Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: RkOUJSTMep/rbnjPWyaGeVm1GsuQ+lzueB7Q9FEYhOA=
Subject key identifier: 91:B5:56:94:2B:D5:2C:52:81:59:CE:6B:ED:9F:44:EF:DF:A2:BA:FA
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 01A116E104668AF65E191DB84B60E94DA453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 1A95
Signing time: Wed 07 Oct 2026 15:00:07 +0000
Manifest this update: Wed 07 Oct 2026 15:00:07 +0000
Manifest next update: Thu 08 Oct 2026 15:00:07 +0000
Files and hashes: 1: OxD51mZyUSy88WgP3TSafX3fVSM.roa (hash: ZUvDT5JmZoKJbZ2aaD6n8DqRqPOQ2yLOsnmhPBma0XE=)
2: Rqp6q80V5Lqgy6fApQicG0uIkYM.roa (hash: MiTXHdLJkzTFAdsQjyFK17euaeb3+FVSMfPmJuUxhJ8=)
3: lM0ykYh8wCH6poD1ByzZO951DOs.roa (hash: O0xjxg/OZFV2+IIvgGtT77zr81ND+/n3L2jks1YfEO4=)
4: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: Y01vWgBUmsoqv65ucSSe/5AgTqJhq7wPw2MtI6x0Q4Q=)
5: tVTj2VfcWC8MlPPtw5H08Ah033c.roa (hash: vnVztEiFiRrUOyK2US2Elxv/6sJ52wKVTB11SJJl2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:e1:04:66:8a:f6:5e:19:1d:b8:4b:60:e9:4d:a4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Oct 7 15:00:07 2026 GMT
Not After : Oct 8 15:00:07 2026 GMT
Subject: CN=91b556942bd52c528159ce6bed9f44efdfa2bafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:4e:6f:5a:00:dd:fe:30:b0:dc:35:06:25:
ef:04:86:ea:83:6a:7d:0c:50:67:38:45:7a:04:f4:
e6:81:00:9c:91:61:9e:02:98:d9:17:6b:53:ea:ff:
81:9b:e0:40:d2:24:9f:0a:d1:b1:f0:ce:c1:c6:df:
68:e3:93:07:5a:88:65:3d:c2:64:34:44:71:e2:d6:
5f:64:8c:2c:05:cc:9c:a6:67:bd:68:42:fc:fb:28:
02:14:2e:c3:55:ba:af:86:d0:a1:e4:c6:d6:ab:ce:
1d:d4:bc:66:61:7b:f4:15:20:7a:70:9d:50:7a:2b:
76:55:bd:c4:aa:91:8f:5d:64:be:c7:4e:11:5a:d6:
a7:8d:96:9f:3e:28:80:4e:71:c0:0d:49:6e:b7:a0:
73:fd:8b:15:13:da:7c:d6:ff:40:ee:fc:11:3c:a9:
c8:b6:41:ad:8b:08:0c:ec:7b:ac:6a:2c:a4:72:84:
86:33:0c:d3:91:b1:fd:b5:14:00:09:6c:d0:3d:19:
11:23:21:e9:bd:c8:c6:d4:98:d5:79:a9:b3:36:90:
ce:2a:63:88:d7:69:2f:a8:b6:93:2c:96:0b:b3:34:
c1:95:12:c6:f3:be:02:31:d8:27:1d:2b:aa:3d:82:
70:ad:ba:ab:36:d6:14:26:68:ef:2e:63:76:2a:57:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B5:56:94:2B:D5:2C:52:81:59:CE:6B:ED:9F:44:EF:DF:A2:BA:FA
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f0:12:0e:ce:47:04:c8:43:65:3a:86:4f:40:cf:27:55:03:
16:f9:e2:24:67:41:60:e8:3a:a1:33:a4:53:9f:b6:22:e0:4a:
9a:36:aa:4b:ec:6c:9a:95:31:c9:60:dd:92:d8:cd:b8:0b:4c:
c8:de:c5:e8:a2:7f:81:83:7a:5a:c5:dd:ce:b0:16:01:c4:fd:
9b:4c:94:cc:7d:4e:e2:a8:f2:5f:6c:f5:d7:3b:9f:16:eb:7d:
24:76:e6:77:fb:73:16:ac:54:fc:8c:97:7c:3a:13:c1:92:2c:
c4:c4:64:a5:17:40:b2:82:40:f9:9c:d9:41:ed:07:96:24:11:
dd:9a:3b:22:28:41:f6:1c:06:aa:d1:7f:59:8a:d8:ba:7f:a6:
d6:b7:1e:a1:bb:b9:50:24:d6:bb:ed:c5:7c:fe:e7:fe:ea:ae:
1a:0d:5b:d9:6f:4c:a8:c4:ad:63:3c:97:55:3d:66:87:fb:31:
b2:30:68:b6:8a:aa:52:8c:58:c1:d1:39:dc:fc:e7:26:bb:c1:
4b:0f:d4:68:f8:50:c2:2d:03:5b:05:07:08:f0:f3:d4:5a:6e:
46:c5:fe:f7:a3:16:c3:07:9f:d3:8a:b8:9d:15:c6:1d:e3:e8:
39:45:b9:24:72:4d:a0:0d:b3:2f:b1:65:aa:39:06:f0:3e:ff:
e7:17:58:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 18:44:08 2026 by rpki-client