Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
File: PwbJ3z-o-T2e8O0EscoENduLxlA.mft (raw, json)
Hash identifier: 69rDAezm89it4JYQeR6PhFFeSFlPIs7UeCV6v0ADkIo=
Subject key identifier: A6:8F:45:7F:FA:D0:00:43:DF:71:99:1B:56:2F:9E:33:33:E3:D0:DD
Authority key identifier: 3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
Certificate issuer: /CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Certificate serial: 019FA22997605E9522F0172F090D63D60F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
Manifest number: 19CD
Signing time: Mon 27 Jul 2026 06:01:02 +0000
Manifest this update: Mon 27 Jul 2026 06:01:02 +0000
Manifest next update: Tue 28 Jul 2026 06:01:02 +0000
Files and hashes: 1: 7-32Md7Q_fthPHDnPKRu6x3v5Vw.roa (hash: jKLcvLv2eQ3ck8qI0kEKdK//Dg+ioPx0eWUIN6VBJvE=)
2: PwbJ3z-o-T2e8O0EscoENduLxlA.crl (hash: Tbhewh8W570AMO7YvPPFq52tpa/h4PpCwzMAmJFJpq0=)
3: hrCfuMVXLBCd5tVXj7Gmqzx0zMA.roa (hash: lBA8s9K0T2c9sC0fKCrfeOpYhHxaUfWtbc2uSEp45FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:97:60:5e:95:22:f0:17:2f:09:0d:63:d6:0f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Validity
Not Before: Jul 27 06:01:02 2026 GMT
Not After : Jul 28 06:01:02 2026 GMT
Subject: CN=a68f457ffad00043df71991b562f9e3333e3d0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:fa:40:1f:4b:d4:99:f2:e6:67:53:67:6b:
b8:05:cc:08:d8:3a:3b:b7:21:65:88:51:ed:fc:69:
04:52:41:e8:db:e7:7f:2d:0d:84:6a:55:75:b8:45:
70:26:84:9e:55:b2:02:54:a4:c8:4f:59:8d:99:9a:
97:27:a6:12:ac:29:57:93:f2:87:6d:88:53:6b:ed:
e4:e0:5f:08:d3:14:9f:4a:77:62:80:32:fd:5a:20:
f7:5e:d2:16:7e:d5:6b:27:90:cb:4e:bc:c6:bc:1f:
fe:dd:e2:e9:7d:5a:50:43:ae:cb:a3:94:05:d8:a1:
67:d7:d6:45:db:cd:6f:0d:3d:b3:85:c6:6f:52:b0:
fb:c7:86:aa:3b:2e:38:f2:5f:a4:4f:e5:67:96:0d:
79:ef:44:ff:1f:9b:bd:f8:d0:ab:b8:62:a3:2a:33:
a8:4b:5a:4f:76:af:ad:5a:02:62:86:02:7a:71:c3:
05:7a:0c:ed:eb:d1:48:1d:52:50:15:d1:79:6c:4b:
53:fb:5b:49:3a:ff:4b:50:05:98:60:90:74:78:0e:
8d:f7:16:37:61:72:30:b0:cf:a8:7f:98:4f:95:46:
80:1a:24:db:41:8d:8a:77:9e:85:73:b4:53:63:78:
b5:9c:6a:04:df:e7:44:10:5a:0b:49:63:5f:79:ec:
7b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8F:45:7F:FA:D0:00:43:DF:71:99:1B:56:2F:9E:33:33:E3:D0:DD
X509v3 Authority Key Identifier:
keyid:3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ed:58:2b:85:03:d2:e1:aa:f4:93:82:69:7b:c8:c7:6a:f3:
82:4f:89:ef:9b:84:62:2f:b1:dd:7b:cf:8e:76:6d:17:f4:85:
fd:86:de:5b:f3:a1:50:ea:9c:eb:83:43:6e:02:e9:9e:fe:75:
db:35:05:1d:2a:57:c0:01:91:99:fb:cc:af:3b:a3:69:33:d8:
16:be:f0:0b:ea:b2:c0:17:c9:eb:8b:e5:4a:06:81:02:a8:47:
7f:78:f0:2a:e3:1c:6b:29:20:69:a3:77:74:83:9a:24:d5:7f:
3c:52:37:6e:1c:b9:fe:64:6f:50:3f:e2:ff:5d:ba:3f:9d:71:
3f:32:42:57:23:63:88:66:cc:9d:5e:93:df:e9:8e:01:fb:08:
17:34:08:1d:08:6a:b8:81:98:d3:5b:2d:be:69:56:04:69:63:
5f:fd:8b:76:66:bf:f2:c5:86:21:92:0a:13:ea:12:2a:50:2a:
db:9f:7c:f9:c4:71:d7:01:e1:39:d3:2a:dd:51:4f:18:ac:cf:
5b:c1:e5:4c:08:16:0b:61:91:d5:3e:73:c2:d3:f1:8c:32:38:
e9:66:de:e7:97:08:25:e6:e3:5c:f8:e5:6c:97:1a:6e:19:b1:
fb:e4:49:56:64:ad:89:0f:8f:01:52:8d:e9:91:95:29:5a:e8:
89:fe:2c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:04:15 2026 by rpki-client