Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: 7VEa5CiY8ek3vlpSZphxgPMb102UfCNw62EgY8LlcE0=
Subject key identifier: D8:9D:F2:0C:03:F8:08:40:1A:87:C4:69:6E:B5:7E:3A:C0:47:69:BA
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 019D3A537AE535A797E37153C1181D297C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 0C73
Signing time: Sun 29 Mar 2026 16:00:42 +0000
Manifest this update: Sun 29 Mar 2026 16:00:42 +0000
Manifest next update: Mon 30 Mar 2026 16:00:42 +0000
Files and hashes: 1: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: jrzkvGNgI6YEe6qmdlnAYsO2T/IxNysGfs5bHWwsOrY=)
2: VTDoK_HiASPo0rKQEESAmloV1uI.roa (hash: j/Uqiho+zYJi7PaZZVvRcMCOVoIn337nTlvuR4KCJ5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:7a:e5:35:a7:97:e3:71:53:c1:18:1d:29:7c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Mar 29 16:00:42 2026 GMT
Not After : Mar 30 16:00:42 2026 GMT
Subject: CN=d89df20c03f808401a87c4696eb57e3ac04769ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:10:7b:85:03:d4:6f:46:31:c2:20:3d:1d:8e:
1d:e8:e0:0a:e6:16:5a:9b:7c:de:d1:60:5c:ce:07:
a5:97:b1:b0:9f:f3:83:f5:1b:91:d7:90:4d:bd:62:
01:9f:db:8c:0c:10:4c:ec:3c:34:13:fb:e6:27:e8:
0d:f1:5b:f4:af:73:1b:6f:6a:cd:2b:fc:55:b7:38:
72:19:8a:eb:7f:6d:95:ee:88:38:44:92:e6:73:14:
e1:5a:a3:73:14:8e:64:97:14:9e:1a:cf:60:6a:cf:
66:1e:be:78:eb:ec:24:fa:5f:aa:a6:65:83:73:f0:
bf:63:80:73:f9:0d:e1:f6:69:91:4a:3f:ee:2f:68:
f8:28:51:29:67:62:e9:1b:70:68:cf:4f:41:00:18:
d4:4b:38:da:1b:9e:87:48:cc:c1:c7:6e:e7:87:a3:
4d:00:51:6e:da:c8:d2:c6:b2:3e:bb:9c:64:5a:2c:
3d:f0:32:a0:ea:39:0f:af:9f:6d:9a:4b:f2:f1:f5:
b3:2c:6c:b2:35:8d:ad:0c:e6:dc:e8:17:15:c5:60:
33:ad:df:de:c4:32:46:a4:c5:62:37:8c:3a:17:b4:
99:75:c9:90:db:a8:be:9c:29:7b:7f:76:51:6a:12:
e6:4f:6e:53:a2:9d:a1:4a:f9:f8:48:eb:7c:df:a2:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9D:F2:0C:03:F8:08:40:1A:87:C4:69:6E:B5:7E:3A:C0:47:69:BA
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d4:f6:4f:20:47:28:60:7d:08:ea:77:12:14:af:20:d8:17:
8b:4f:cc:f1:83:1a:45:77:12:2b:77:46:1f:4a:c5:42:f5:e7:
29:52:c6:b7:62:ce:cd:b4:1e:79:4f:fe:2b:47:51:7a:43:8c:
60:b8:86:8a:58:9e:ef:fa:9a:ad:5b:98:26:3e:fc:bd:7c:6e:
5c:0e:f3:b2:6a:93:97:c8:cf:83:d6:97:cb:4f:52:73:29:8b:
2c:cb:9f:25:32:c2:c5:40:3e:d7:01:ee:06:b6:1f:26:f5:56:
94:38:cd:e3:d9:81:7d:33:11:fa:8c:6d:2b:b1:f0:5a:8c:df:
58:c3:34:cb:59:4a:ac:c2:8e:a5:27:28:aa:91:48:34:11:3c:
62:8f:51:10:9a:29:3f:83:1f:4b:ac:8c:1e:00:77:37:6e:72:
2a:e0:21:36:7c:b4:a8:18:82:ce:ac:e1:9f:64:5b:8f:95:8b:
ce:40:0e:46:21:f5:8d:ec:9c:9c:c6:ba:34:dd:65:a5:67:08:
ed:d3:3f:bf:9a:fc:d2:7a:24:9f:3f:b7:0e:7e:f2:ea:ac:d0:
be:15:dc:eb:2e:af:7f:29:51:e6:bc:c4:37:21:85:45:12:67:
09:7d:74:46:69:82:b7:75:b2:a8:cf:15:21:79:d1:3b:dc:1e:
b6:fa:3a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:27 2026 by rpki-client