
Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Certificate serial: 019CAC4692DC51573E233355A17BDF72B32C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
Manifest number: 0EFD
Signing time: Mon 02 Mar 2026 02:00:32 +0000
Manifest this update: Mon 02 Mar 2026 02:00:32 +0000
Manifest next update: Tue 03 Mar 2026 02:00:32 +0000
Files and hashes: 1: O2hU27KH2d4j4F6MkJ9zQIyNQYw.roa (hash: egY9v9VhomtCqKUAhtFNXeEfGC4c0KX5IFzLFUNn2xY=)
2: pcUihESYJRJgyNqrvCxeGp6PNf4.crl (hash: z8WbdYD7BEPru4kzkmVEEJY7Bw+1gIsGcce8kQHmDVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:92:dc:51:57:3e:23:33:55:a1:7b:df:72:b3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Validity
Not Before: Mar 2 02:00:32 2026 GMT
Not After : Mar 3 02:00:32 2026 GMT
Subject: CN=a2401b5aa8e4547536272d17073c9c842bbf43ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:59:fa:69:28:2e:7e:7d:8a:7e:72:37:c9:
fc:f2:ed:e3:ba:a6:37:dc:f5:60:9d:8e:cb:14:9a:
78:6e:e9:88:5d:88:9f:be:76:39:67:f6:8b:3d:bc:
e9:9a:8c:9c:35:48:2d:e0:24:2f:c5:5e:ee:cc:40:
cf:35:24:10:81:22:b4:fc:1d:6c:72:75:9a:ba:84:
1a:98:97:ed:33:30:f0:88:75:5b:69:45:89:b3:41:
b5:78:d6:0b:d2:91:c9:f3:08:55:a4:f7:2e:68:bf:
0d:52:d4:2a:3a:da:63:a6:9a:fc:31:97:f6:6c:ef:
4d:3b:30:26:8e:0b:01:63:50:e3:a9:9a:98:d7:95:
2a:94:6f:be:e3:60:c4:26:37:af:45:5d:d3:13:0d:
8c:3a:16:3a:86:f0:c0:d4:c3:17:bd:62:9f:b6:21:
96:01:90:20:15:18:31:58:9e:98:e4:07:c3:f6:19:
4f:6c:9b:14:24:4e:4f:fa:fe:63:18:ff:61:df:5b:
7d:47:54:77:8a:97:91:37:7d:c1:f9:05:11:1c:87:
dd:9d:36:67:d0:b3:fc:0d:0f:03:af:97:be:97:6c:
2e:db:b1:0e:3f:25:bc:2f:71:88:e3:a8:65:b4:50:
1b:17:17:18:31:99:e0:96:f8:31:7c:a0:b5:40:a1:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:40:1B:5A:A8:E4:54:75:36:27:2D:17:07:3C:9C:84:2B:BF:43:EA
X509v3 Authority Key Identifier:
keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1d:fe:ef:02:07:b6:f9:3c:44:57:75:87:4d:af:22:51:38:
5b:f5:c6:4c:d9:29:f5:82:9e:13:e2:cb:39:97:63:c6:e1:4b:
cd:53:e8:89:6e:55:a5:67:8a:eb:bc:e7:eb:00:df:ba:c1:e1:
7d:40:0d:f5:56:e9:61:d8:38:ae:2e:64:71:c0:71:aa:72:28:
4d:a1:ea:8f:b6:ed:77:06:93:6f:a1:28:ac:0c:9e:26:d6:cf:
97:65:d7:24:be:a5:55:99:1f:49:76:38:82:8c:1e:de:f2:61:
5a:60:ee:20:c3:7a:03:af:e3:37:74:6d:dc:1b:f3:44:d4:e9:
3b:b0:9a:1b:47:c6:2f:d6:f9:32:a1:ce:da:de:f3:88:cd:8f:
14:41:5d:d3:6a:4a:31:fd:54:6d:a4:5c:d4:83:86:08:18:ab:
50:96:3d:27:e9:6b:74:2e:a8:b7:f4:6e:99:a3:3f:d0:53:de:
19:3d:c7:30:d4:9c:4a:74:cb:a6:8c:38:6a:4b:5d:32:6c:c1:
8b:70:33:24:1d:40:00:1b:1e:4c:09:79:7f:38:1f:74:99:34:
f4:a0:a0:75:29:37:b9:3f:28:e3:82:bb:7d:a9:07:1a:b3:d6:
78:ee:a1:54:b9:aa:99:83:eb:c5:0a:7b:61:f5:7b:0d:6f:74:
e6:e7:83:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:45 2026 by rpki-client