Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
File: PtW83-CttrlBURh__axK6PMRpvE.mft (raw, json)
Hash identifier: sUU/Px1PfCfpgZcWZopGN089gyNvsWo6Po1UH61Dngs=
Subject key identifier: 3A:97:DF:39:53:AB:71:CB:28:FE:EA:DC:F8:96:C9:11:6B:30:69:CB
Authority key identifier: 3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
Certificate issuer: /CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Certificate serial: 019D359AF36C0D201DF0D4831CCD93C98769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
Manifest number: 1822
Signing time: Sat 28 Mar 2026 18:00:40 +0000
Manifest this update: Sat 28 Mar 2026 18:00:40 +0000
Manifest next update: Sun 29 Mar 2026 18:00:40 +0000
Files and hashes: 1: PtW83-CttrlBURh__axK6PMRpvE.crl (hash: 2FJ1F5p/NUxXHof+uGWNSLEvg3Xor66yamT0m1Sjm0g=)
2: cUOwzS6zZJ75wp4AMkGAVEGIHAM.roa (hash: zhJ7nX2X7NThWP5yAOvlZvDnjb68FXcjF71dp2XEQHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:9a:f3:6c:0d:20:1d:f0:d4:83:1c:cd:93:c9:87:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Validity
Not Before: Mar 28 18:00:40 2026 GMT
Not After : Mar 29 18:00:40 2026 GMT
Subject: CN=3a97df3953ab71cb28feeadcf896c9116b3069cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:b5:78:a2:3e:cb:f6:e1:34:14:54:d1:cc:
5c:c5:76:1e:3a:25:90:1e:53:ee:a4:7d:c4:4e:c6:
b6:19:ef:ba:4d:83:d9:7a:fa:a2:f1:31:6d:8d:fa:
c1:ae:30:7d:74:e8:9a:a9:09:c7:cb:e0:94:2e:20:
bc:8a:d8:5d:b6:31:11:c2:df:77:2b:a5:27:88:e8:
b1:2f:0c:88:71:7c:d4:0d:b0:a5:09:03:2e:1a:d2:
87:3e:39:80:e4:4c:8b:ac:7f:81:b1:8a:74:c5:81:
2d:64:f7:36:42:c2:35:6e:be:40:64:98:64:b0:95:
9a:07:24:9c:12:cb:52:02:18:7d:eb:c9:87:9e:87:
5a:4d:e0:00:79:01:40:7c:8c:9e:6d:fb:86:4f:a7:
e6:65:77:b8:5a:78:38:32:b6:27:12:fe:3b:ba:41:
2e:25:1e:8f:da:b2:ea:f9:20:a2:aa:46:53:53:00:
73:ba:35:39:12:f9:60:f0:3d:15:4d:61:f4:33:90:
c6:14:7d:21:72:08:36:9f:7f:cf:bf:69:fd:37:ed:
14:b2:09:dd:dd:f8:4a:ac:cf:01:7d:d7:46:a5:5f:
cd:88:32:93:21:81:6b:9e:cf:8b:c7:fb:e0:fd:6b:
d5:59:a8:ca:ba:19:99:f7:52:c5:d8:66:6b:df:86:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:97:DF:39:53:AB:71:CB:28:FE:EA:DC:F8:96:C9:11:6B:30:69:CB
X509v3 Authority Key Identifier:
keyid:3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4a:8d:eb:40:fd:3f:1f:4f:02:58:e4:62:96:55:20:e9:52:
a7:f0:3b:c1:5e:7e:e7:04:5a:89:6a:7a:25:3c:b5:7b:33:24:
c7:bf:05:43:cb:d4:c7:31:6f:13:f5:da:bd:75:39:1f:ee:10:
fe:0b:91:94:97:04:f2:b6:db:63:2b:e8:de:04:0f:ca:a9:17:
50:1c:74:e5:40:81:17:e1:b5:7d:0b:25:88:bd:96:73:a5:b0:
e1:44:77:77:98:31:21:5b:59:2e:5b:8c:50:a2:26:d5:99:6c:
88:60:31:11:bb:3a:dc:de:be:35:a2:67:bc:39:6e:93:82:b7:
47:38:d9:fc:b4:1a:87:63:67:fe:bb:84:8f:d9:ae:19:58:c8:
41:40:38:d0:db:7d:16:1a:ad:58:8c:57:c2:25:7d:8b:a3:57:
ae:77:a3:ea:95:8c:e1:e2:a8:53:4c:b8:8f:4f:77:71:71:61:
d9:0e:ba:43:44:07:d9:81:a9:6b:9f:c9:44:2f:c1:da:42:73:
4f:5a:bd:92:a6:6c:ad:c6:54:9a:f5:50:8e:9a:e7:c9:0a:93:
70:1f:e8:ae:3e:e0:b1:15:4d:47:cf:17:60:8a:d2:3f:b2:59:
6c:7e:ad:5d:73:c2:10:85:bb:69:6a:12:79:25:cd:e9:d6:d5:
94:f0:37:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 03:02:58 2026 by rpki-client