Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: ERMhgdr6av1e/7lowZxlrkYkmpvRNfRuSEFiYp5veOU=
Subject key identifier: 20:05:20:B4:49:CE:C3:3B:1E:3F:80:75:AB:A2:4B:ED:B3:2F:6D:53
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 01A0E7E46D777190640BDD4DD54DC0F050DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 0E5B
Signing time: Mon 28 Sep 2026 12:01:42 +0000
Manifest this update: Mon 28 Sep 2026 12:01:42 +0000
Manifest next update: Tue 29 Sep 2026 12:01:42 +0000
Files and hashes: 1: HorQfQpk5QNI-DQjYDQ0Cwg6x8Y.asa (hash: Z41X+sFeq9LhlSCbZalt/9PoFBU4I0bNyGLpE+EzFcc=)
2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: zwUCIq1f2SOH+3iv5UktHhxP9uahNUdVb1IpyRsZLbs=)
3: VTDoK_HiASPo0rKQEESAmloV1uI.roa (hash: j/Uqiho+zYJi7PaZZVvRcMCOVoIn337nTlvuR4KCJ5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e4:6d:77:71:90:64:0b:dd:4d:d5:4d:c0:f0:50:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Sep 28 12:01:42 2026 GMT
Not After : Sep 29 12:01:42 2026 GMT
Subject: CN=200520b449cec33b1e3f8075aba24bedb32f6d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:e2:e1:57:c2:8f:5e:72:3e:f5:5e:cb:27:
6f:e7:34:89:50:e2:99:bd:d4:e6:4a:73:94:5a:49:
96:5b:22:c3:2b:e0:a1:6c:9a:7b:69:13:aa:c1:c8:
9c:39:70:b8:4a:f2:ab:bd:eb:37:85:00:4a:e3:d1:
5d:0a:40:6c:59:79:1a:50:72:ea:d7:3e:70:01:dc:
f4:13:1f:bf:31:b9:44:1a:28:2c:e0:1d:d5:e3:99:
55:66:67:0a:c2:d5:5c:20:6b:ad:04:61:26:26:21:
40:dc:a3:06:fc:71:76:1c:a8:30:f3:28:a7:f1:1a:
4b:6e:b9:c1:4d:53:5e:66:22:87:27:4e:61:b2:53:
e3:c9:39:2a:60:35:b5:5f:89:60:68:a5:76:d7:a8:
d4:92:2a:9f:a7:6f:40:21:8d:a9:ed:ff:90:e8:a9:
10:e0:0b:92:39:63:88:db:e8:bb:b6:d5:15:cc:c5:
fc:33:d5:28:af:7f:86:ff:f5:79:44:51:8f:58:b8:
1a:69:29:cc:b1:48:37:bd:d3:5e:ef:b4:08:4b:f8:
9f:b1:a3:17:8f:32:a0:b7:08:da:77:c3:08:84:a4:
ec:4f:f8:f2:bc:78:f9:af:35:9b:64:a1:23:a2:89:
08:fe:b0:1d:6f:41:9d:04:5d:92:ae:31:66:fa:00:
aa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:05:20:B4:49:CE:C3:3B:1E:3F:80:75:AB:A2:4B:ED:B3:2F:6D:53
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f4:ba:73:a3:f2:82:09:7a:d1:92:f6:a3:44:c1:61:b5:01:
ac:39:b7:0b:ab:93:3f:0b:fa:54:49:59:e9:44:a1:15:ca:68:
19:7c:f5:2b:64:41:1d:c5:18:d3:78:2a:70:9b:9c:57:f3:4f:
bc:23:9c:66:d9:e8:29:f7:00:0e:48:0a:25:0b:dc:fd:8a:63:
76:bd:81:7d:f2:fa:b8:59:ff:a2:2e:97:f3:bf:93:ae:98:ec:
3d:34:ff:28:19:0f:5d:fe:88:0d:6b:44:28:f5:17:5c:17:70:
69:6d:4b:4d:c6:5b:96:e7:46:e3:0b:e5:05:f6:ea:66:d6:42:
92:fb:33:3e:6e:23:44:83:11:50:47:22:37:54:76:c5:64:b8:
fe:ac:41:76:c8:92:7f:8c:67:36:4a:8c:24:3a:96:3f:ed:d9:
fa:90:9e:cf:3b:0c:46:0d:84:77:02:95:58:dc:d3:2a:d1:ef:
3e:0b:31:d2:d2:00:14:43:dd:2c:6c:c3:8d:1e:37:f2:44:01:
68:61:32:f8:bc:e9:7a:da:16:2b:c3:91:83:8a:c0:50:7f:98:
e4:16:05:19:95:b3:5e:fd:d6:09:0e:38:22:59:77:2f:80:b6:
01:ab:b3:1e:d2:0c:9a:04:70:fa:64:90:fa:76:df:0f:a7:a9:
de:bb:f3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:29:56 2026 by rpki-client