Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
File: PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft (raw, json)
Hash identifier: i0O/jJvupPtFgYZuOlBqKRN+H6En1ZgRapOztNTta6Q=
Subject key identifier: D9:84:52:2B:00:74:2A:BF:1B:BD:E4:B8:03:0B:72:78:EC:14:82:60
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 019D37C0C18074A4EF3212D38BBE25CD540A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
Manifest number: 07F9
Signing time: Sun 29 Mar 2026 04:01:12 +0000
Manifest this update: Sun 29 Mar 2026 04:01:12 +0000
Manifest next update: Mon 30 Mar 2026 04:01:12 +0000
Files and hashes: 1: PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl (hash: 05tjTcqEHkE4XktCxD/ndu7RprwI5Lam/msVa0V6Tko=)
2: Su7rQOIkS9nuJmSNvRRs1QN_-fM.roa (hash: ns1D9a29tK85IxYV+qzmWGr1+lxPzL7JzPcniXnFQUc=)
3: _YAH5Wjs-niYXnxJmDCsUre1NZc.roa (hash: WWh98cgoSKm41Ou+TSNKw8LXpWW2F2WWcQFTdfkxPLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c1:80:74:a4:ef:32:12:d3:8b:be:25:cd:54:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Mar 29 04:01:12 2026 GMT
Not After : Mar 30 04:01:12 2026 GMT
Subject: CN=d984522b00742abf1bbde4b8030b7278ec148260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:9d:59:31:7a:9f:4a:4e:50:9b:d6:bc:85:
e1:f9:b6:4a:06:5d:39:c8:fa:41:14:5a:b3:9e:9b:
b4:c9:ce:b6:fb:1e:f8:6f:e3:e1:7e:d1:7f:12:52:
ee:7f:51:f1:c8:2e:8d:31:e0:60:ea:e2:eb:1e:69:
e0:e5:0f:b9:f1:ad:f7:bc:6c:1c:dc:ca:f3:ff:9a:
d5:d0:c1:f0:fd:ff:d2:41:02:f8:36:8d:0e:b0:86:
59:b1:d6:80:87:ad:ae:51:33:fe:c3:1b:8c:e0:a4:
9b:68:30:b4:14:76:40:07:ef:ed:c1:59:fa:ff:34:
50:37:37:a7:93:14:eb:db:49:0b:88:86:1f:b7:b9:
f3:c1:fe:6b:ae:75:a8:1a:0b:e8:87:d2:ba:f4:b6:
58:e6:32:5e:b1:8d:51:86:e9:d9:a4:df:b0:b6:a0:
32:cb:1a:aa:d5:0c:97:bf:d1:8b:6b:ae:98:b5:2e:
99:0e:66:92:92:cd:e7:a3:ad:8b:e6:85:13:c1:11:
6c:a1:b7:f8:bd:81:e6:6e:49:d9:28:54:b5:38:08:
f9:21:8a:11:b0:83:a6:bc:fd:5d:bc:71:cd:6d:db:
5f:7d:34:e6:2a:fe:6e:02:35:ea:af:af:80:81:41:
c4:e9:88:72:b5:d9:1c:29:33:41:bd:61:b5:c6:31:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:84:52:2B:00:74:2A:BF:1B:BD:E4:B8:03:0B:72:78:EC:14:82:60
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:73:ab:3f:b5:9a:99:54:72:34:14:d0:9d:5a:7d:26:c9:84:
59:d0:3d:8c:55:ae:0b:8d:c6:6a:d7:fa:49:a5:60:1d:b5:88:
40:29:ca:8a:de:30:d9:32:c1:fc:d7:e8:48:44:cb:5a:66:cb:
c3:29:6a:f6:5e:de:17:f6:9d:17:bf:dd:1f:32:35:21:81:0e:
e7:8a:3a:0d:6e:7a:18:14:55:9e:21:90:1c:19:fa:55:01:ba:
a7:a7:c9:0a:c9:af:cb:97:45:19:0e:e3:9f:0e:36:08:6e:fc:
cb:f7:d5:f8:2a:a7:2e:71:9c:56:cf:41:32:51:30:03:ad:bf:
0f:ef:98:07:6a:33:59:b0:dd:e1:5a:d7:fc:75:4d:9b:e9:7f:
94:12:92:0a:13:b9:4c:87:5a:73:a6:8f:a7:e5:fd:0b:84:09:
d8:78:e2:3e:d1:bb:e5:7f:20:84:6d:a5:8f:80:85:0d:11:e7:
d3:92:e1:15:a4:4b:55:05:da:b3:69:95:80:a6:f5:53:7a:7d:
c4:56:6c:0f:2f:22:5b:8c:07:1b:d6:8e:87:53:24:9f:0e:b0:
97:ad:5b:af:57:64:c5:77:56:4f:36:aa:79:4d:77:9f:e1:9b:
4b:31:61:19:ba:6e:92:c9:82:b7:c6:b0:28:be:d0:5a:86:2f:
1e:ff:a2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:25 2026 by rpki-client