Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
File: pcatcQWg6X4ZLw6I5mgYq2D33sg.mft (raw, json)
Hash identifier: m0aVMKQdWHX5J2rF+w7oDboDQIfLb9k4g19gUP1XOjw=
Subject key identifier: CA:CA:CC:4B:68:D8:F0:D0:F1:B7:B5:46:D0:3C:4E:ED:98:10:0B:91
Authority key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
Certificate issuer: /CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Certificate serial: 01A181508069E400B86C1CE0033285766DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
Manifest number: 1AC3
Signing time: Wed 28 Oct 2026 07:01:38 +0000
Manifest this update: Wed 28 Oct 2026 07:01:38 +0000
Manifest next update: Thu 29 Oct 2026 07:01:38 +0000
Files and hashes: 1: pcatcQWg6X4ZLw6I5mgYq2D33sg.crl (hash: 8c1J7XfX5L4lHpq9d95fCssK6tVVRGTdJ1aSxDhV+Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:80:69:e4:00:b8:6c:1c:e0:03:32:85:76:6d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Validity
Not Before: Oct 28 07:01:38 2026 GMT
Not After : Oct 29 07:01:38 2026 GMT
Subject: CN=cacacc4b68d8f0d0f1b7b546d03c4eed98100b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:9d:c1:74:c3:65:5c:c1:ec:8b:bd:59:a8:
98:e5:04:24:03:c9:03:36:d0:0d:6a:26:98:a2:63:
a9:c4:95:ca:b7:31:05:e6:fb:2a:52:d4:23:84:87:
74:f4:d5:6c:42:3e:11:c6:30:d0:a3:57:61:79:bc:
18:89:db:24:3a:cf:a7:03:85:c6:b7:b8:89:43:b4:
4e:e6:0e:f3:48:ea:89:f1:e7:06:e9:1c:7f:76:48:
07:02:24:5f:74:0a:51:c8:27:fc:e6:f9:88:b2:db:
b8:0a:0f:da:17:4d:df:0a:04:51:4e:c6:29:51:b6:
99:9d:a2:66:77:4f:20:ea:5f:7a:55:7c:1e:06:6c:
95:1b:3e:64:65:00:48:14:5e:57:b4:3a:d4:2d:a2:
f2:30:6a:c7:c7:3a:04:16:42:1e:2a:18:e4:06:0d:
1d:6a:10:1f:6b:15:4b:c0:70:55:a6:58:65:4b:58:
a2:47:b5:45:7a:a2:6e:96:ed:93:e4:35:d0:19:ec:
08:06:80:33:18:28:19:14:b3:2f:62:33:4d:79:95:
f4:32:6a:87:81:f4:5c:f3:11:18:96:6a:c4:82:7a:
cc:1c:41:78:dc:b0:75:76:d5:cf:13:75:b6:b9:7e:
fb:6b:4f:3c:e0:f8:76:03:75:47:2f:16:22:e1:a9:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CA:CC:4B:68:D8:F0:D0:F1:B7:B5:46:D0:3C:4E:ED:98:10:0B:91
X509v3 Authority Key Identifier:
keyid:A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5b:03:e5:6f:db:33:f4:d6:05:02:84:58:8c:9d:62:c1:98:
a8:f1:e6:4b:d6:4e:65:df:f1:e8:06:5b:04:8a:25:29:af:76:
a3:c4:a6:c3:e2:31:2b:8d:3b:2e:a2:f2:07:7c:c4:1d:26:9f:
4f:e7:02:2a:2b:b8:a3:e5:ab:0b:fe:82:1e:20:24:94:8e:63:
13:97:2e:e8:47:75:a3:68:94:ab:ec:f3:04:4b:89:25:e7:0e:
3a:d9:fd:6d:ab:d9:70:75:be:1e:ff:71:e1:3a:64:a6:35:ef:
08:c1:20:15:01:59:3a:ed:3c:46:be:e6:83:49:e8:81:92:62:
ab:c2:5f:e4:d3:44:d7:b8:e4:5e:aa:7e:f5:c0:6b:a9:7a:75:
5a:47:d9:0f:e9:ed:cc:6c:c4:fa:2d:61:5a:a0:2d:b1:04:78:
9b:5e:c1:70:63:dd:31:f8:4e:d4:8c:43:ab:9d:0e:35:5b:87:
97:a8:1a:af:6f:64:02:53:ab:7d:f3:72:6f:fc:da:e8:fe:6d:
f1:1a:59:c8:a7:18:b4:a5:ac:cb:b8:59:7b:1e:99:9c:99:ea:
01:26:cd:82:1c:52:d1:65:d4:4c:68:3a:f5:65:9a:06:1a:e5:
cc:a9:75:bb:c2:22:d1:5f:14:f6:75:0e:2f:97:f6:de:84:6b:
74:cf:be:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:30:46 2026 by rpki-client