
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/86354e-944a-4afb-9ba0-daa8d7331afe/1/pW5U_-dMt-WgLr0lbOlCWvNuORE.mft
File: pW5U_-dMt-WgLr0lbOlCWvNuORE.mft (raw, json)
Hash identifier: 8dyXYdnSqarkkQL3TPGd2f5XmqO0Y91gSkkQls3P/v0=
Subject key identifier: 30:1F:1F:3E:1A:F3:29:61:5D:FB:81:B6:A4:FE:41:46:F8:A6:80:86
Authority key identifier: A5:6E:54:FF:E7:4C:B7:E5:A0:2E:BD:25:6C:E9:42:5A:F3:6E:39:11
Certificate issuer: /CN=a56e54ffe74cb7e5a02ebd256ce9425af36e3911
Certificate serial: 01A165345BA424D5D8F15792B53876F0F3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW5U_-dMt-WgLr0lbOlCWvNuORE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/86354e-944a-4afb-9ba0-daa8d7331afe/1/pW5U_-dMt-WgLr0lbOlCWvNuORE.mft
Manifest number: 3E
Signing time: Thu 22 Oct 2026 20:01:32 +0000
Manifest this update: Thu 22 Oct 2026 20:01:32 +0000
Manifest next update: Fri 23 Oct 2026 20:01:32 +0000
Files and hashes: 1: Rek38BUj6o-PMKkRWcWjHQiSf-s.roa (hash: Gid9Zvjlv/bFEx26YcemrtJTOgUIaBBwxfGZVGoiiUs=)
2: pW5U_-dMt-WgLr0lbOlCWvNuORE.crl (hash: igzKrUfP4DR5nQXEmlg1D0qymuow1epLq4L+hhKmz8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/86354e-944a-4afb-9ba0-daa8d7331afe/1/pW5U_-dMt-WgLr0lbOlCWvNuORE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/86354e-944a-4afb-9ba0-daa8d7331afe/1/pW5U_-dMt-WgLr0lbOlCWvNuORE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW5U_-dMt-WgLr0lbOlCWvNuORE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 20:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:34:5b:a4:24:d5:d8:f1:57:92:b5:38:76:f0:f3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e54ffe74cb7e5a02ebd256ce9425af36e3911
Validity
Not Before: Oct 22 20:01:32 2026 GMT
Not After : Oct 23 20:01:32 2026 GMT
Subject: CN=301f1f3e1af329615dfb81b6a4fe4146f8a68086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:dc:99:b9:5b:e1:68:2f:75:c8:0e:f2:6d:
c5:6b:1c:82:a6:ef:a2:7f:47:3a:64:e0:29:89:db:
54:f2:1a:fc:b1:da:8c:d3:f2:20:e2:84:e7:ef:91:
a7:32:d6:bc:2c:e9:d6:ed:bb:59:81:b4:98:66:41:
19:01:03:78:52:cf:a0:5c:a9:be:df:28:8f:4d:9d:
f1:46:3c:ee:4d:bc:7d:71:94:85:47:10:33:54:17:
70:9c:62:7e:dd:81:b8:47:83:8c:93:1f:c0:24:33:
95:8c:85:3a:a5:ee:58:8d:dd:31:ea:dd:f7:7e:8c:
5f:c0:34:46:30:b3:61:7a:f3:fa:49:56:b7:a7:e9:
56:c0:0c:1f:e4:d9:29:98:ea:02:b7:5b:5e:75:2e:
ef:bd:fb:4e:3b:a1:03:ca:e1:d5:dd:a6:0d:87:8f:
9f:09:23:c9:9a:36:2b:e7:66:ee:82:5c:68:f1:75:
04:97:e2:49:d8:9c:c1:a7:33:01:91:21:f3:1a:60:
15:07:66:27:64:c4:b7:93:2e:ff:c8:f0:e5:5a:72:
c8:30:86:4c:5c:9e:a5:46:4a:78:b2:9e:61:94:9e:
cb:87:e2:6d:e6:8f:4f:d5:be:02:2b:c3:07:7e:1d:
e1:ea:37:cc:a3:88:84:cf:08:9f:fb:59:94:64:51:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1F:1F:3E:1A:F3:29:61:5D:FB:81:B6:A4:FE:41:46:F8:A6:80:86
X509v3 Authority Key Identifier:
keyid:A5:6E:54:FF:E7:4C:B7:E5:A0:2E:BD:25:6C:E9:42:5A:F3:6E:39:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW5U_-dMt-WgLr0lbOlCWvNuORE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/86354e-944a-4afb-9ba0-daa8d7331afe/1/pW5U_-dMt-WgLr0lbOlCWvNuORE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/86354e-944a-4afb-9ba0-daa8d7331afe/1/pW5U_-dMt-WgLr0lbOlCWvNuORE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7b:b7:0e:74:d4:7c:f2:3b:20:08:fd:2f:36:2d:12:b4:19:
e6:c4:38:63:c2:78:5b:9c:4e:d5:2a:e2:c1:55:d1:33:9a:3f:
83:a3:41:ff:60:32:a4:fc:cd:a4:1b:9c:79:8e:70:6e:46:be:
96:1b:ab:0f:69:2d:63:36:07:0e:1a:97:f3:89:1e:46:5e:bd:
f2:ac:17:e6:6a:45:7b:12:b8:70:da:5c:b4:3f:0c:b0:20:a2:
f8:ca:60:6f:58:9b:33:79:45:d8:94:aa:9d:ea:4f:67:63:a4:
d4:a8:a7:34:05:50:db:0f:a0:20:da:fb:6c:da:e6:cb:04:26:
4f:33:4a:b3:2f:3a:53:0f:a7:3b:bb:7f:7b:60:40:4f:fc:d8:
49:5a:ff:2a:77:22:9a:b5:2e:eb:9d:cf:21:68:f7:c9:f8:85:
3b:ee:95:eb:0d:f6:d5:46:5f:0b:36:0e:af:23:1c:29:7f:34:
5c:b0:9d:f1:dc:60:d9:b3:0d:16:39:c9:98:49:e0:c4:f0:26:
13:98:07:b6:d2:d0:cb:68:72:ee:97:7c:32:ef:5a:ed:c6:86:
e4:e5:72:63:74:fe:8a:b0:e0:19:a2:84:c0:cf:85:a1:97:6a:
40:bf:e5:4c:ee:07:3c:00:7b:5c:59:55:9b:6c:05:18:1b:81:
11:e4:9e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:02:32 2026 by rpki-client