Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f265f5-83c0-4155-8009-d03834558f2c/1/PaWedu6PeZCdw2lMmoU504Psgws.mft
File: PaWedu6PeZCdw2lMmoU504Psgws.mft (raw, json)
Hash identifier: 8RqKd2WOhYiMCp28XByJR1bcaNtoz0XY/xiPSKUGHOE=
Subject key identifier: 6D:1F:FC:2A:76:2C:4B:D9:12:E9:7B:B1:F6:81:D4:E1:A2:83:8C:07
Authority key identifier: 3D:A5:9E:76:EE:8F:79:90:9D:C3:69:4C:9A:85:39:D3:83:EC:83:0B
Certificate issuer: /CN=3da59e76ee8f79909dc3694c9a8539d383ec830b
Certificate serial: 019D39098DA70D039D35005F26C6A790120D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaWedu6PeZCdw2lMmoU504Psgws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f265f5-83c0-4155-8009-d03834558f2c/1/PaWedu6PeZCdw2lMmoU504Psgws.mft
Manifest number: CA
Signing time: Sun 29 Mar 2026 10:00:20 +0000
Manifest this update: Sun 29 Mar 2026 10:00:20 +0000
Manifest next update: Mon 30 Mar 2026 10:00:20 +0000
Files and hashes: 1: PaWedu6PeZCdw2lMmoU504Psgws.crl (hash: WHsQ2v4fzMAiQMiFwEC7iDVrZiE02s5RCXbrNMibe7k=)
2: wl-AAhVVhWvtdovU9mg259dWJpg.roa (hash: wqWUpo2k9/ZcdbHlkdu5rR8nTaIDwLNuX9nKSfsHr1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f265f5-83c0-4155-8009-d03834558f2c/1/PaWedu6PeZCdw2lMmoU504Psgws.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f265f5-83c0-4155-8009-d03834558f2c/1/PaWedu6PeZCdw2lMmoU504Psgws.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaWedu6PeZCdw2lMmoU504Psgws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:8d:a7:0d:03:9d:35:00:5f:26:c6:a7:90:12:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da59e76ee8f79909dc3694c9a8539d383ec830b
Validity
Not Before: Mar 29 10:00:20 2026 GMT
Not After : Mar 30 10:00:20 2026 GMT
Subject: CN=6d1ffc2a762c4bd912e97bb1f681d4e1a2838c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:26:8e:38:d2:7e:ac:8b:3a:6f:40:d7:74:
28:be:f8:60:45:f7:c3:20:8d:92:e2:a9:52:a3:53:
10:a7:74:df:b5:8c:6c:a5:32:81:26:22:9a:63:6e:
35:17:67:72:89:c1:75:be:6b:34:f7:8f:53:14:c7:
7d:f4:ba:25:d2:d7:85:ff:e0:b4:9a:31:76:63:ac:
9b:cf:1f:30:a5:56:be:5e:23:ee:0a:6e:95:61:62:
be:dd:b5:fd:2d:10:7b:d1:17:fe:03:ce:54:1d:79:
be:4d:10:1d:26:2b:e7:7a:3c:1f:5a:03:0a:09:c0:
aa:6d:ca:74:00:f1:08:85:a8:ae:ee:4f:42:e3:df:
1e:72:51:4e:3a:c3:0f:08:45:f1:a9:95:b2:d9:13:
0f:09:70:a2:3d:c5:3c:c8:1e:be:ef:11:0b:e1:98:
96:1f:8b:b1:d6:a7:e6:dc:04:22:f1:3d:ae:6f:6e:
4c:50:52:4c:e6:77:7b:85:1c:45:62:33:89:29:0e:
f4:95:13:2d:51:9c:ff:7d:fc:a9:7e:6e:53:45:75:
a3:ca:2b:b2:d3:a3:4a:43:5a:50:b7:fa:ce:00:66:
73:4b:9a:b0:bf:1e:d3:54:22:c6:37:b6:cd:a2:3f:
c8:b4:9a:99:88:60:59:b4:5c:79:51:a0:7e:80:e2:
56:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1F:FC:2A:76:2C:4B:D9:12:E9:7B:B1:F6:81:D4:E1:A2:83:8C:07
X509v3 Authority Key Identifier:
keyid:3D:A5:9E:76:EE:8F:79:90:9D:C3:69:4C:9A:85:39:D3:83:EC:83:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaWedu6PeZCdw2lMmoU504Psgws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f265f5-83c0-4155-8009-d03834558f2c/1/PaWedu6PeZCdw2lMmoU504Psgws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f265f5-83c0-4155-8009-d03834558f2c/1/PaWedu6PeZCdw2lMmoU504Psgws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:81:6d:61:74:a0:ad:f0:4c:ab:c6:08:15:e3:38:44:83:29:
2d:3a:a7:2c:b0:47:39:f0:d5:d1:b2:59:df:b7:0d:08:ce:2e:
6f:fa:f7:34:96:d1:f2:9b:12:f0:bf:85:01:97:29:4f:4e:4a:
fb:76:8f:28:a0:e4:85:c7:db:4b:d4:5c:2f:5f:5b:49:8c:9d:
32:54:47:20:c3:01:b0:7f:1d:ce:81:7b:4d:a5:96:7f:ab:b8:
9a:10:f9:9d:bc:60:c5:f9:2c:78:24:9f:49:ef:cd:39:31:64:
cd:67:f2:dc:78:68:b5:aa:56:fe:21:90:fa:97:b9:b5:0f:44:
b1:57:76:ae:0e:29:fd:c8:30:64:1f:7c:55:5c:e4:35:4b:ba:
95:c7:de:06:c8:68:68:91:50:fd:55:5d:b3:3c:c4:4a:3d:31:
80:95:45:60:64:f4:ba:74:4d:43:1c:3b:f8:95:18:4b:6b:19:
ce:d6:2f:43:68:44:1d:c5:d0:42:19:27:dd:31:5b:76:07:aa:
34:18:c8:80:32:1b:11:66:8b:42:08:f4:dc:be:21:46:37:03:
82:09:85:23:5f:66:c1:76:02:b3:4d:33:37:e7:02:e3:5d:f7:
3f:77:15:04:d6:03:fd:52:ac:ab:54:85:02:cd:24:17:5d:1f:
f1:28:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:38 2026 by rpki-client