Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File: PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier: A9LPl0U4eDfWkK3UkPi10qKy1XoMh6CkIt5cdm60A0Q=
Subject key identifier: FF:90:CD:1F:88:FC:36:88:EF:05:97:1C:22:DD:D4:77:A7:36:F9:C2
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 01A0F2D63DC17F316A3D814994620212D5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number: 197A
Signing time: Wed 30 Sep 2026 15:02:01 +0000
Manifest this update: Wed 30 Sep 2026 15:02:01 +0000
Manifest next update: Thu 01 Oct 2026 15:02:01 +0000
Files and hashes: 1: 1-8iAqzCb-dnqpC0mG9QcHFT-BiU.roa (hash: GLfzuz24dtgGsbzbzf51Mgi7uiLzVKCscSDvx4Q43oY=)
2: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: 4+h8GQyF6H7KBVD8pMi5lNhAfhvGYF9jFAWpcoVWx3s=)
3: eahgufCfOHHAIx8MFOHNTLtP6M4.roa (hash: kkQvc1W1aYM6K9ernxdLo8LTVXVyQLjFAFQYaCBKHkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d6:3d:c1:7f:31:6a:3d:81:49:94:62:02:12:d5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Sep 30 15:02:01 2026 GMT
Not After : Oct 1 15:02:01 2026 GMT
Subject: CN=ff90cd1f88fc3688ef05971c22ddd477a736f9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:9d:fc:d5:45:e9:3a:79:f2:22:02:3b:d0:
bf:40:ab:37:8f:40:4d:6d:49:2c:33:5b:f7:e7:be:
57:98:da:0b:f4:43:5d:fd:34:05:bd:6a:33:cb:41:
5b:82:78:b9:59:49:9a:f6:a8:e8:a4:3f:19:f4:cb:
e2:8f:11:6a:0d:63:54:95:49:25:75:db:6c:48:2a:
27:1c:a2:8e:fa:2e:42:2d:ab:0f:fd:75:73:5f:c4:
fc:75:53:74:29:de:96:8b:da:89:c5:86:2b:b1:17:
60:ce:5b:72:26:01:af:57:97:ff:3b:73:73:5b:f0:
50:61:4e:7e:0e:62:a3:97:df:a5:3d:6c:3b:ec:43:
98:b4:0e:de:af:80:5f:c8:56:9e:72:56:83:80:15:
d4:d0:e9:f7:51:8b:8c:1f:9f:bf:32:6e:79:18:13:
33:ec:fa:bc:a6:cc:08:72:b6:74:70:6b:f1:dc:26:
b0:dc:3f:a5:05:76:0c:59:74:d6:52:92:1d:d2:f4:
b9:6b:3e:96:2d:cf:b2:59:c2:9a:99:4f:cf:28:07:
c5:1b:95:fd:7f:1c:43:42:97:50:59:f4:90:db:f1:
1c:77:91:6d:6d:76:11:6e:17:4d:1f:b0:51:24:42:
b3:88:50:15:75:8d:cd:3c:4a:ce:f1:32:15:be:99:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:90:CD:1F:88:FC:36:88:EF:05:97:1C:22:DD:D4:77:A7:36:F9:C2
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bc:e0:96:5c:8e:92:ca:39:15:0d:71:b5:5d:4d:3a:65:6e:
d2:79:c7:fb:e3:3a:a9:5d:3d:c0:f9:d6:38:3f:8b:df:8c:82:
11:2b:6e:fb:06:9d:d7:79:f7:dd:c8:21:57:9c:1b:04:40:ab:
72:b8:12:ec:94:09:89:ed:06:d2:f0:87:b8:f6:af:12:32:fe:
cc:17:fc:29:e3:b6:18:4a:b2:13:a4:e7:4a:a8:76:63:8d:9a:
35:7c:5c:1b:75:b9:ba:72:4f:d4:24:14:b1:c6:b9:f1:38:cd:
f2:3d:2d:17:40:39:37:39:ac:62:94:ae:eb:a3:ad:9e:77:70:
f7:8e:ab:95:d4:13:da:c2:59:c3:b8:4e:64:98:51:b8:c9:a1:
c7:e6:db:23:03:a1:72:a6:7d:30:4c:63:d4:c2:5b:34:eb:02:
57:3c:e9:e4:f2:0b:54:76:a5:08:ea:4d:d5:d6:b3:60:dd:97:
2a:a7:e4:3a:da:63:21:d9:88:15:70:9c:b3:11:e9:0e:d0:30:
05:b6:52:1c:89:3e:bd:d0:c6:17:f3:d9:f8:f4:c8:a3:4c:dc:
cb:4f:06:c5:f8:7e:d2:e2:c3:c3:99:35:d1:89:2f:a5:45:c4:
24:58:82:96:83:34:06:62:b3:b8:47:7e:1c:d0:47:85:ba:93:
39:f3:49:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:40:46 2026 by rpki-client