Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: BmvupaFnuMUMRYIAzTGO4+jd09YlUCXYgFtsb/Tb/LY=
Subject key identifier: D3:75:FB:96:8A:66:B5:93:4C:7D:D0:B5:12:7A:30:FB:C4:DB:75:32
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 019EDDD406B1ABED38AFF1FF723F92CF53D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 0B0F
Signing time: Fri 19 Jun 2026 03:02:00 +0000
Manifest this update: Fri 19 Jun 2026 03:02:00 +0000
Manifest next update: Sat 20 Jun 2026 03:02:00 +0000
Files and hashes: 1: 6s7VJQ13Euo-HJYqzPD9JI6QUXk.roa (hash: c+rLw+JU62jWbBeFYHNNvYoEQUH8aS1cBJs7Rsqiv5Y=)
2: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: EbbzOoVv34v4xmyhAlNoZuyGHKZ9mfAFDK6Y4Ep3gtk=)
3: l-eytLgQDESo3Q7U-g8ESB5Ei54.asa (hash: aE0YUeBi5ASRfymXp9SI39+Z6VBwaz/uCSaMfvjqWkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:d4:06:b1:ab:ed:38:af:f1:ff:72:3f:92:cf:53:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Jun 19 03:02:00 2026 GMT
Not After : Jun 20 03:02:00 2026 GMT
Subject: CN=d375fb968a66b5934c7dd0b5127a30fbc4db7532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:7c:43:af:f4:8e:d6:75:7a:33:bf:b3:fd:
ed:c7:78:79:26:c5:60:35:cd:b7:e6:42:c1:64:fa:
5b:78:54:66:cc:21:7e:3b:a8:c0:7b:eb:92:cf:11:
8e:9f:41:18:a6:b1:65:87:82:54:44:bb:5c:e7:ee:
45:c3:ba:02:f6:19:57:e3:b9:a0:bb:c7:39:db:b8:
fb:be:68:31:30:87:24:82:1a:c2:78:54:38:85:0c:
e1:03:a0:bd:74:40:4b:3a:19:49:96:f5:fe:fb:4e:
07:b1:af:a0:c4:f6:e7:73:9d:81:c9:44:9e:41:79:
ef:f5:13:31:7e:c2:23:10:ba:83:c7:22:d0:ae:38:
dc:51:91:51:0e:50:b0:f4:7d:42:b0:24:14:e4:40:
ab:2b:6a:61:9f:f6:4f:2b:f4:65:89:f6:ee:82:e2:
22:e2:72:d1:fe:29:b5:c2:8a:0b:e2:07:f2:1e:71:
22:f8:a1:03:aa:64:9e:df:0e:aa:c0:18:68:d9:8b:
5d:5f:93:57:60:f8:fd:79:2f:6e:d9:cc:8b:0f:40:
9b:90:6f:4f:fb:45:43:6e:cc:85:6b:35:90:d0:93:
ea:1d:bf:aa:59:58:6a:a3:16:43:89:be:a2:7b:f9:
05:da:98:f4:9f:cf:6d:be:5d:96:b8:e4:60:fb:b2:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:75:FB:96:8A:66:B5:93:4C:7D:D0:B5:12:7A:30:FB:C4:DB:75:32
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7d:1d:64:9d:51:e1:0f:ea:22:b6:1a:11:5e:69:9c:bb:10:
ae:30:21:b0:1c:b8:17:90:26:29:68:b7:2b:af:d0:13:53:5d:
39:cd:ba:15:71:1e:82:96:24:07:7f:99:1c:5b:e9:bd:ee:3f:
ea:fa:7c:6b:a7:57:76:ec:3c:b3:b3:83:6d:8a:d2:8f:ed:fd:
9a:19:ed:9b:00:9a:ba:ef:18:75:86:06:64:48:1b:79:fa:9f:
1c:48:ee:b2:28:9f:2e:c2:18:f0:6b:77:2e:82:9a:dc:d2:d1:
e0:01:ab:3f:fb:73:05:09:5c:73:64:11:b4:13:5d:d0:17:05:
29:8a:a4:dc:0e:6d:49:a4:db:de:4d:44:3c:ff:69:fe:9d:3b:
6c:df:68:01:91:ab:ff:9c:7d:8c:d8:20:54:87:53:43:0f:57:
61:b0:1b:5e:66:01:b6:38:cf:48:d8:7b:95:ac:29:5d:a6:1b:
eb:7a:c9:66:8c:1e:72:d5:c1:21:c7:5e:bf:0d:ef:08:f1:8f:
68:30:f5:f1:56:ac:b9:ff:86:17:e0:80:d6:1e:c6:18:e4:39:
b2:47:4d:14:f0:d8:c4:a1:14:58:3a:08:b2:a1:de:2c:10:5e:
d4:41:cc:66:c8:41:f9:cb:cf:10:30:0e:ad:e1:7b:f9:ae:a4:
5e:cc:54:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:16:39 2026 by rpki-client