Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
File: pcEGAjxJWQSwQKy5l49Po7DF4tw.mft (raw, json)
Hash identifier: 6rl5CIS7dcFC6FpZvJ3tcgr6ez77HeieIBVHbvU/b2c=
Subject key identifier: 04:3B:C2:05:92:DA:45:AA:B8:D9:4E:29:15:CC:D9:33:F8:4A:72:50
Authority key identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
Certificate issuer: /CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Certificate serial: 019D3A1C4912696025B3A849F1214DFFDFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
Manifest number: 06BF
Signing time: Sun 29 Mar 2026 15:00:25 +0000
Manifest this update: Sun 29 Mar 2026 15:00:25 +0000
Manifest next update: Mon 30 Mar 2026 15:00:25 +0000
Files and hashes: 1: 68UPM5ZsmGXwMBAVn_8jUY1Fadg.roa (hash: qNT09TFbUdpw52OzRnw8hL/bLyTOL8P2XrG/BC2dS1I=)
2: pcEGAjxJWQSwQKy5l49Po7DF4tw.crl (hash: U4aVnqRM92iNvCXxRjBIKis7xDRCLub3/Q4IYIPE4o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:49:12:69:60:25:b3:a8:49:f1:21:4d:ff:df:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Validity
Not Before: Mar 29 15:00:25 2026 GMT
Not After : Mar 30 15:00:25 2026 GMT
Subject: CN=043bc20592da45aab8d94e2915ccd933f84a7250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:63:2c:83:6b:e6:22:82:30:69:68:15:9a:
1e:3f:df:23:64:3e:9e:78:a4:a4:b3:bb:00:59:6e:
b6:37:da:07:7a:7f:1b:97:2c:2b:88:db:22:88:5c:
e3:db:cc:38:8c:b5:05:4e:e8:62:37:43:df:7d:e4:
70:69:82:e5:1b:db:a8:02:d8:5e:de:0b:6b:b9:ad:
ec:5c:88:3f:4a:6c:88:3a:f5:ed:aa:aa:da:6e:4e:
a7:6c:64:f1:b4:f7:31:4f:68:35:bd:5b:0d:0f:5b:
a0:f1:33:f0:1e:0e:52:15:d3:d6:19:14:f3:72:23:
38:ed:08:fe:b6:85:b7:11:73:b0:98:d0:89:81:af:
f1:1d:9b:1c:cc:f0:54:46:fa:a6:a9:fb:b7:57:ce:
9c:07:8c:42:b7:77:3c:1e:51:b5:0a:d6:ae:76:93:
a8:82:ba:9f:98:a9:68:58:cd:0b:1e:b1:d8:9d:d9:
17:ce:51:b2:ba:b0:42:0c:c2:5c:3b:96:ef:59:f9:
90:c1:56:40:e1:42:45:f8:d7:0c:bd:a5:cf:aa:2d:
45:6f:1c:0f:e7:54:0e:f6:cb:4e:9d:b0:5a:74:f7:
20:c5:0f:68:4e:07:15:b9:c8:5f:d6:8f:7d:91:a2:
de:cf:a9:c4:c4:20:70:8b:1d:fe:30:13:86:ee:0a:
31:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3B:C2:05:92:DA:45:AA:B8:D9:4E:29:15:CC:D9:33:F8:4A:72:50
X509v3 Authority Key Identifier:
keyid:A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e2:b6:27:b2:7a:30:29:35:e2:fa:0f:9e:7c:fb:30:32:67:
d0:8b:96:a7:e0:8e:20:48:68:1d:0f:80:e8:2c:30:9b:27:67:
14:e5:75:19:80:c1:21:9b:24:35:5c:02:d5:d4:7a:f7:d7:46:
25:25:57:c5:c8:18:b0:d3:5a:05:bc:0f:80:5e:ef:b6:d9:30:
4f:07:30:0d:7a:16:b6:dc:43:62:2d:a1:c7:55:67:79:c3:77:
9f:74:43:76:cd:f4:a3:1f:14:6c:32:41:8d:26:df:df:5f:60:
b2:10:93:32:76:9f:75:de:2e:b5:9f:06:a2:3e:45:84:c3:cb:
04:0f:da:4c:99:3a:0f:d7:75:05:db:36:06:97:51:30:80:40:
88:33:c8:5f:4a:9b:da:55:2a:9d:50:c7:0e:bc:52:71:10:e6:
35:05:a3:80:58:0c:a7:28:ae:12:ed:86:3c:c6:cc:d6:3d:a2:
41:38:0b:d0:39:c6:cd:19:05:b4:51:72:66:0e:d1:3d:8c:fe:
d4:7d:be:3c:9c:eb:df:fc:49:ac:32:44:38:78:bc:f4:09:1a:
1d:a8:ca:d9:d3:47:78:61:f8:cf:06:1c:4c:c9:2f:a1:2f:86:
68:70:ea:9c:c4:81:76:f1:fd:09:cd:58:38:2e:02:dd:9f:82:
97:ca:b0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:52 2026 by rpki-client