Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier: AXN88pqSy6v8UQGsQqlDdal3fN0LIvqXhzBY4T+T39w=
Subject key identifier: 16:69:1B:DD:CB:13:A4:71:0B:C8:47:79:70:3A:0C:3E:50:06:74:DD
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial: 01A17ADF24543BAECA4FBDFEF751C6F4C4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number: 08C9
Signing time: Tue 27 Oct 2026 01:00:06 +0000
Manifest this update: Tue 27 Oct 2026 01:00:06 +0000
Manifest next update: Wed 28 Oct 2026 01:00:06 +0000
Files and hashes: 1: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: HBfDJZ+69mWIUM/wUI6DhppCUALqDO663xq5vUXXASA=)
2: ymE5Pc8e6QWHOxlrawdscg3hba0.roa (hash: FR/m/K23gzt9WTvqKJ25/MJlgHD/0x10UFRx1gKHX48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:24:54:3b:ae:ca:4f:bd:fe:f7:51:c6:f4:c4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Validity
Not Before: Oct 27 01:00:06 2026 GMT
Not After : Oct 28 01:00:06 2026 GMT
Subject: CN=16691bddcb13a4710bc84779703a0c3e500674dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:dc:1d:94:fb:c1:5f:db:73:3c:1e:c9:dd:
a1:5a:7d:4f:36:06:da:18:e9:7f:78:45:87:a8:7b:
3d:a1:75:2e:aa:61:1f:b5:f1:21:66:19:8b:6c:5f:
96:3f:f9:11:15:d3:dd:9b:81:c2:1b:ea:cb:6d:84:
85:8a:8f:43:ce:84:48:fb:c4:f6:6b:32:06:ee:53:
6e:df:15:40:d4:51:e7:59:e3:fc:bb:9c:7b:0f:3c:
67:99:12:fd:77:28:14:82:9d:a7:ff:af:c1:88:d3:
72:ed:06:31:01:26:0b:e7:8e:f1:b9:a6:02:87:0a:
be:15:d3:51:47:aa:f7:b7:39:15:e2:cc:94:51:cf:
a8:79:24:f1:9e:95:59:3b:6b:8e:5e:cb:7c:53:02:
d4:97:8d:78:da:e5:56:3b:9d:81:4b:a5:7f:72:9e:
17:20:6d:1e:00:cf:91:59:d4:1a:80:e1:68:5b:d1:
bf:ad:71:28:26:59:7a:71:4b:e0:a6:78:79:d9:a2:
7d:60:6e:bf:ec:24:c6:4a:1b:8c:8f:c7:11:ab:e7:
a9:87:11:59:de:5d:e9:85:06:a5:06:98:6d:10:32:
9a:99:20:97:82:09:6e:d6:cc:f4:e6:33:aa:f5:af:
37:c6:4d:bc:0c:5c:ef:24:85:ff:d2:3b:95:60:74:
8e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:69:1B:DD:CB:13:A4:71:0B:C8:47:79:70:3A:0C:3E:50:06:74:DD
X509v3 Authority Key Identifier:
keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3c:ba:f2:ef:5d:f9:c4:63:8f:3a:34:79:f1:34:0c:a2:02:
9e:58:ec:6d:4e:c9:bb:04:f4:de:54:c2:b3:ef:97:06:5b:91:
b9:97:90:e6:4f:08:46:1f:d1:9a:87:23:ca:a7:87:d3:2d:c0:
e6:6c:3d:11:af:44:61:af:b1:97:e5:1b:17:ef:ae:35:21:09:
5e:a3:a8:bc:ef:d7:35:58:7d:9c:d1:16:5c:f1:2b:d6:78:45:
26:26:64:00:6e:79:b7:65:1a:21:d2:f6:42:77:ee:71:8e:3d:
0b:99:e9:09:ef:f6:42:6b:ed:69:5a:31:4e:9a:34:24:b0:fe:
b5:63:69:eb:65:93:9c:45:9f:16:66:e4:53:26:5b:15:03:11:
f1:f0:b8:c7:09:8f:a9:e1:20:e6:9b:b5:ab:16:cc:d1:bd:ed:
d6:c9:09:bd:05:41:32:18:8d:70:4c:4e:fb:92:1b:89:59:71:
1a:d9:71:63:15:21:c7:2a:04:c3:f4:7d:09:4d:e7:40:ec:51:
60:41:db:61:a2:9d:53:65:80:17:ca:88:45:51:bf:1a:19:2d:
3c:e8:f4:3e:34:bc:45:e2:27:12:e7:25:6f:52:e6:87:17:ac:
d7:c2:8a:c1:a6:27:c0:57:67:08:57:23:05:5d:03:cb:28:18:
de:7e:d3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:09:37 2026 by rpki-client