Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
File: pCNxKB3-GQctEzndBIKyqvrVQs4.mft (raw, json)
Hash identifier: 4BkMZywBj9j5p72dWuT5otSIi8cDKqs2vO2aIEMi+JI=
Subject key identifier: F8:19:FC:F9:9D:EB:D3:DA:BE:27:54:19:C5:04:F7:91:B6:8C:8A:C9
Authority key identifier: A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
Certificate issuer: /CN=a42371281dfe19072d1339dd0482b2aafad542ce
Certificate serial: 01A18186E985062D9D07D24B67D682C50998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
Manifest number: 0DA3
Signing time: Wed 28 Oct 2026 08:01:04 +0000
Manifest this update: Wed 28 Oct 2026 08:01:04 +0000
Manifest next update: Thu 29 Oct 2026 08:01:04 +0000
Files and hashes: 1: 5-fSRldHA_TyCo0Af_n4H7VHHoo.roa (hash: n/VVjN3d2+A+fBj8+Kv149bG42PjdEV7GiSsjv6L+Uw=)
2: JjXi4XbAnV9bj8nE6_XGuu1V074.asa (hash: O90Cg0AUX3YziSsowsx54UsgUbqTnyh9MTtkhA73QD8=)
3: pCNxKB3-GQctEzndBIKyqvrVQs4.crl (hash: Yqt6ZG9yVyCo40l3Ud4PUbrdEkJGx2K9OdWcVbQl3HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:86:e9:85:06:2d:9d:07:d2:4b:67:d6:82:c5:09:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42371281dfe19072d1339dd0482b2aafad542ce
Validity
Not Before: Oct 28 08:01:04 2026 GMT
Not After : Oct 29 08:01:04 2026 GMT
Subject: CN=f819fcf99debd3dabe275419c504f791b68c8ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:80:47:16:47:7b:82:e2:d0:73:bb:dd:82:
54:94:1f:a5:0b:bb:53:dc:8d:8b:19:32:55:4e:f2:
e5:e8:2f:b7:2b:c9:33:a7:3d:81:91:7b:e6:2a:8a:
e6:3c:66:be:c5:14:59:21:f1:1b:f1:c7:dd:1f:97:
ed:93:0f:6a:92:93:67:55:a2:c5:a6:93:a1:4c:1d:
d5:98:e0:be:a0:f8:53:6e:c8:16:d9:d7:34:90:c6:
17:a9:00:63:c6:71:8f:b4:b6:f7:ef:4b:86:63:c3:
7f:df:06:94:f3:6a:ec:35:2a:2f:d2:20:45:35:49:
0f:ae:76:2a:4b:42:89:f8:09:05:a8:5a:be:c6:f6:
8f:a2:70:81:32:3c:18:69:fa:ae:d0:de:6a:1c:45:
d6:cd:7d:6f:bb:40:4b:a1:8b:6a:d0:69:7e:83:ac:
a9:0e:bf:ad:03:b2:5c:21:4e:12:1d:a6:b9:3d:be:
7f:9c:9f:62:ff:8c:ca:67:80:04:6b:e7:85:8a:d2:
a7:ac:3c:6a:14:9f:a2:dc:37:9f:01:34:d0:a3:cf:
a8:2b:85:88:8a:da:52:44:8a:7e:c5:e2:3a:0a:70:
45:b0:ed:d1:cc:d3:49:8e:94:3d:0f:01:97:2c:69:
99:42:89:cf:f2:56:50:a7:45:08:d9:fc:f9:ac:e9:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:19:FC:F9:9D:EB:D3:DA:BE:27:54:19:C5:04:F7:91:B6:8C:8A:C9
X509v3 Authority Key Identifier:
keyid:A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2e:17:69:d9:a2:99:3e:fe:11:87:3a:04:d5:82:06:44:15:
c0:38:85:b6:ea:b8:ae:c7:d8:3f:e2:88:44:84:f4:c3:18:20:
e3:f8:2f:8c:35:93:8c:3d:97:ee:3c:37:3c:ed:c5:7a:c8:a4:
42:c6:81:f3:df:cf:fb:b5:00:f8:26:0c:ef:04:d4:cb:08:be:
33:8f:72:75:73:f4:7d:95:3d:aa:d8:de:c1:50:d4:fc:60:84:
55:b8:bc:41:9c:98:94:83:f3:05:b5:21:05:38:f5:65:2b:62:
a8:d0:c9:30:13:0c:58:78:b2:c0:f1:60:08:67:c2:86:14:04:
67:4f:c9:28:cc:65:1b:78:9f:61:0a:a3:1d:15:9f:61:d8:42:
2c:63:e3:58:5f:c6:f1:b7:f0:e7:6a:bb:10:d5:c6:d3:11:88:
e3:28:7d:b6:a5:38:8a:c4:ce:1b:b6:51:81:e3:c8:b3:45:2f:
6c:1f:2f:38:eb:2e:89:e7:d8:c2:28:97:7e:ff:cc:28:5b:14:
1d:a2:17:08:5f:ca:ff:f0:a7:5a:ad:2e:a6:98:d8:d1:ed:69:
24:c9:9c:36:1c:a3:0f:f2:c9:db:1f:a3:e2:16:42:6b:f6:2f:
e8:3d:fe:d7:fa:e3:fd:ed:ef:3c:13:c0:d4:25:55:e2:2d:77:
35:f1:d1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:37:04 2026 by rpki-client