Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
File: pCqe9isMK_HTQWU5sqBKJlmMLEM.mft (raw, json)
Hash identifier: wRgE0bLHsjFiwY+VcEosCvxVPXOTpdWPNkfoXMlrsrE=
Subject key identifier: 31:08:99:D7:3E:8E:95:4B:DC:37:B7:86:6D:19:87:DE:B3:F6:A5:F8
Authority key identifier: A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
Certificate issuer: /CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Certificate serial: 019D27DFE07D494A0359B4EAE710847A7C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:16 +0000
Manifest this update: Thu 26 Mar 2026 02:01:16 +0000
Manifest next update: Fri 27 Mar 2026 02:01:16 +0000
Files and hashes: 1: fczzCkb_2eHkiaUh2loE1L-X3Dc.roa (hash: yQHHlNkF+vXwUUV14v/AjylpWEMjSzOv1ynBII4ZKEk=)
2: pCqe9isMK_HTQWU5sqBKJlmMLEM.crl (hash: Or9AgFg1uL5JGgHxpHMW2UNp1FZDCMaaCgaewbNWc6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e0:7d:49:4a:03:59:b4:ea:e7:10:84:7a:7c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Validity
Not Before: Mar 26 02:01:16 2026 GMT
Not After : Mar 27 02:01:16 2026 GMT
Subject: CN=310899d73e8e954bdc37b7866d1987deb3f6a5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a7:d7:50:a2:e3:ef:f7:a0:7e:ad:bc:fc:55:
f0:78:29:f2:b3:5a:fb:7e:fc:f1:7e:25:2d:c2:85:
1b:d3:51:a8:e3:4f:05:d8:bd:5b:53:0c:f1:7e:26:
2b:44:0e:8a:ae:14:d2:ef:c1:c6:01:7d:a6:b8:0b:
8e:a4:58:a5:f8:d9:34:6e:32:4d:4f:b4:70:4c:f5:
c1:90:26:a9:70:00:af:d6:d8:70:63:b9:1a:8e:f5:
a8:ce:ba:15:20:7f:c3:5b:5a:ea:60:8f:2a:00:6c:
a1:ba:ff:df:f7:7e:75:bc:ea:d6:5d:33:df:f4:3d:
34:cf:95:a2:28:e3:ae:3a:8c:f5:57:31:b9:d2:3e:
f6:ff:0e:22:e5:a2:9c:e8:52:0b:c5:46:2d:3a:bb:
b3:99:9c:0e:de:c0:37:66:b3:44:e0:10:da:d2:56:
b7:7e:41:37:e6:0e:b9:5d:a2:bb:4f:2d:d7:f3:25:
f8:8b:ff:43:bf:96:5b:3b:2e:3c:cb:86:98:d4:9c:
4f:9d:61:66:2e:fd:96:2a:83:03:e5:72:3f:fb:01:
6a:9b:92:80:f6:49:79:5c:a5:2c:d4:5f:cf:d2:d7:
b6:e3:b3:11:cc:3c:68:d4:e6:ca:1f:08:21:f8:27:
2f:58:bd:a9:79:4c:c1:cf:f4:47:c2:34:5c:d7:ed:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:08:99:D7:3E:8E:95:4B:DC:37:B7:86:6D:19:87:DE:B3:F6:A5:F8
X509v3 Authority Key Identifier:
keyid:A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3e:8e:e2:6b:9e:e7:42:44:aa:4a:81:f3:2d:41:d5:a1:ca:
e3:9f:13:f5:21:3b:7c:68:7a:e9:0a:4e:7e:9a:9a:a2:8d:a5:
b5:54:56:34:29:05:9b:95:1e:7b:1f:23:16:d9:14:b8:d2:59:
e8:32:8b:b5:b3:39:70:3c:13:17:cb:26:57:6b:d9:ed:17:e4:
7b:83:33:65:76:c3:7b:71:bb:31:4b:d0:21:7b:3c:d8:69:e9:
5f:b5:6b:38:a3:82:9f:8a:e8:5d:df:e5:62:03:7a:86:bf:45:
b4:14:38:bd:b0:e2:6c:31:c2:4c:1f:d6:96:c5:b6:e2:ca:ea:
ac:66:d3:c2:4e:3e:c8:cd:d7:c7:3a:5a:b7:85:2d:5d:14:4d:
af:b2:8f:00:2e:5f:59:7b:4b:ac:85:78:46:4d:84:9e:51:d3:
74:5b:d3:60:59:52:d2:45:55:a1:eb:fc:9a:fd:33:92:f9:42:
18:98:2e:3c:87:b0:ba:ac:ab:9d:65:b5:81:ac:ba:63:e3:90:
b3:a1:11:42:41:ec:47:0d:f5:ea:00:ed:85:6b:21:02:35:c3:
85:10:fe:95:87:11:47:de:52:ca:9e:0a:c7:75:82:f7:55:99:
bb:53:5b:4b:5d:64:2d:e3:2f:a7:76:f0:3c:a5:5c:ea:f4:2b:
38:88:67:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:09 2026 by rpki-client