Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: /Rgm4c9Ecq1FsBwwVjWNF9dchUjwW4T6mFx3dl8tfWM=
Subject key identifier: 9B:34:90:07:E2:18:78:74:8E:93:91:A6:5F:11:E2:76:63:9C:71:FC
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 01A0E9D223526D66C62D209BB8175DA6D3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 0E5C
Signing time: Mon 28 Sep 2026 21:00:57 +0000
Manifest this update: Mon 28 Sep 2026 21:00:57 +0000
Manifest next update: Tue 29 Sep 2026 21:00:57 +0000
Files and hashes: 1: HorQfQpk5QNI-DQjYDQ0Cwg6x8Y.asa (hash: Z41X+sFeq9LhlSCbZalt/9PoFBU4I0bNyGLpE+EzFcc=)
2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: yMgPlkYFq+ZfbMQKHbOAeqfZpVAnZGn7XH84hyJhYkI=)
3: VTDoK_HiASPo0rKQEESAmloV1uI.roa (hash: j/Uqiho+zYJi7PaZZVvRcMCOVoIn337nTlvuR4KCJ5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:23:52:6d:66:c6:2d:20:9b:b8:17:5d:a6:d3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Sep 28 21:00:57 2026 GMT
Not After : Sep 29 21:00:57 2026 GMT
Subject: CN=9b349007e21878748e9391a65f11e276639c71fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:a6:2a:d8:88:11:44:b0:a7:75:60:dc:4a:
0a:b7:99:81:4b:6e:90:ab:57:f5:54:1a:dc:4c:90:
99:55:55:4f:93:5a:3c:8a:9e:b8:31:6c:b7:5c:9c:
8e:5f:6a:75:ad:c5:6e:fa:b5:7c:d8:98:0c:a0:66:
2e:ca:03:5d:2c:de:80:ee:d6:94:c6:0b:2f:03:9f:
32:cd:6d:57:9f:b8:7f:cf:03:5c:14:44:ec:2d:b9:
68:f7:59:31:a7:8c:68:a2:4d:22:06:7c:c7:93:77:
c5:9f:26:bc:43:bf:71:9e:4a:20:11:9c:c6:ac:04:
87:5c:ba:d4:07:50:99:1a:4a:d7:e1:47:73:74:7b:
3d:ef:2a:63:c7:ac:a3:44:8f:ab:49:f8:c7:61:68:
c9:7e:0b:02:58:6b:63:da:e9:40:0d:2e:cc:94:04:
af:68:46:80:44:7f:63:40:ab:fc:e7:95:2e:6f:e9:
f8:bd:7e:c2:98:80:cc:52:54:06:8f:5d:61:94:6b:
b2:92:34:71:82:df:4d:b0:1a:11:56:ee:e2:01:55:
02:db:26:ff:30:2f:d0:9f:7e:7a:29:2f:ec:46:02:
f1:37:5a:2c:69:a8:85:97:02:33:9d:b1:a0:f3:f1:
fd:01:4b:4a:58:c6:18:c0:9e:82:28:58:38:2a:a4:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:34:90:07:E2:18:78:74:8E:93:91:A6:5F:11:E2:76:63:9C:71:FC
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:03:3f:0f:dd:a1:71:d1:16:49:4a:77:1e:0c:9f:ae:3a:9e:
22:51:ee:3f:63:10:99:0f:0e:3c:29:ac:31:b5:98:73:c6:c3:
7c:e4:ad:b2:1d:ee:52:e2:64:13:85:28:c3:af:51:bb:94:db:
b3:23:73:60:49:3e:a3:09:96:8e:d5:5d:82:56:cc:d7:35:d8:
aa:71:c8:b3:c9:8c:5a:1c:93:f5:0f:b3:3b:6f:4f:96:fe:6c:
5f:e5:f5:f3:1d:d5:90:0d:e9:26:b9:8f:e6:af:50:6c:c4:03:
7c:99:bc:9f:16:02:e8:9c:09:d5:cc:b0:14:40:c8:e8:ca:79:
bc:3f:eb:4a:a9:61:50:ad:9c:c3:de:d0:77:2f:8f:49:6f:a4:
32:44:00:c6:88:b8:1c:0b:fa:9a:ca:c0:57:3f:c7:cf:e3:37:
2e:96:0a:f6:93:c7:df:eb:b1:04:be:e5:97:2a:25:d8:50:58:
b6:51:02:eb:cd:1d:29:9f:b4:79:e0:82:cd:4e:70:47:af:66:
63:fe:8e:d8:f6:2a:e4:f2:f3:99:53:85:9a:c3:24:81:93:23:
fb:0c:71:b2:55:9b:91:a8:18:17:be:fe:1b:3c:1e:34:ff:17:
45:07:27:ef:cf:af:80:2a:04:f2:36:43:44:0d:38:3e:9d:5e:
39:fd:7d:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDp0iNSbWbGLSCbuBddptOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjc0MjQ5NjQwMGQ4MTBiZTViNDA5NmZkZWRlYzMwYTIz
MWY5YWIwHhcNMjYwOTI4MjEwMDU3WhcNMjYwOTI5MjEwMDU3WjAzMTEwLwYDVQQD
Eyg5YjM0OTAwN2UyMTg3ODc0OGU5MzkxYTY1ZjExZTI3NjYzOWM3MWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdWmKtiIEUSwp3Vg3EoKt5mBS26Q
q1f1VBrcTJCZVVVPk1o8ip64MWy3XJyOX2p1rcVu+rV82JgMoGYuygNdLN6A7taU
xgsvA58yzW1Xn7h/zwNcFETsLblo91kxp4xook0iBnzHk3fFnya8Q79xnkogEZzG
rASHXLrUB1CZGkrX4UdzdHs97ypjx6yjRI+rSfjHYWjJfgsCWGtj2ulADS7MlASv
aEaARH9jQKv855Uub+n4vX7CmIDMUlQGj11hlGuykjRxgt9NsBoRVu7iAVUC2yb/
MC/Qn356KS/sRgLxN1osaaiFlwIznbGg8/H9AUtKWMYYwJ6CKFg4KqQ0aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJs0kAfiGHh0jpORpl8R4nZjnHH8MB8GA1UdIwQY
MBaAFD4nQklkANgQvltAlv3t7DCiMfmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUt
MTg0ZGZmMjkyYTMwLzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUtMTg0ZGZmMjkyYTMw
LzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwM/D92h
cdEWSUp3HgyfrjqeIlHuP2MQmQ8OPCmsMbWYc8bDfOStsh3uUuJkE4Uow69Ru5Tb
syNzYEk+owmWjtVdglbM1zXYqnHIs8mMWhyT9Q+zO29Plv5sX+X18x3VkA3pJrmP
5q9QbMQDfJm8nxYC6JwJ1cywFEDI6Mp5vD/rSqlhUK2cw97Qdy+PSW+kMkQAxoi4
HAv6msrAVz/Hz+M3LpYK9pPH3+uxBL7llyol2FBYtlEC680dKZ+0eeCCzU5wR69m
Y/6O2PYq5PLzmVOFmsMkgZMj+wxxslWbkagYF77+GzweNP8XRQcn78+vgCoE8jZD
RA04Pp1eOf198w==
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:12:55 2026 by rpki-client