Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: OMro/NzHK1l3dJtWzFs/c/MUfMOeorr/9/1tKzh+o50=
Subject key identifier: 86:F5:E1:22:A4:EA:AE:2B:B7:1A:4B:03:60:81:00:22:0D:4C:22:E7
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 019E1DFE1F9877754613EB6014A599657D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 190B
Signing time: Tue 12 May 2026 21:00:53 +0000
Manifest this update: Tue 12 May 2026 21:00:53 +0000
Manifest next update: Wed 13 May 2026 21:00:53 +0000
Files and hashes: 1: OxD51mZyUSy88WgP3TSafX3fVSM.roa (hash: ZUvDT5JmZoKJbZ2aaD6n8DqRqPOQ2yLOsnmhPBma0XE=)
2: Rqp6q80V5Lqgy6fApQicG0uIkYM.roa (hash: MiTXHdLJkzTFAdsQjyFK17euaeb3+FVSMfPmJuUxhJ8=)
3: lM0ykYh8wCH6poD1ByzZO951DOs.roa (hash: O0xjxg/OZFV2+IIvgGtT77zr81ND+/n3L2jks1YfEO4=)
4: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: 6YgRMCJzirBKHEAZpfbEwQcrTlTREmMhGsAJ3+rxI/4=)
5: tVTj2VfcWC8MlPPtw5H08Ah033c.roa (hash: vnVztEiFiRrUOyK2US2Elxv/6sJ52wKVTB11SJJl2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:1f:98:77:75:46:13:eb:60:14:a5:99:65:7d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: May 12 21:00:53 2026 GMT
Not After : May 13 21:00:53 2026 GMT
Subject: CN=86f5e122a4eaae2bb71a4b03608100220d4c22e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:7f:de:bb:12:d7:bc:67:56:ae:5d:09:18:
14:b8:00:5f:b9:e6:4c:de:86:2d:95:74:c8:06:00:
90:62:49:06:32:97:d1:a2:e0:ab:54:89:79:cb:20:
7f:e8:83:b9:ef:67:2f:29:03:06:fc:a2:3c:0e:41:
b8:6f:14:fd:13:e1:9d:b6:86:a6:6a:82:40:ae:16:
ee:60:8a:f6:d9:c7:b6:fe:82:a1:5e:89:ec:fd:9a:
85:8e:6c:f6:fd:20:48:4b:a1:0c:d9:c3:ab:f8:cc:
24:97:ec:6e:ac:45:00:ff:8e:c1:ee:22:96:8d:f9:
c5:ca:f4:7c:c9:eb:91:86:d4:fa:a6:f0:24:a6:f9:
aa:c2:55:02:a6:00:94:71:ac:74:12:6e:cf:ba:7e:
5c:53:da:d2:3d:ae:04:3c:21:f7:22:a6:01:49:d0:
95:a8:9b:c8:0b:29:1d:b8:a6:69:6f:66:5f:e4:47:
ba:68:35:50:07:20:ec:38:6c:bd:68:cb:9b:58:8f:
ba:01:5b:da:46:77:d6:2c:a3:0d:1b:64:72:87:40:
ef:48:e6:62:1f:9d:e5:45:69:33:24:8b:d5:b1:c2:
8b:d0:be:84:66:41:f3:13:b8:2b:69:b8:25:2b:c4:
eb:fc:14:32:0e:3d:1d:2c:3d:bc:8f:22:42:9c:9b:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F5:E1:22:A4:EA:AE:2B:B7:1A:4B:03:60:81:00:22:0D:4C:22:E7
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c8:8c:3a:36:2b:d2:68:1c:99:29:31:d2:0d:38:be:84:71:
cb:f9:b1:2c:63:2d:e0:8e:a7:09:8c:f3:70:cf:7d:3d:67:44:
c7:97:43:58:8f:21:cd:7e:e4:0a:19:5d:c5:ce:61:a0:84:d8:
58:51:be:51:e9:13:f0:2d:9f:04:9b:c0:51:6f:40:23:31:aa:
53:45:24:f6:75:cd:28:f7:5a:31:7e:7c:89:92:57:a1:42:89:
5f:5f:fd:62:1a:74:7f:2b:75:8a:9e:8c:51:97:da:b2:54:a5:
aa:07:bb:30:f9:c0:90:16:ce:f4:18:21:1d:94:04:95:c8:09:
20:4a:c7:ed:81:80:46:11:b7:e2:72:66:ff:3d:1d:99:cd:48:
0e:b9:bd:68:75:09:26:9e:ff:3d:5d:71:5e:f3:cd:32:94:d3:
85:e0:89:c8:17:cf:21:97:c3:f4:24:f9:a9:7d:07:cd:96:e5:
3b:8c:b6:05:da:ca:be:df:27:8c:fe:d0:ec:76:78:b2:b8:34:
e6:15:91:13:e3:03:a4:39:0f:e9:3f:5b:7a:3a:e3:1b:a1:6f:
fd:25:7b:d2:23:be:47:54:8a:8c:10:14:ca:ff:2f:4d:f9:80:
d6:87:14:b2:dc:aa:66:40:70:f0:af:9a:d1:cf:ab:cf:b4:37:
82:42:b1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:23 2026 by rpki-client