Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
File: pcatcQWg6X4ZLw6I5mgYq2D33sg.mft (raw, json)
Hash identifier: ugRhjExo0Qu6ifMcHkJ8UU8QeUtbaygZZv4bz2tdDRM=
Subject key identifier: 2D:01:FD:F7:12:10:5F:B1:AC:E9:CA:B0:0F:AC:3B:EF:6E:BC:0D:A6
Authority key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
Certificate issuer: /CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Certificate serial: 019D3A53F37267634F836247FA10A35942A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 16:01:13 +0000
Manifest this update: Sun 29 Mar 2026 16:01:13 +0000
Manifest next update: Mon 30 Mar 2026 16:01:13 +0000
Files and hashes: 1: pcatcQWg6X4ZLw6I5mgYq2D33sg.crl (hash: cMcAmst80IBWCsUo2A136Pi7Cm7J5WCettA/G7agGoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:f3:72:67:63:4f:83:62:47:fa:10:a3:59:42:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Validity
Not Before: Mar 29 16:01:13 2026 GMT
Not After : Mar 30 16:01:13 2026 GMT
Subject: CN=2d01fdf712105fb1ace9cab00fac3bef6ebc0da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:87:01:b3:a6:96:3b:6e:42:3c:30:cc:9b:
3f:84:62:1d:58:c3:5b:e0:0c:d4:e8:eb:0d:78:c4:
f0:0e:ef:8c:92:a2:37:1c:85:b7:7a:b2:20:87:fb:
35:b2:1a:63:7a:c3:e3:96:6b:f5:6f:f5:a3:f7:b9:
01:d9:ef:b6:b1:ce:b6:26:48:18:88:0f:3d:13:11:
30:f4:09:0b:0e:b6:e8:a1:ce:ff:7e:60:06:f3:b4:
81:84:2a:8b:43:62:58:48:f7:8e:de:8a:4b:cc:96:
99:74:3b:7e:99:81:0b:ee:93:a3:6a:65:9c:a8:fd:
0f:d4:4e:9d:a9:47:55:6f:31:ec:6d:a1:e6:31:c4:
a3:ab:83:46:61:1b:67:77:8b:9f:94:a4:b4:71:0c:
3e:6b:8a:52:0f:5b:ee:bb:73:13:1a:46:fb:26:74:
de:78:06:11:9d:8c:ed:72:6c:eb:f6:3c:18:23:91:
b3:2a:a4:2a:4a:8b:7f:76:1b:ca:b9:9d:82:2d:c4:
15:8a:91:00:14:59:b6:d0:1a:3f:04:ab:ed:be:3b:
13:6e:e1:2e:a2:15:d7:a4:be:7d:7d:73:8d:74:21:
d7:78:6d:20:56:f6:f0:6f:c4:d2:31:e6:30:eb:78:
ad:f5:2e:67:5f:99:77:28:b7:31:97:9d:5e:84:59:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:01:FD:F7:12:10:5F:B1:AC:E9:CA:B0:0F:AC:3B:EF:6E:BC:0D:A6
X509v3 Authority Key Identifier:
keyid:A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0d:ff:a0:15:34:a9:94:f6:53:7a:64:8d:e9:11:03:d5:d1:
87:09:01:3b:54:e7:c8:da:d3:bd:18:f0:9f:55:2a:32:29:b1:
5a:10:e4:ed:04:27:4d:cf:78:4f:d7:ab:4b:8f:cb:63:ef:1b:
a8:32:de:b2:98:e9:99:42:dd:c0:93:58:c0:0f:f3:74:d4:75:
82:2a:38:c6:96:a6:f4:0b:d9:e9:cd:71:cc:46:22:0a:80:f5:
6b:1a:17:27:b4:7a:53:43:65:db:92:9c:f2:e9:7b:29:ad:a7:
6d:4e:1b:7c:3c:f1:4c:8e:01:69:11:39:67:99:1b:c3:f8:90:
c2:04:c5:a9:0e:42:63:1d:8e:62:44:1e:f5:31:e4:4d:67:e0:
d8:9a:51:64:45:cf:1c:fb:ed:42:72:d0:48:55:ec:d1:a5:73:
5d:eb:94:37:75:d3:0a:02:78:a9:75:99:12:6b:54:f8:fd:e3:
ca:24:cc:42:0d:9a:4b:20:d3:f0:4e:7a:66:7a:65:c7:2e:66:
c6:39:d6:5e:a8:87:ea:bd:b4:8e:ad:95:e9:c2:7c:17:03:b9:
c3:da:9d:3e:f2:88:e2:92:7e:60:30:b5:6c:36:2a:f5:71:75:
5e:1c:ec:34:9f:c4:f1:cb:f6:a3:c3:72:44:f1:c4:38:1e:8a:
db:f0:9d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:12 2026 by rpki-client