Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
File: PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft (raw, json)
Hash identifier: 6R0H3/2c8wJkJprB2OcO+Rbpd7gApcC4rYPQTRxPkRI=
Subject key identifier: AE:93:6D:A1:5A:CD:36:95:1B:1E:71:8D:1C:A4:4D:9D:E9:6C:75:87
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial: 019D39AF4B8DCF6930CBC0F1CEAFF45107F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:01:22 +0000
Manifest this update: Sun 29 Mar 2026 13:01:22 +0000
Manifest next update: Mon 30 Mar 2026 13:01:22 +0000
Files and hashes: 1: PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl (hash: kcjGKwd7P+NkQ5i8IWHIhCg96tTRJqQA8eb9H2syZYw=)
2: yAETyxqCIBgHtRNroe6hgJM7AvA.roa (hash: /0cKih93DWtvFY7DowMlTChYQqnFT+3gH96BNNkgjiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:4b:8d:cf:69:30:cb:c0:f1:ce:af:f4:51:07:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Validity
Not Before: Mar 29 13:01:22 2026 GMT
Not After : Mar 30 13:01:22 2026 GMT
Subject: CN=ae936da15acd36951b1e718d1ca44d9de96c7587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:4c:93:9f:67:ad:72:3c:09:7d:b6:dd:93:
df:48:1a:a9:08:8b:23:75:a1:1b:7f:02:51:d8:66:
66:36:3b:0c:0f:48:01:6e:c7:02:d1:3e:82:db:a7:
78:ef:e5:a8:d0:6d:29:7e:2f:c9:f9:ab:b2:e3:4c:
30:72:62:56:38:58:a5:8a:7a:60:25:72:7f:d8:9f:
2a:94:c4:00:84:79:df:14:db:69:03:83:f4:99:d0:
d8:c1:54:75:af:45:9f:cf:27:5f:52:16:2f:54:27:
3a:09:19:cc:ca:f9:d3:0f:d0:6c:06:f5:21:eb:3e:
36:9e:7a:50:f8:42:62:b3:3e:2e:98:8c:4d:99:ca:
6c:60:84:a1:aa:83:dc:e0:a5:6b:87:a6:5d:0c:f2:
5d:db:e3:97:20:c8:28:d4:53:d5:3e:77:f7:ea:b3:
90:fc:58:d3:fb:70:98:37:8a:01:ae:49:a3:4c:c4:
35:db:e3:c3:5b:c3:8d:ff:ef:13:25:d1:1e:66:d9:
86:0a:63:80:b0:bb:93:5a:9b:48:4c:80:8a:7d:a7:
58:94:21:87:99:2a:b2:9b:bc:21:4a:8a:b4:c9:f6:
63:b4:26:16:52:43:c4:4b:5a:1c:ac:c0:ba:f0:e2:
05:3c:06:4d:e1:01:2d:a1:40:51:de:74:44:1c:05:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:93:6D:A1:5A:CD:36:95:1B:1E:71:8D:1C:A4:4D:9D:E9:6C:75:87
X509v3 Authority Key Identifier:
keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0e:1d:29:4e:30:23:b6:10:38:ee:c5:f9:2f:23:7a:4f:fc:
8e:10:a5:b2:dc:7f:d2:e3:be:55:c1:73:1a:0a:b8:ef:af:23:
44:60:ab:3c:60:e3:cf:db:6c:95:4e:73:16:9e:77:d5:0e:15:
f8:cd:e7:f2:a5:e3:04:0d:82:a6:eb:59:7d:80:9c:1c:ca:f3:
da:65:45:b2:61:85:49:c5:83:b1:1c:92:40:50:18:87:0c:a3:
31:2a:d3:0d:31:09:11:f6:e5:9d:36:f7:62:51:d2:55:f7:19:
ed:a8:6c:9f:f0:48:e1:f6:a3:05:26:57:93:ba:db:21:9b:24:
6a:cc:83:04:7a:5a:c6:27:6e:71:6a:aa:e3:bc:53:48:f0:46:
aa:83:75:71:b5:d8:93:00:2b:85:36:85:6e:d0:1e:32:e2:24:
b2:3b:8a:dd:6a:c6:b4:ad:f2:df:9a:02:36:91:f0:7c:ef:47:
54:51:3d:fc:af:8c:a5:80:ca:b3:63:8a:8d:e8:39:af:1f:d9:
2e:3a:91:ba:a8:83:35:1c:c4:95:2a:f0:2a:91:2c:9e:f8:9e:
31:e1:cf:be:2e:93:e8:98:87:07:c9:eb:53:0c:3a:1d:97:a6:
44:63:46:e2:7c:47:8f:4e:63:8e:d6:d2:0b:31:a3:6d:44:8a:
cc:ac:d7:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05r0uNz2kwy8Dxzq/0UQfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMDU4ZTQzMmJiZjcyMzY5NzUwYTk5NTFkNTI1OTQzMGI1
Y2E0YmYwHhcNMjYwMzI5MTMwMTIyWhcNMjYwMzMwMTMwMTIyWjAzMTEwLwYDVQQD
EyhhZTkzNmRhMTVhY2QzNjk1MWIxZTcxOGQxY2E0NGQ5ZGU5NmM3NTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiRMk59nrXI8CX223ZPfSBqpCIsj
daEbfwJR2GZmNjsMD0gBbscC0T6C26d47+Wo0G0pfi/J+auy40wwcmJWOFilinpg
JXJ/2J8qlMQAhHnfFNtpA4P0mdDYwVR1r0WfzydfUhYvVCc6CRnMyvnTD9BsBvUh
6z42nnpQ+EJisz4umIxNmcpsYIShqoPc4KVrh6ZdDPJd2+OXIMgo1FPVPnf36rOQ
/FjT+3CYN4oBrkmjTMQ12+PDW8ON/+8TJdEeZtmGCmOAsLuTWptITICKfadYlCGH
mSqym7whSoq0yfZjtCYWUkPES1ocrMC68OIFPAZN4QEtoUBR3nREHAWA9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6TbaFazTaVGx5xjRykTZ3pbHWHMB8GA1UdIwQY
MBaAFD8FjkMrv3I2l1CplR1SWUMLXKS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMt
MDAwMDgyYzEyM2U3LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMtMDAwMDgyYzEyM2U3
LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATA4dKU4w
I7YQOO7F+S8jek/8jhClstx/0uO+VcFzGgq4768jRGCrPGDjz9tslU5zFp531Q4V
+M3n8qXjBA2CputZfYCcHMrz2mVFsmGFScWDsRySQFAYhwyjMSrTDTEJEfblnTb3
YlHSVfcZ7ahsn/BI4fajBSZXk7rbIZskasyDBHpaxiducWqq47xTSPBGqoN1cbXY
kwArhTaFbtAeMuIksjuK3WrGtK3y35oCNpHwfO9HVFE9/K+MpYDKs2OKjeg5rx/Z
LjqRuqiDNRzElSrwKpEsnvieMeHPvi6T6JiHB8nrUww6HZemRGNG4nxHj05jjtbS
CzGjbUSKzKzX+Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:51 2026 by rpki-client