Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
File: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json)
Hash identifier: Uc3FmoEr++gkH+oW0Nk7ORO/TWBjjggUIisCuWnodks=
Subject key identifier: 4F:2C:DB:C6:CB:B4:FA:23:D3:3C:88:6C:6F:FB:48:ED:40:99:B7:0F
Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
Certificate issuer: /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Certificate serial: 019D39413F16850262FA1DA78050C6D08EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:01:10 +0000
Manifest this update: Sun 29 Mar 2026 11:01:10 +0000
Manifest next update: Mon 30 Mar 2026 11:01:10 +0000
Files and hashes: 1: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: uwQQ/mCR0J/LwAZOuYg9yJJpV3J8WfCk/8G1c39bskE=)
2: ZIfLwvSvOdji3MtHcGgMuSoqhAQ.roa (hash: JIFRgTtvZClZWs/BH3CyPh0KvLINAkB1ip40YGPLcQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3f:16:85:02:62:fa:1d:a7:80:50:c6:d0:8e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Validity
Not Before: Mar 29 11:01:10 2026 GMT
Not After : Mar 30 11:01:10 2026 GMT
Subject: CN=4f2cdbc6cbb4fa23d33c886c6ffb48ed4099b70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:47:bc:c3:1c:58:db:43:8a:b1:ab:85:a3:09:
25:79:12:79:ed:c2:6e:e2:dc:6e:5d:9d:fc:78:cf:
b6:24:6d:f6:81:fb:43:71:d6:81:42:c0:a0:a1:c8:
e3:1c:47:65:89:e8:c6:05:8f:fc:ca:be:1c:88:61:
43:12:9a:02:e7:25:63:17:52:ff:73:ca:2c:79:5f:
04:da:3f:7a:54:fc:77:a5:cb:ad:55:6b:34:d9:87:
ec:be:ae:8e:90:ab:bd:f7:eb:06:9b:88:48:f8:9a:
33:76:0d:98:d9:ea:ca:e1:c2:06:3b:ce:bd:9a:d1:
21:b0:0c:fa:da:db:82:16:02:70:96:5a:15:aa:e6:
0c:71:7f:b0:b2:7a:fa:f7:b8:24:53:37:f8:86:9e:
ff:64:9f:8e:bd:f5:f7:49:cc:22:c2:3f:a6:7a:31:
80:3d:3d:61:23:8f:92:c2:fa:7b:0a:2b:b9:62:97:
16:7a:a3:9b:03:fd:a7:18:b3:ff:96:6e:31:96:45:
cf:72:7a:43:c3:2e:4b:9f:0c:ad:07:ca:fc:f9:5d:
41:44:ac:5b:0d:7d:55:c9:a4:b6:f0:18:06:19:b1:
b2:9b:3d:f5:1d:54:08:d3:f8:28:5f:f3:b3:36:78:
37:85:a7:4a:c9:ad:6e:a1:84:37:b5:99:d1:8e:28:
76:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2C:DB:C6:CB:B4:FA:23:D3:3C:88:6C:6F:FB:48:ED:40:99:B7:0F
X509v3 Authority Key Identifier:
keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0a:40:5e:bb:1d:04:0c:04:f7:4a:b4:51:21:f8:45:9b:d5:
5b:ab:f3:6e:d0:5c:ca:34:3e:42:9b:2c:01:9a:df:89:83:27:
eb:fc:77:88:98:3f:a7:7f:b2:e6:72:d2:67:d6:c1:6e:86:2a:
93:d5:16:b3:c7:16:11:1e:15:c6:25:f8:8a:5f:c3:1e:8b:be:
68:70:f6:64:c8:57:3a:7e:d3:fc:6d:5f:86:22:73:e6:15:59:
f8:5f:55:4d:80:82:36:5b:18:62:95:71:df:b5:1f:ff:1e:fb:
11:a8:ea:fd:6a:3f:e0:39:d5:3d:99:77:c0:16:d0:7c:fd:3e:
3d:f4:02:6a:48:12:88:05:ae:12:81:5d:23:6b:42:27:da:f6:
2c:57:78:c3:86:67:a8:40:18:77:21:ec:29:0c:c4:e8:ca:ef:
2d:22:79:a3:a0:cf:7d:7e:e4:4f:e2:c7:c5:81:d0:28:12:c3:
58:3b:fb:ce:d4:6f:41:89:0b:1f:fb:9c:85:d6:df:29:fe:87:
f0:b5:23:b8:de:7b:e1:e3:28:8d:75:cf:ae:1c:04:a9:1f:e0:
32:a2:f6:d8:da:47:01:68:85:b3:9a:e9:c4:e7:97:a5:11:0c:
ff:51:bf:df:b8:58:18:fe:03:32:ea:36:7a:f6:1f:31:de:08:
d2:75:b9:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QT8WhQJi+h2ngFDG0I7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTVhMWRkMGNlZTg3NGMwNmUxZWExZjcyODI3ZDk3Y2Jj
NjcxODcwHhcNMjYwMzI5MTEwMTEwWhcNMjYwMzMwMTEwMTEwWjAzMTEwLwYDVQQD
Eyg0ZjJjZGJjNmNiYjRmYTIzZDMzYzg4NmM2ZmZiNDhlZDQwOTliNzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ue8wxxY20OKsauFowkleRJ57cJu
4txuXZ38eM+2JG32gftDcdaBQsCgocjjHEdliejGBY/8yr4ciGFDEpoC5yVjF1L/
c8oseV8E2j96VPx3pcutVWs02Yfsvq6OkKu99+sGm4hI+Jozdg2Y2erK4cIGO869
mtEhsAz62tuCFgJwlloVquYMcX+wsnr697gkUzf4hp7/ZJ+OvfX3Scwiwj+mejGA
PT1hI4+Swvp7Ciu5YpcWeqObA/2nGLP/lm4xlkXPcnpDwy5LnwytB8r8+V1BRKxb
DX1VyaS28BgGGbGymz31HVQI0/goX/OzNng3hadKya1uoYQ3tZnRjih2FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8s28bLtPoj0zyIbG/7SO1AmbcPMB8GA1UdIwQY
MBaAFD7lod0M7odMBuHqH3KCfZfLxnGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVXaDNRenVoMHdHNGVvZmNvSjlsOHZHY1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NWZmZDktMTlkMy00NTE3LThjNDct
YzYxNjYxZDFiNzFiLzEvUHVXaDNRenVoMHdHNGVvZmNvSjlsOHZHY1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny85NWZmZDktMTlkMy00NTE3LThjNDctYzYxNjYxZDFiNzFi
LzEvUHVXaDNRenVoMHdHNGVvZmNvSjlsOHZHY1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQpAXrsd
BAwE90q0USH4RZvVW6vzbtBcyjQ+QpssAZrfiYMn6/x3iJg/p3+y5nLSZ9bBboYq
k9UWs8cWER4VxiX4il/DHou+aHD2ZMhXOn7T/G1fhiJz5hVZ+F9VTYCCNlsYYpVx
37Uf/x77Eajq/Wo/4DnVPZl3wBbQfP0+PfQCakgSiAWuEoFdI2tCJ9r2LFd4w4Zn
qEAYdyHsKQzE6MrvLSJ5o6DPfX7kT+LHxYHQKBLDWDv7ztRvQYkLH/uchdbfKf6H
8LUjuN574eMojXXPrhwEqR/gMqL22NpHAWiFs5rpxOeXpREM/1G/37hYGP4DMuo2
evYfMd4I0nW5jg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:04 2026 by rpki-client