Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: vKs3amoRP4eqhDhfE+/nBi1TnpqJLy4aqvhT54zURkE=
Subject key identifier: 63:4F:77:35:0B:40:5D:1D:58:6F:0C:58:83:99:70:33:69:EF:F2:D8
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 019D28BB392A4C2677B0453F13D80ACDCEBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 06:00:51 +0000
Manifest this update: Thu 26 Mar 2026 06:00:51 +0000
Manifest next update: Fri 27 Mar 2026 06:00:51 +0000
Files and hashes: 1: OxD51mZyUSy88WgP3TSafX3fVSM.roa (hash: ZUvDT5JmZoKJbZ2aaD6n8DqRqPOQ2yLOsnmhPBma0XE=)
2: Rqp6q80V5Lqgy6fApQicG0uIkYM.roa (hash: MiTXHdLJkzTFAdsQjyFK17euaeb3+FVSMfPmJuUxhJ8=)
3: lM0ykYh8wCH6poD1ByzZO951DOs.roa (hash: O0xjxg/OZFV2+IIvgGtT77zr81ND+/n3L2jks1YfEO4=)
4: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: KSOwPtyHo9ovzJP1nSn83VUg5/Eb2CNLNWCDM4EaJoY=)
5: tVTj2VfcWC8MlPPtw5H08Ah033c.roa (hash: vnVztEiFiRrUOyK2US2Elxv/6sJ52wKVTB11SJJl2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:39:2a:4c:26:77:b0:45:3f:13:d8:0a:cd:ce:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Mar 26 06:00:51 2026 GMT
Not After : Mar 27 06:00:51 2026 GMT
Subject: CN=634f77350b405d1d586f0c588399703369eff2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:4b:f8:0d:4f:71:72:69:9c:9f:aa:1a:70:
d5:8e:8d:55:4a:b1:2c:3e:29:2c:0e:29:43:fc:4d:
49:b2:ac:22:9e:4e:5d:fd:a9:08:1b:0f:25:2c:c3:
8c:12:35:f3:cc:8f:be:74:d3:a0:ba:da:fc:95:b0:
05:81:6a:5c:b2:9f:8e:ad:74:e9:b5:31:1d:f0:9c:
09:d1:93:c3:42:38:6d:92:94:eb:59:3b:44:1d:bc:
b8:93:db:40:e2:23:f7:51:0b:cc:56:33:fe:21:56:
0b:e0:90:b8:96:da:6f:6a:ae:9e:09:6a:f1:6b:28:
60:35:15:4a:00:55:fd:f6:8e:01:82:95:c0:cc:50:
a7:3f:30:5a:10:88:49:14:48:2d:23:69:3b:11:66:
d3:09:d8:58:50:38:ea:07:6e:e8:85:f7:13:42:70:
5f:96:d6:d6:e8:b3:ac:4a:85:5e:1b:d3:c3:76:5a:
1f:17:a6:29:b1:9d:c1:3a:23:ca:b2:5f:e8:71:99:
0a:14:70:5d:02:07:a7:16:66:dd:a6:ce:54:06:2e:
21:89:3f:1e:69:38:77:82:0d:dd:9e:65:99:2f:3e:
a1:7e:07:da:2f:9a:9c:2f:2a:56:ed:78:d7:4a:4d:
d6:1e:bc:c9:41:83:ee:7d:10:86:c4:1a:f4:f8:0b:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4F:77:35:0B:40:5D:1D:58:6F:0C:58:83:99:70:33:69:EF:F2:D8
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5b:65:4e:0a:f8:0b:7a:88:90:35:88:63:b7:49:ee:01:22:
b0:ea:79:a1:9c:54:c0:5e:59:d2:d9:4a:2e:6a:4c:4a:cb:aa:
24:66:ad:bf:d8:e1:a3:25:50:a7:6f:bc:67:48:2a:f1:7e:53:
c2:3b:ab:a6:9b:5f:34:55:8c:91:f7:da:08:34:a8:d2:e8:28:
d0:8e:eb:6d:3b:c7:db:bb:91:ae:19:1e:c9:d2:a6:c5:f3:86:
08:dd:b3:4c:1e:b4:78:ea:c8:88:44:49:f7:4a:fd:ee:05:a2:
6a:6b:4b:41:e8:24:d5:5b:0d:bd:96:c2:68:2f:3e:1b:20:8f:
a3:cc:5d:a3:5d:d8:49:71:bd:d1:d0:ed:57:2a:af:03:11:a1:
d5:ed:09:e2:76:7d:91:93:25:b9:f8:bf:2b:06:cc:f3:c7:60:
18:86:d9:8d:d3:e1:92:d0:fb:15:41:33:19:8c:73:07:c1:c2:
ad:43:24:03:f2:fe:d0:cc:a9:f1:ee:a9:00:49:ee:8b:a6:7b:
bf:1f:35:9e:64:a1:7b:10:37:20:d2:8f:d8:a0:59:3e:29:00:
8e:ac:56:16:52:c2:d3:d3:eb:34:15:4f:c1:49:d2:1e:c4:86:
4a:66:17:95:8f:3f:e5:c1:28:39:b4:7b:1e:85:b5:14:d9:4e:
3e:4c:d4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:43 2026 by rpki-client