Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
File: pCNxKB3-GQctEzndBIKyqvrVQs4.mft (raw, json)
Hash identifier: aAheL4XHwGkYFjeFjHzf3tYphk+xfEFfaT0hQLcX2ug=
Subject key identifier: E7:77:1B:AB:73:0A:FE:43:EB:57:E5:54:D3:1C:C5:CD:16:9C:73:98
Authority key identifier: A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
Certificate issuer: /CN=a42371281dfe19072d1339dd0482b2aafad542ce
Certificate serial: 019D292927A8EBCE8EA9947F827C9A7C9D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
Manifest number: 0B62
Signing time: Thu 26 Mar 2026 08:00:56 +0000
Manifest this update: Thu 26 Mar 2026 08:00:56 +0000
Manifest next update: Fri 27 Mar 2026 08:00:56 +0000
Files and hashes: 1: 5-fSRldHA_TyCo0Af_n4H7VHHoo.roa (hash: n/VVjN3d2+A+fBj8+Kv149bG42PjdEV7GiSsjv6L+Uw=)
2: pCNxKB3-GQctEzndBIKyqvrVQs4.crl (hash: YctiFcMP3M7X9QWABD99DCO46FphGdxnDX27nlhRTOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:27:a8:eb:ce:8e:a9:94:7f:82:7c:9a:7c:9d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42371281dfe19072d1339dd0482b2aafad542ce
Validity
Not Before: Mar 26 08:00:56 2026 GMT
Not After : Mar 27 08:00:56 2026 GMT
Subject: CN=e7771bab730afe43eb57e554d31cc5cd169c7398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ce:3d:a6:3c:23:a7:c3:91:37:1b:ea:89:39:
a1:64:1e:83:04:5b:65:b7:b4:a4:78:6c:a1:80:26:
dc:73:08:33:a6:31:95:2c:9c:88:0b:ba:ac:ae:6d:
80:18:8c:1b:50:b0:d3:60:f5:f5:3a:1c:3b:23:eb:
3a:69:1e:df:cd:e0:a5:63:d8:a6:ff:f5:d6:72:e5:
95:09:d7:e3:29:ec:ae:82:28:1a:50:81:da:49:d2:
67:ba:43:41:1d:e6:74:94:34:2e:da:73:01:03:71:
03:2f:68:0b:84:37:bd:03:0b:0b:78:75:2c:88:75:
86:52:b0:d5:5e:94:ba:c8:a2:ca:5c:ea:6a:d3:56:
2d:93:bb:fc:10:8c:dc:46:e1:8a:9c:88:e1:c9:db:
a6:95:a0:32:49:ac:10:72:10:14:29:95:d0:06:2f:
de:1f:60:a3:a4:b7:76:0a:bd:37:8b:71:54:86:57:
87:46:2f:15:c0:c8:eb:b9:70:af:f7:63:b5:cb:25:
de:8a:f1:b2:0b:74:a1:0e:20:00:76:bd:1b:4a:a1:
3c:2e:15:34:07:44:50:29:0d:2b:85:c2:8f:b6:c5:
a1:21:e2:b5:15:95:9d:ca:7e:83:72:2f:79:e9:47:
72:f4:9f:9d:37:8c:f9:da:86:d4:5b:69:57:11:17:
52:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:77:1B:AB:73:0A:FE:43:EB:57:E5:54:D3:1C:C5:CD:16:9C:73:98
X509v3 Authority Key Identifier:
keyid:A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fc:32:06:00:cd:1f:01:84:39:6a:c0:6b:86:35:c9:81:4f:
71:c4:26:c6:0f:86:4f:a0:9c:e7:eb:31:95:cf:e7:c9:5d:f7:
19:02:c7:f6:f6:97:72:a7:f3:54:f2:7a:ed:e0:9c:e2:b2:ce:
16:2d:26:59:37:01:b1:e9:b7:e9:d2:44:89:1c:56:bb:0a:a8:
fb:e7:4b:b3:39:9f:57:f3:72:8f:21:ef:a3:24:54:6f:6b:e6:
93:a9:54:39:87:e2:0a:c6:20:6e:b7:82:bd:4c:32:ba:08:ee:
04:52:d2:6c:c1:95:66:58:7d:09:ce:61:71:2a:11:4b:7a:f7:
de:97:d0:61:d3:05:e4:d5:b2:d1:13:23:eb:0c:a0:51:26:97:
d3:cf:b6:0f:2e:f8:f7:c5:2f:31:ec:35:d1:2e:5c:0b:f5:1d:
39:e2:2d:81:55:32:49:42:6f:c8:4f:6d:46:5c:02:32:1d:fc:
cc:1f:02:d4:54:7a:34:f6:a5:86:60:18:41:7d:85:a8:fe:53:
1a:36:6a:4f:b6:98:c8:52:39:1d:72:60:cc:6f:2c:70:98:38:
8d:38:d8:84:1d:d1:40:b8:aa:81:53:b8:37:d4:c6:c9:cb:9e:
fa:56:70:d8:17:fc:26:71:cd:f6:0a:01:b0:b0:57:88:82:74:
0c:d7:54:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:56:05 2026 by rpki-client