Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: hWDufWPOH9CZ9rg/zqxUzNnZUMD/zSmoOaOHYYRfT5c=
Subject key identifier: 66:7F:EB:44:79:D9:C4:AA:74:D9:5D:1A:84:B3:52:8E:1F:6A:03:68
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 019D2703B2DA556B4DF3C5FB00FB29D3ACA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 0C69
Signing time: Wed 25 Mar 2026 22:00:46 +0000
Manifest this update: Wed 25 Mar 2026 22:00:46 +0000
Manifest next update: Thu 26 Mar 2026 22:00:46 +0000
Files and hashes: 1: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: KMUIs5wkUPhxSLTBMf+Y479NnWquTVkKX8TYIwAQIFg=)
2: VTDoK_HiASPo0rKQEESAmloV1uI.roa (hash: j/Uqiho+zYJi7PaZZVvRcMCOVoIn337nTlvuR4KCJ5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b2:da:55:6b:4d:f3:c5:fb:00:fb:29:d3:ac:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Mar 25 22:00:46 2026 GMT
Not After : Mar 26 22:00:46 2026 GMT
Subject: CN=667feb4479d9c4aa74d95d1a84b3528e1f6a0368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:fa:ff:09:2d:04:12:f5:df:69:d6:c6:35:
d7:60:6f:11:30:91:06:5e:1d:6c:45:42:cf:c5:b5:
cd:19:ef:e6:8d:30:0a:63:15:b8:8f:de:23:86:28:
68:88:d3:ae:3c:38:b3:45:6a:65:46:43:2e:f6:3b:
e1:65:ac:e4:cf:ca:df:f4:ea:6d:c9:99:a5:e3:07:
82:4e:da:ed:2c:aa:fb:e6:9f:e2:0e:bd:df:57:22:
80:08:68:c7:ae:18:aa:23:88:11:ff:b4:21:b7:7b:
a5:74:1c:03:ef:de:50:35:ad:19:fe:b4:60:23:09:
c9:a4:b1:79:12:95:f5:76:02:b2:8e:38:57:f8:0a:
57:f9:e6:71:79:b2:7d:2e:fc:d6:58:b3:08:7c:a4:
ba:ef:7d:79:39:ef:a8:fb:38:4a:2f:71:fd:2b:64:
b4:fa:2b:5f:97:b9:39:4f:a4:5f:d9:47:a6:88:f7:
db:5c:4e:36:44:9d:0e:0d:bf:ca:5b:92:96:17:7a:
60:30:e1:42:41:47:f8:26:d9:58:06:23:2c:81:95:
21:1e:6d:89:13:b6:d1:b2:70:9c:e0:47:cd:48:a4:
bb:21:08:75:b1:e0:8e:c3:7e:af:30:53:f5:2b:5a:
70:f8:0a:97:c2:56:af:73:9a:33:03:51:70:3d:32:
aa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7F:EB:44:79:D9:C4:AA:74:D9:5D:1A:84:B3:52:8E:1F:6A:03:68
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:65:8a:25:74:cd:bc:c4:51:5d:20:e8:d5:ba:45:c9:58:29:
ee:e4:da:80:27:e6:e8:d7:77:b2:c1:38:b7:7c:43:e6:81:31:
88:7c:2e:06:0e:59:2c:7f:df:5b:69:38:c3:f2:ec:f5:c6:6e:
d9:39:6c:67:c6:85:d9:93:bc:b4:7c:5d:a5:85:1f:71:01:be:
d6:24:97:e4:71:32:88:a4:5c:ef:72:08:c7:29:ad:aa:33:d1:
49:49:02:55:03:f4:b2:fe:f0:3d:d4:0b:3d:36:02:be:56:a1:
7c:cb:d1:9a:79:ba:cf:02:d3:75:d8:69:04:96:d5:6f:ef:ab:
f2:2f:28:e1:e6:5d:8b:15:83:e2:9f:44:e7:e9:cc:9d:31:5a:
de:df:86:f2:21:e8:e9:9e:14:0a:f3:d4:53:8e:4f:33:0a:c2:
28:cc:f8:3f:10:53:96:54:66:74:d9:54:ff:d8:6d:12:35:7f:
91:6f:36:f0:0b:1f:93:f1:f0:70:92:fb:9a:65:08:8e:54:bf:
6f:99:90:b2:53:e1:aa:c6:13:95:2b:8f:7a:84:ff:19:28:82:
25:7a:de:d0:cc:c4:87:e3:da:47:8f:55:90:c0:7d:c0:19:2b:
bb:35:63:ff:2c:54:c0:3c:af:67:a6:e3:30:c3:b8:ac:60:8c:
02:15:20:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA7LaVWtN88X7APsp06ypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjc0MjQ5NjQwMGQ4MTBiZTViNDA5NmZkZWRlYzMwYTIz
MWY5YWIwHhcNMjYwMzI1MjIwMDQ2WhcNMjYwMzI2MjIwMDQ2WjAzMTEwLwYDVQQD
Eyg2NjdmZWI0NDc5ZDljNGFhNzRkOTVkMWE4NGIzNTI4ZTFmNmEwMzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmD6/wktBBL132nWxjXXYG8RMJEG
Xh1sRULPxbXNGe/mjTAKYxW4j94jhihoiNOuPDizRWplRkMu9jvhZazkz8rf9Opt
yZml4weCTtrtLKr75p/iDr3fVyKACGjHrhiqI4gR/7Qht3uldBwD795QNa0Z/rRg
IwnJpLF5EpX1dgKyjjhX+ApX+eZxebJ9LvzWWLMIfKS67315Oe+o+zhKL3H9K2S0
+itfl7k5T6Rf2UemiPfbXE42RJ0ODb/KW5KWF3pgMOFCQUf4JtlYBiMsgZUhHm2J
E7bRsnCc4EfNSKS7IQh1seCOw36vMFP1K1pw+AqXwlavc5ozA1FwPTKqIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZ/60R52cSqdNldGoSzUo4fagNoMB8GA1UdIwQY
MBaAFD4nQklkANgQvltAlv3t7DCiMfmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUt
MTg0ZGZmMjkyYTMwLzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUtMTg0ZGZmMjkyYTMw
LzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGWKJXTN
vMRRXSDo1bpFyVgp7uTagCfm6Nd3ssE4t3xD5oExiHwuBg5ZLH/fW2k4w/Ls9cZu
2TlsZ8aF2ZO8tHxdpYUfcQG+1iSX5HEyiKRc73IIxymtqjPRSUkCVQP0sv7wPdQL
PTYCvlahfMvRmnm6zwLTddhpBJbVb++r8i8o4eZdixWD4p9E5+nMnTFa3t+G8iHo
6Z4UCvPUU45PMwrCKMz4PxBTllRmdNlU/9htEjV/kW828Asfk/HwcJL7mmUIjlS/
b5mQslPhqsYTlSuPeoT/GSiCJXre0MzEh+PaR49VkMB9wBkruzVj/yxUwDyvZ6bj
MMO4rGCMAhUgsw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:38 2026 by rpki-client