Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
File: Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft (raw, json)
Hash identifier: Fj9xOy5QnX5qJz7TUJBE2Kf6b+2YvI4rpRDVEcpLfPA=
Subject key identifier: 35:39:E7:49:DA:2E:F8:0A:FC:DC:BD:10:C4:B2:A6:60:AC:74:6B:E9
Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Certificate issuer: /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Certificate serial: 019D382DF2E9AF37FF894601CE758C32F814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:28 +0000
Manifest this update: Sun 29 Mar 2026 06:00:28 +0000
Manifest next update: Mon 30 Mar 2026 06:00:28 +0000
Files and hashes: 1: Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl (hash: j9WRFzUMVS2l0aE1PCmhKE69Am+J+sywORZrAZ5M8XY=)
2: cPaYLIOF3VCjmjb4ZY5WFsbWaMY.roa (hash: N1wSv7IKNjHNPgVshCdy+hjLM0GcmgKEhSsoWfHZ7pU=)
3: i0hQjwFxkPTpHyYoOACTdobPX0o.roa (hash: HiHi/d6iXFAJLfNAev9V2WJ5yQo8ek1Ir8HrzJbtcQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f2:e9:af:37:ff:89:46:01:ce:75:8c:32:f8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Validity
Not Before: Mar 29 06:00:28 2026 GMT
Not After : Mar 30 06:00:28 2026 GMT
Subject: CN=3539e749da2ef80afcdcbd10c4b2a660ac746be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:c7:1a:ba:bf:97:13:89:e9:25:b7:8d:ee:
95:1d:62:90:42:af:ab:c6:7f:49:6f:73:42:d9:f2:
08:00:44:47:a9:ba:b4:01:8b:ad:7e:6b:ea:8c:44:
2a:e3:3f:da:51:63:72:6b:c4:43:4f:1a:16:03:3d:
6b:e0:fb:44:5e:eb:81:e7:5e:13:82:60:5f:a7:0f:
bb:b2:1b:15:30:5d:d3:cb:bd:ae:ac:bd:3c:ee:16:
44:35:8e:78:47:03:5b:cd:66:a4:6d:f5:6b:47:d0:
05:c3:53:76:f1:18:28:f5:21:f8:2c:ca:50:05:17:
b5:a2:21:d0:ba:00:2b:91:42:fc:f2:63:0a:fd:7b:
0e:30:3f:4b:0c:ca:c8:55:d0:24:9a:14:04:ae:1f:
b7:9f:22:da:e8:38:68:2d:b3:76:cc:e1:e5:e5:cd:
2b:3f:ef:a1:11:f1:13:a0:48:1b:cd:c0:ac:a8:78:
dd:a5:05:83:e5:13:06:71:76:b1:6d:b4:43:33:3d:
38:11:82:b8:b1:1e:40:5c:e0:5e:e4:3f:0d:79:e8:
6c:ec:9c:50:00:e1:bd:04:fb:65:5d:9a:82:88:b4:
c5:0c:d6:51:27:42:24:7b:60:e9:dc:83:e3:05:4b:
d4:63:c6:c1:45:5f:82:8c:f6:a8:a4:ec:f8:b6:77:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:39:E7:49:DA:2E:F8:0A:FC:DC:BD:10:C4:B2:A6:60:AC:74:6B:E9
X509v3 Authority Key Identifier:
keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f7:87:02:eb:44:53:ff:b2:43:38:de:4a:5e:00:6e:5f:c4:
43:e4:7a:6b:77:be:99:76:07:e4:a1:f5:f6:8a:35:c8:3d:54:
12:c1:7c:50:9c:de:2e:4a:27:ee:57:b9:c8:17:f1:0c:fc:84:
6e:99:cf:d7:ba:c4:eb:12:bd:43:b3:70:b6:80:85:2b:0b:52:
34:8d:14:13:53:e6:d0:ee:22:cb:13:d3:01:95:da:10:f7:40:
30:9e:f6:4a:7f:51:fd:79:d6:40:4b:c7:4c:dd:94:0d:ba:8e:
87:3d:df:a8:d3:69:49:e0:0e:5c:d8:f1:57:0a:b9:98:6a:d6:
a0:13:0a:b0:65:19:a1:2a:76:a9:fa:30:6d:79:41:e6:27:44:
d4:a9:2e:ad:e1:b9:b7:76:ac:e9:03:7c:d2:a7:b0:50:91:c2:
cc:5c:78:2c:cc:4d:8c:e6:57:aa:10:a4:d2:ed:78:94:67:83:
db:fb:1c:ee:5b:75:81:c8:4c:0a:53:e4:40:93:64:ee:56:93:
10:67:35:70:e0:33:2e:07:cb:61:ad:6a:b3:50:f4:a2:73:1e:
70:73:f4:77:9c:d4:9b:ee:9e:a4:f8:9c:ef:84:5c:70:e4:17:
dc:9e:33:e8:b3:11:ff:65:d5:3e:5a:01:92:39:c9:6f:e8:76:
c9:73:25:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:51 2026 by rpki-client