Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: WPlTmYbBEbHl60KYx/fx5D83aNe96PIr8XwaJf8c0W8=
Subject key identifier: E7:FB:98:2B:F8:5A:05:72:62:7A:02:DE:81:BC:48:2C:E3:59:A1:10
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 01A0CAEB58EB249E1CF4B0E076FF9E3AC46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 0E4C
Signing time: Tue 22 Sep 2026 21:00:16 +0000
Manifest this update: Tue 22 Sep 2026 21:00:16 +0000
Manifest next update: Wed 23 Sep 2026 21:00:16 +0000
Files and hashes: 1: HorQfQpk5QNI-DQjYDQ0Cwg6x8Y.asa (hash: Z41X+sFeq9LhlSCbZalt/9PoFBU4I0bNyGLpE+EzFcc=)
2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: pd8gkZXDgJQ1kFtaggpw0KBGrOYX88A0oGaBG2c11xo=)
3: VTDoK_HiASPo0rKQEESAmloV1uI.roa (hash: j/Uqiho+zYJi7PaZZVvRcMCOVoIn337nTlvuR4KCJ5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:58:eb:24:9e:1c:f4:b0:e0:76:ff:9e:3a:c4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Sep 22 21:00:16 2026 GMT
Not After : Sep 23 21:00:16 2026 GMT
Subject: CN=e7fb982bf85a0572627a02de81bc482ce359a110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:3a:eb:1a:98:12:38:05:15:27:f4:c3:ef:
d0:2c:26:66:5d:2f:cd:ce:00:5b:b0:d1:77:1e:98:
2f:f1:2f:db:46:3d:dc:ef:f4:2e:86:62:cc:8d:0d:
63:11:81:11:e7:42:e3:a3:9d:bd:e9:79:6c:fa:aa:
41:ec:e5:22:c9:a6:ad:1e:8b:5c:9c:9e:52:60:61:
d2:d3:17:ec:ed:cb:f3:c2:16:22:94:01:e6:0d:5a:
e5:17:61:d5:63:47:29:5f:58:52:48:06:f8:33:06:
ce:55:f2:ac:a7:e9:9d:bf:27:c5:32:3c:c6:47:21:
ce:fe:52:6e:36:03:6b:96:25:6a:13:98:32:21:85:
b7:b9:55:95:bd:11:c1:30:13:a6:50:fb:1b:ba:e0:
4d:7c:84:da:54:e2:69:74:82:45:ff:ce:60:69:63:
6c:4b:b5:e9:db:e0:85:d5:e6:7b:4a:f0:a4:db:57:
ac:27:0f:cd:b7:54:64:fe:b7:56:88:e4:04:5f:a2:
ed:d2:85:d5:93:17:96:da:9a:f5:03:d1:19:c6:99:
b9:65:a1:65:db:ca:ef:5f:5e:2c:7f:b7:3a:b0:31:
d7:63:e0:a9:c2:65:d4:c2:a9:cd:bd:07:26:38:1a:
3e:24:25:82:e9:83:9d:e9:d5:a2:95:1b:e8:c0:39:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FB:98:2B:F8:5A:05:72:62:7A:02:DE:81:BC:48:2C:E3:59:A1:10
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:de:56:02:2c:81:15:ff:5a:56:3d:d1:ce:1e:fa:8e:8c:ae:
37:1f:99:cf:4c:2d:ee:b8:9a:36:02:43:dc:aa:9e:b4:d5:09:
cf:21:3d:35:bb:50:44:8e:0f:6f:25:1b:17:3f:b5:45:cf:58:
0c:c0:92:b8:74:3a:ff:fd:4f:63:6b:e1:b8:80:71:56:d6:b2:
98:8e:b1:0f:ab:8e:d0:4a:e5:9d:2e:e6:49:88:6b:44:6c:12:
55:96:f9:ae:3b:29:d5:ce:9e:6a:ed:d5:a3:fa:54:65:87:e1:
e9:f4:1d:d5:b1:d9:65:cb:13:37:12:7b:ba:71:2f:5b:d4:95:
db:6e:53:d4:c5:80:51:48:78:7b:a0:0f:ac:25:19:6e:ca:71:
34:4d:25:b5:35:93:20:de:94:38:16:45:fe:4b:46:58:c1:9f:
d5:ae:db:ca:7b:36:a1:cc:9d:fd:58:ec:c0:88:13:3c:1a:fb:
e7:d3:27:d7:ef:35:31:ab:f2:0f:50:82:f1:f6:71:eb:b1:f2:
70:9a:7a:7f:ac:7b:ec:88:af:e3:4d:4f:3c:95:b9:f8:86:01:
e8:9d:87:14:84:be:64:8f:a5:2e:20:54:cd:db:dc:2f:24:7d:
95:1c:17:fe:45:57:7c:2d:95:58:e4:aa:2a:75:c8:54:78:bb:
56:15:e2:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDK61jrJJ4c9LDgdv+eOsRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjc0MjQ5NjQwMGQ4MTBiZTViNDA5NmZkZWRlYzMwYTIz
MWY5YWIwHhcNMjYwOTIyMjEwMDE2WhcNMjYwOTIzMjEwMDE2WjAzMTEwLwYDVQQD
EyhlN2ZiOTgyYmY4NWEwNTcyNjI3YTAyZGU4MWJjNDgyY2UzNTlhMTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJM66xqYEjgFFSf0w+/QLCZmXS/N
zgBbsNF3Hpgv8S/bRj3c7/QuhmLMjQ1jEYER50Ljo5296Xls+qpB7OUiyaatHotc
nJ5SYGHS0xfs7cvzwhYilAHmDVrlF2HVY0cpX1hSSAb4MwbOVfKsp+mdvyfFMjzG
RyHO/lJuNgNrliVqE5gyIYW3uVWVvRHBMBOmUPsbuuBNfITaVOJpdIJF/85gaWNs
S7Xp2+CF1eZ7SvCk21esJw/Nt1Rk/rdWiOQEX6Lt0oXVkxeW2pr1A9EZxpm5ZaFl
28rvX14sf7c6sDHXY+CpwmXUwqnNvQcmOBo+JCWC6YOd6dWilRvowDkwzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf7mCv4WgVyYnoC3oG8SCzjWaEQMB8GA1UdIwQY
MBaAFD4nQklkANgQvltAlv3t7DCiMfmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUt
MTg0ZGZmMjkyYTMwLzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUtMTg0ZGZmMjkyYTMw
LzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHd5WAiyB
Ff9aVj3Rzh76joyuNx+Zz0wt7riaNgJD3KqetNUJzyE9NbtQRI4PbyUbFz+1Rc9Y
DMCSuHQ6//1PY2vhuIBxVtaymI6xD6uO0ErlnS7mSYhrRGwSVZb5rjsp1c6eau3V
o/pUZYfh6fQd1bHZZcsTNxJ7unEvW9SV225T1MWAUUh4e6APrCUZbspxNE0ltTWT
IN6UOBZF/ktGWMGf1a7byns2ocyd/VjswIgTPBr759Mn1+81MavyD1CC8fZx67Hy
cJp6f6x77Iiv401PPJW5+IYB6J2HFIS+ZI+lLiBUzdvcLyR9lRwX/kVXfC2VWOSq
KnXIVHi7VhXiPQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:17:55 2026 by rpki-client