Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: INZ+Lq8nSvY0jDYSHrh8mEanAn5sSe22YQpVdi+Vqr4=
Subject key identifier: E1:66:61:20:19:43:B4:CB:31:39:3D:3F:CE:DA:6F:D7:0B:F8:8E:8D
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 019CFFF6497277723E7B1582297889243501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 0A17
Signing time: Wed 18 Mar 2026 08:00:56 +0000
Manifest this update: Wed 18 Mar 2026 08:00:56 +0000
Manifest next update: Thu 19 Mar 2026 08:00:56 +0000
Files and hashes: 1: 6s7VJQ13Euo-HJYqzPD9JI6QUXk.roa (hash: c+rLw+JU62jWbBeFYHNNvYoEQUH8aS1cBJs7Rsqiv5Y=)
2: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: Q0OZJIySRd4jcXMDaQ22JImyYWALGb4K8G7/YYXmCXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ff:f6:49:72:77:72:3e:7b:15:82:29:78:89:24:35:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Mar 18 08:00:56 2026 GMT
Not After : Mar 19 08:00:56 2026 GMT
Subject: CN=e16661201943b4cb31393d3fceda6fd70bf88e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:d1:17:a9:48:e7:1a:d0:6d:6a:d9:ac:68:
dd:25:90:5a:03:9f:e2:d7:19:fe:ad:15:a3:2d:d2:
e7:ff:f2:cf:a7:c4:ff:a2:1d:cc:15:13:32:43:33:
b9:00:b1:cd:fe:52:77:00:5a:ab:c3:99:46:1f:62:
09:64:d9:d8:76:e6:d3:62:bf:86:8e:92:27:9a:45:
da:64:ac:cc:36:73:42:67:f8:02:30:1f:f7:67:2c:
53:bd:26:36:37:aa:e6:2f:a4:1e:f9:3c:54:b1:ac:
ef:6b:dd:51:3c:06:3d:ef:42:5f:e7:00:dc:64:27:
4b:d7:ab:63:29:6f:f2:cf:4d:c3:69:a7:0f:54:99:
3a:a6:a0:5d:1e:0a:b5:2e:47:a2:59:81:a9:37:e8:
62:d2:4e:23:90:23:f2:77:62:53:1a:6a:de:2f:68:
a7:a6:c9:1c:03:24:09:a7:d0:52:4b:68:3a:68:49:
95:1c:04:1b:78:43:93:11:b2:a8:5e:7d:b1:b4:7c:
4b:49:50:f4:0b:5d:d1:6e:b1:81:10:09:4e:49:e2:
4e:0b:98:98:bc:d8:18:9f:ba:2c:9d:56:18:da:1a:
5f:1d:9a:6f:8e:e3:73:89:66:e3:a8:8f:be:c2:25:
6d:05:ac:9b:30:93:9d:c6:bc:e6:33:d6:5f:80:99:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:66:61:20:19:43:B4:CB:31:39:3D:3F:CE:DA:6F:D7:0B:F8:8E:8D
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:72:3d:9e:87:c0:d1:ff:de:41:02:30:c7:95:de:8a:cb:5a:
83:a8:86:40:f9:09:a2:69:62:62:50:bd:ac:0a:66:65:5d:48:
a8:d3:f0:7a:dd:4f:5d:7d:85:51:64:9c:ed:e6:8a:95:68:c7:
e0:08:80:dd:25:4f:62:e3:e3:91:a5:f9:05:78:b5:b0:a8:92:
7f:b3:64:79:ab:68:e3:b2:a7:71:78:d3:59:0d:89:fe:bf:b7:
77:3c:4d:f9:9e:9d:e2:5d:50:9e:a6:ca:81:74:f0:f9:33:ea:
78:53:7d:93:4a:3d:e8:87:51:62:7c:8b:2f:ab:44:a4:04:29:
be:bd:76:61:c5:37:09:52:8e:f4:b7:f9:f1:12:a3:13:8b:12:
fa:ce:db:1c:f0:5f:a5:fb:60:42:de:87:7a:1d:9f:f7:5f:d1:
d4:1b:c0:c6:f6:95:c3:8e:91:65:1b:31:77:13:3b:5d:aa:fc:
a2:0d:9b:86:62:e1:80:3e:d0:57:8a:4d:69:45:0f:c7:a0:68:
43:73:30:cf:f0:73:6b:7f:dd:64:61:8f:89:93:d1:3e:14:52:
94:19:45:d5:ab:0a:bb:c8:c2:c3:22:b5:4e:d7:de:e7:91:3b:
01:13:e3:3a:cc:43:43:b4:73:db:f7:00:bd:7a:3d:bb:80:53:
15:0d:8d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 16:28:56 2026 by rpki-client