Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: iEMoPxiXFtLO0EdtDgwD9RFDKcyiUCMGitGi1ys3B+I=
Subject key identifier: 80:82:3F:C0:65:54:3C:43:1A:55:C3:B9:54:23:85:F9:02:43:12:87
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 01A0D917A3BD147EE8845D4004FAD56FAB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 15:03:20 +0000
Manifest this update: Fri 25 Sep 2026 15:03:20 +0000
Manifest next update: Sat 26 Sep 2026 15:03:20 +0000
Files and hashes: 1: OxD51mZyUSy88WgP3TSafX3fVSM.roa (hash: ZUvDT5JmZoKJbZ2aaD6n8DqRqPOQ2yLOsnmhPBma0XE=)
2: Rqp6q80V5Lqgy6fApQicG0uIkYM.roa (hash: MiTXHdLJkzTFAdsQjyFK17euaeb3+FVSMfPmJuUxhJ8=)
3: lM0ykYh8wCH6poD1ByzZO951DOs.roa (hash: O0xjxg/OZFV2+IIvgGtT77zr81ND+/n3L2jks1YfEO4=)
4: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: kKaVQaMYFZ9yFhu5fqkR2D2WZs8T5//x/zqkpuP/Obg=)
5: tVTj2VfcWC8MlPPtw5H08Ah033c.roa (hash: vnVztEiFiRrUOyK2US2Elxv/6sJ52wKVTB11SJJl2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:a3:bd:14:7e:e8:84:5d:40:04:fa:d5:6f:ab:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Sep 25 15:03:20 2026 GMT
Not After : Sep 26 15:03:20 2026 GMT
Subject: CN=80823fc065543c431a55c3b9542385f902431287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:e5:35:a5:0e:42:ea:ed:92:83:96:c1:4f:
dc:1e:7d:55:d4:6e:70:df:2c:83:93:71:32:84:9b:
98:eb:d7:5a:10:8a:2f:fc:cf:55:ef:b2:a3:1a:8a:
e8:b7:1f:db:37:53:f9:17:d2:f7:bc:5c:49:b9:33:
18:6d:15:c2:cf:1b:b7:85:85:ff:a6:6e:34:3a:d2:
d4:52:10:e0:e5:a3:a3:90:ea:34:fd:12:6c:64:9a:
09:4c:d1:64:c4:dc:7b:50:6f:0f:c0:a0:9d:1d:ec:
2c:6d:17:6e:1b:2d:fb:03:de:ff:fa:15:e3:8f:bd:
00:c9:15:56:c0:33:e4:25:0f:c9:de:fd:ca:2f:48:
af:1d:de:bf:ea:59:fa:a4:ea:50:66:6f:80:3c:0d:
ba:ea:34:7b:01:f6:d3:a6:0d:c3:f3:14:fb:18:68:
ea:8e:05:6d:2a:3a:41:ff:2b:3e:e5:c3:32:21:be:
4c:fc:8c:8e:5e:ca:3a:71:7b:f2:6b:b2:10:4b:7e:
83:b2:14:6b:93:1b:e8:cb:c7:d1:1c:63:98:b4:6b:
6a:a1:cc:62:14:ae:a2:43:74:f8:4c:67:df:15:6e:
db:71:7d:3c:5c:ff:41:b4:f6:cc:d0:ab:c5:61:be:
55:7c:be:5c:06:c3:2e:ff:38:ae:50:b4:11:f2:d2:
06:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:82:3F:C0:65:54:3C:43:1A:55:C3:B9:54:23:85:F9:02:43:12:87
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0c:f0:f2:25:9c:0b:2b:59:78:47:f9:41:72:00:60:8b:e5:
da:ba:55:8f:09:7b:08:a3:d9:98:ec:a5:01:63:d6:80:ec:bc:
f2:f9:c8:16:77:1b:1f:b5:01:73:ad:95:99:d6:c9:0e:22:f5:
08:b1:23:ae:99:2c:41:71:58:55:1f:73:d0:a6:07:93:ac:27:
cb:0d:e8:be:e0:43:8e:5d:05:55:91:21:ce:55:6c:61:76:e6:
6a:2b:47:5b:bc:10:d6:dd:7e:b7:7b:1a:b2:c0:a7:f0:d6:8a:
47:03:f2:b2:af:10:5f:27:10:e6:9f:57:c5:d8:96:94:a1:ea:
d6:eb:69:d7:f0:c2:8f:1f:3c:71:67:44:78:fb:31:5b:33:1f:
52:6b:7c:67:b3:d5:d5:d2:07:f5:b3:59:d2:d2:7f:e2:37:d8:
e2:31:b7:08:45:9f:8a:d9:3b:ad:3d:b8:30:c0:c6:7a:8c:2d:
05:7a:58:80:98:6d:9b:e7:fa:4f:ac:5b:aa:1a:f9:ea:3a:18:
97:ae:ba:91:fd:4e:b4:09:b7:23:a5:eb:0d:bf:7d:a9:bb:82:
c2:bf:17:60:fb:02:b3:db:17:20:f1:36:d1:7c:a1:38:d2:2e:
78:aa:07:5c:4c:d6:55:0f:44:f0:24:b1:b7:00:a4:2e:1a:4b:
bc:7c:3d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:01:40 2026 by rpki-client