Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
File: pCNxKB3-GQctEzndBIKyqvrVQs4.mft (raw, json)
Hash identifier: R5YhVSGM6vFjoSpdq3XLNi5gueaBs2KO8DK12v6675k=
Subject key identifier: 68:BA:36:2B:FD:E3:7D:A3:5A:C9:3B:8F:F3:65:F3:64:BD:67:C0:0C
Authority key identifier: A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
Certificate issuer: /CN=a42371281dfe19072d1339dd0482b2aafad542ce
Certificate serial: 019E1C7D6ABA85D3D9BE2788AF479F674EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
Manifest number: 0BE1
Signing time: Tue 12 May 2026 14:00:41 +0000
Manifest this update: Tue 12 May 2026 14:00:41 +0000
Manifest next update: Wed 13 May 2026 14:00:41 +0000
Files and hashes: 1: 5-fSRldHA_TyCo0Af_n4H7VHHoo.roa (hash: n/VVjN3d2+A+fBj8+Kv149bG42PjdEV7GiSsjv6L+Uw=)
2: JjXi4XbAnV9bj8nE6_XGuu1V074.asa (hash: O90Cg0AUX3YziSsowsx54UsgUbqTnyh9MTtkhA73QD8=)
3: pCNxKB3-GQctEzndBIKyqvrVQs4.crl (hash: qK6oNMCfrFIPGnJUs8X29lT8NwJE0UgZoSNyhcmtbBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:6a:ba:85:d3:d9:be:27:88:af:47:9f:67:4e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42371281dfe19072d1339dd0482b2aafad542ce
Validity
Not Before: May 12 14:00:41 2026 GMT
Not After : May 13 14:00:41 2026 GMT
Subject: CN=68ba362bfde37da35ac93b8ff365f364bd67c00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bc:1a:a2:4f:9e:9c:2f:89:da:7d:5b:06:43:
29:9e:ba:fb:99:1c:3d:2d:97:b6:b5:f7:82:77:97:
13:32:90:41:81:65:12:01:84:15:7b:ff:f9:b7:b7:
5e:66:49:9c:b4:4b:36:1d:36:f4:af:50:5c:ae:6f:
17:ba:0a:ab:bf:11:15:4f:a4:f4:8c:b9:a1:28:f1:
ee:a3:e2:40:15:90:6a:0e:e4:cb:83:21:51:50:ab:
06:65:de:4d:04:42:86:53:bb:9d:7e:4b:bf:23:63:
3a:01:1f:8a:34:c6:61:26:92:5c:b7:0f:f5:4f:ba:
6c:d2:4e:62:fe:24:14:54:3c:08:6a:a4:a8:7f:3b:
2c:e8:d1:ab:21:43:1d:9f:ad:3a:0f:ee:48:4d:4f:
47:a8:7e:41:b0:f5:94:24:cb:5c:0c:01:1c:dc:8c:
03:21:b2:53:30:d9:4f:c5:b6:5a:61:ce:1a:c0:16:
6c:7c:e7:a0:2c:16:76:ec:10:55:a6:7a:1c:49:01:
3d:9e:64:b3:f0:ad:35:83:a4:23:8a:51:45:de:76:
25:e9:3c:5b:e3:89:9d:23:5b:82:7f:29:37:05:de:
65:12:6e:f3:d7:ac:06:38:8c:73:59:d2:99:7c:7e:
eb:63:ba:d8:65:ac:e0:33:78:77:cc:bb:63:29:da:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BA:36:2B:FD:E3:7D:A3:5A:C9:3B:8F:F3:65:F3:64:BD:67:C0:0C
X509v3 Authority Key Identifier:
keyid:A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5f:2e:94:e5:2e:0f:2d:0b:5f:e7:5b:48:55:45:ab:1e:b7:
02:e1:75:75:38:30:44:e6:87:c4:37:e0:2b:60:1a:a0:2a:36:
da:85:e5:7d:ba:a4:e9:7b:7b:69:99:33:8b:fc:98:bf:a8:a2:
af:34:79:ce:57:33:53:99:59:5a:c1:f2:55:22:e4:62:3c:56:
3b:ea:3a:50:11:2f:a4:15:a1:c2:36:09:10:41:17:ff:1e:69:
59:2f:9e:1d:14:8e:e2:bf:a9:f5:9b:f1:f1:03:61:16:67:7b:
ed:f1:ef:83:68:8c:d5:a5:79:9b:34:09:4b:30:27:60:35:49:
b5:1d:5f:db:a2:a6:ef:3b:6d:a3:d0:7f:92:de:db:76:d3:8b:
02:2d:d7:55:bb:8b:7c:fb:e6:18:c0:db:58:51:cb:e6:53:84:
aa:30:dc:c4:20:46:43:f9:05:3e:04:75:f1:63:e8:c6:28:e1:
26:ff:d8:a8:fe:da:38:68:b5:76:fc:e0:e2:bf:74:f5:c9:7a:
2d:ab:47:68:be:12:97:2d:a8:7f:f7:57:26:2f:33:cc:88:fb:
c6:f5:bc:9a:11:d2:ff:23:9e:eb:f8:5a:ac:6f:7b:ea:82:1f:
92:cd:b9:0f:5f:fb:d4:cc:97:3b:2e:71:8a:3a:f9:87:ba:a3:
40:4f:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:43 2026 by rpki-client