Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
File: pcUihESYJRJgyNqrvCxeGp6PNf4.mft (raw, json)
Hash identifier: rgHtho3oXuKTucteRHonaRbHPq3M1WzBVdYjk8Ox43k=
Subject key identifier: B7:A6:0D:AB:BC:86:A5:0E:93:9F:4B:DB:56:73:FB:F8:3A:C0:42:42
Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Certificate serial: 019D29CE6B0A662B42E8D383D7C18D5B4EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
Manifest number: 0F3E
Signing time: Thu 26 Mar 2026 11:01:26 +0000
Manifest this update: Thu 26 Mar 2026 11:01:26 +0000
Manifest next update: Fri 27 Mar 2026 11:01:26 +0000
Files and hashes: 1: O2hU27KH2d4j4F6MkJ9zQIyNQYw.roa (hash: egY9v9VhomtCqKUAhtFNXeEfGC4c0KX5IFzLFUNn2xY=)
2: pcUihESYJRJgyNqrvCxeGp6PNf4.crl (hash: 3C9Nssr0VbWaCl0JMVp3AxJ8P4KkqgZn0iArOwCo1ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:6b:0a:66:2b:42:e8:d3:83:d7:c1:8d:5b:4e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Validity
Not Before: Mar 26 11:01:26 2026 GMT
Not After : Mar 27 11:01:26 2026 GMT
Subject: CN=b7a60dabbc86a50e939f4bdb5673fbf83ac04242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:97:d5:fc:b0:91:7c:31:53:a5:9f:52:d3:
de:60:53:49:31:08:4e:d2:ae:17:45:59:d6:59:0b:
56:9a:60:c2:c1:48:5a:1a:90:7d:ab:ba:90:1a:51:
4b:bf:54:05:47:63:5d:19:8b:a4:3f:7c:aa:6d:6d:
ef:a7:0b:d8:db:d0:fe:ca:71:80:e3:7f:df:24:61:
b5:db:d4:2f:a4:13:78:aa:cb:81:1a:0a:c9:4f:1d:
8f:78:df:67:79:8d:fd:49:f2:f3:9d:81:e6:6e:86:
a7:d8:4d:7e:17:ef:22:19:44:1a:d0:8e:f4:43:d3:
c7:0d:89:52:ef:d1:57:a7:4b:ab:bd:be:b6:ac:73:
e6:5e:69:c0:22:66:5a:96:7f:94:ae:4f:bd:26:d4:
f5:6d:f0:9b:e2:dd:4c:20:76:8a:2d:5a:c5:fb:41:
1e:23:3e:af:93:9a:8d:48:03:96:89:5f:a2:0f:6a:
f2:d4:52:24:9d:5c:80:f5:99:72:65:71:ab:7f:1b:
3e:b0:90:16:54:c4:bd:cf:df:26:fa:b4:20:91:f3:
7d:fb:e7:c4:dc:eb:a0:4f:2a:61:2e:69:08:bb:97:
f3:0e:97:74:63:8e:2e:c0:4d:82:86:c1:d4:6c:bc:
3b:4a:67:5d:11:cd:19:dc:f7:4f:1c:25:17:25:b5:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A6:0D:AB:BC:86:A5:0E:93:9F:4B:DB:56:73:FB:F8:3A:C0:42:42
X509v3 Authority Key Identifier:
keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:75:8e:7a:36:79:d0:00:ca:bc:36:1a:03:53:aa:a0:1d:e7:
ab:5e:cf:39:65:31:73:51:ea:55:a9:0d:6e:0b:49:58:34:95:
de:89:38:5f:4e:49:1d:7e:5b:7f:67:45:b1:5f:c7:89:ef:08:
8e:5d:aa:c7:73:ff:83:42:6f:02:48:a3:1f:b8:9d:a5:56:17:
4f:a8:77:30:05:4e:05:01:33:9a:58:e8:26:6f:56:a8:2d:d2:
16:49:e0:3b:69:61:10:91:3e:12:64:94:59:e4:8d:cd:40:11:
ee:0d:06:d5:e3:9a:e6:e1:6e:8a:22:6b:cf:24:31:86:55:d5:
90:ac:16:df:8e:9c:a9:da:9c:e1:b1:3c:20:a4:34:aa:7a:79:
30:84:a9:a2:a5:44:e9:d0:46:be:18:57:05:e8:e5:62:d3:41:
7b:45:4d:12:3c:05:36:46:98:34:7b:c4:09:84:18:47:a0:d5:
54:ca:bc:bf:d6:59:0c:16:b6:af:e5:62:b6:0d:0e:76:d3:10:
0a:d2:41:65:0b:88:2b:a9:e7:94:e5:b6:1b:f3:e6:62:2a:8d:
a6:a9:93:ab:11:77:1c:24:b8:f5:b1:bc:45:23:e9:5a:93:e2:
6a:6f:44:ac:2e:63:06:d7:2d:4e:22:56:a3:63:ab:cc:b6:a7:
a0:7a:6f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:42 2026 by rpki-client