Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
File: PUx4cBk93824kLZkfMi1bBGW_wg.mft (raw, json)
Hash identifier: 096oe3GOwzMMrMsGO8yr6suJ3gYJTNW4/B04Dj0wGgI=
Subject key identifier: D8:F3:B6:6D:CB:5F:3A:FB:94:CE:0C:59:ED:6F:36:68:47:49:93:97
Authority key identifier: 3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
Certificate issuer: /CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Certificate serial: 019D389BAB1ECE12B8E3654B2830E2851E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
Manifest number: 13E1
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: PUx4cBk93824kLZkfMi1bBGW_wg.crl (hash: rvp6SviNWA29s584fehQYvEvaWXzxCe/o/Cu5AU/L18=)
2: rRKv9CxGyUCT4BR0ojzvLolgqHY.roa (hash: PKrbbfUo5w96wJrjh8BIjySL4ib4nKQRw9UtDNlC4HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ab:1e:ce:12:b8:e3:65:4b:28:30:e2:85:1e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=d8f3b66dcb5f3afb94ce0c59ed6f366847499397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:85:ef:dd:16:2a:06:db:69:a2:f6:0f:e6:
ab:2a:33:b3:91:93:0e:82:36:ad:6e:30:22:ca:cc:
f9:c2:9a:32:f7:56:7e:28:e4:fa:82:bc:99:f2:44:
dd:0a:16:03:78:2e:61:c4:d5:9d:b2:4c:27:af:1c:
b7:ac:e1:6c:99:ec:21:1a:ea:cf:88:6c:69:be:09:
2a:9d:a9:b4:e7:ba:13:d8:e6:60:f5:e2:cf:42:28:
44:6a:88:fa:7b:a0:da:98:92:bb:de:6f:46:c8:ef:
18:b4:fa:37:c6:85:9f:0d:4b:44:cf:78:f5:e6:96:
5b:7a:76:3a:65:82:a0:2c:c5:e6:03:5a:21:58:ed:
3a:c1:f1:d6:cc:be:67:cf:c8:fa:09:b3:8b:9c:a1:
65:58:68:9d:15:8b:cf:e2:e8:95:4f:f5:d5:42:b8:
72:e8:a7:c0:30:ca:48:82:a0:b4:e0:5a:d0:95:a0:
20:44:6c:51:1d:b0:de:e4:1a:c4:f3:66:15:03:eb:
78:42:28:ea:77:39:47:0f:77:12:0f:df:43:35:90:
a9:1c:22:57:48:98:c7:e4:83:7e:65:a8:b1:1d:12:
34:0e:6a:c0:5e:99:b1:4e:07:57:c1:fc:21:55:78:
86:a4:65:fc:59:34:78:79:0c:b6:87:18:d5:ba:91:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F3:B6:6D:CB:5F:3A:FB:94:CE:0C:59:ED:6F:36:68:47:49:93:97
X509v3 Authority Key Identifier:
keyid:3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a4:72:f6:24:20:ef:99:5a:d3:68:24:b5:34:5d:bd:24:d0:
01:6a:51:cd:0e:73:0c:43:15:05:6d:4c:d1:b7:db:ba:5b:91:
be:66:f9:4c:1f:06:23:bd:55:6d:40:95:af:8b:0b:91:d8:7b:
0a:e0:15:9c:80:15:14:4c:88:ca:62:62:68:bc:96:fe:3c:f6:
0f:da:b1:e6:c1:2a:93:5a:80:0f:44:30:d0:e3:cb:c5:94:4f:
fc:ad:6d:fd:82:33:d7:65:ea:c9:60:cb:30:84:6b:6d:c1:a7:
d9:cb:1c:74:89:1c:98:08:0c:ec:25:c9:1f:8c:85:77:45:a3:
9f:63:ef:5c:dd:13:09:0c:92:48:f3:41:d3:f0:30:7f:2b:95:
73:7a:bc:e2:ff:74:8a:e9:d3:79:73:00:f5:39:e3:83:56:eb:
cb:94:10:53:05:ae:42:7b:22:0c:0e:20:e9:d9:12:8d:dc:48:
3e:ce:14:75:80:3b:9a:35:02:68:10:40:9c:61:9b:51:0c:59:
4d:92:84:94:e0:f6:c5:e8:12:d5:bf:00:31:3f:94:b0:28:6a:
84:03:55:b7:c9:31:49:27:c2:61:5c:07:e6:0c:96:fd:e7:a6:
27:6d:04:f4:6b:af:e3:02:18:6f:f6:03:18:90:27:5d:fd:0c:
ba:7f:e4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:00 2026 by rpki-client