Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json)
Hash identifier: YqmDPVSHjCZ+n8RshIQNVFRuguN25eP6I8xfSTIj4jM=
Subject key identifier: 49:41:B6:33:83:06:D8:BA:36:8F:79:3F:D4:0D:A8:38:61:41:A5:A0
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial: 019E1EA3C12693DDFE9ABFBD5EDD637E9014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
Manifest number: 0243
Signing time: Wed 13 May 2026 00:01:48 +0000
Manifest this update: Wed 13 May 2026 00:01:48 +0000
Manifest next update: Thu 14 May 2026 00:01:48 +0000
Files and hashes: 1: 52gTPJdQN2IyRsgf9iKgbNid4cI.roa (hash: 5lE63bjKcJ3503lnep/t29RA6BQhkuc041jpBZfJLfo=)
2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: mO6m6N+h0k5nIdR7In9rdc/4BkDANHBYP2Cy+J6N7qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:c1:26:93:dd:fe:9a:bf:bd:5e:dd:63:7e:90:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Validity
Not Before: May 13 00:01:48 2026 GMT
Not After : May 14 00:01:48 2026 GMT
Subject: CN=4941b6338306d8ba368f793fd40da8386141a5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:3d:05:fc:30:90:ba:43:4d:29:aa:0a:3d:
49:05:dd:0e:95:89:ff:cc:69:7e:b3:05:06:db:d3:
f7:03:83:ba:15:3d:20:45:24:1a:1f:72:e9:bf:2d:
6d:fa:cc:f8:61:93:05:36:e4:d8:6a:01:dc:9c:c8:
5f:59:6f:0a:1c:3f:9a:65:79:75:07:0c:dc:2c:19:
22:8f:de:76:23:cd:4e:f0:dd:80:8b:d9:1f:97:ec:
6c:c6:4f:97:24:64:ab:13:03:c9:ac:26:f3:57:93:
03:ba:b6:f0:a0:be:29:17:00:c5:44:54:3d:14:b8:
18:23:0e:35:3d:f5:5f:9c:e1:46:65:3c:f0:30:97:
61:9d:18:9c:b5:65:10:04:0c:5a:3d:60:0b:66:d5:
33:58:03:e9:2e:a8:c1:13:f9:da:2e:62:78:de:33:
9c:a2:33:f3:66:45:b3:cb:ea:44:ab:40:b5:2d:37:
25:c5:bd:d3:a4:36:45:82:8e:49:3f:a7:f0:54:fd:
21:12:90:4c:16:6d:5c:ed:01:aa:3f:04:c2:3f:6e:
d4:54:6f:3c:d4:5c:0d:2a:f9:92:5d:d8:b7:66:7f:
50:5b:4f:0b:6f:35:73:93:20:fd:97:c1:95:b0:32:
cf:87:00:99:20:61:5d:c2:67:ee:d7:64:a8:78:a7:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:41:B6:33:83:06:D8:BA:36:8F:79:3F:D4:0D:A8:38:61:41:A5:A0
X509v3 Authority Key Identifier:
keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:56:88:d0:60:70:25:12:f1:97:22:93:ea:a8:a3:9d:d9:27:
3a:70:c8:20:f2:45:a9:01:b2:f4:d2:11:85:80:78:b1:4d:7f:
05:cc:7e:ea:f2:cb:67:1c:bc:bf:c6:03:a4:9e:4f:31:e8:0f:
46:79:0a:f4:f2:af:8b:32:2d:f0:51:9f:7f:a8:bb:25:b9:c8:
ce:0e:91:90:5d:1f:cc:de:a1:e7:82:98:3d:fb:48:9a:76:15:
d7:fb:f0:77:6d:03:bf:c0:c6:0d:f6:b8:36:d8:49:f3:7d:9d:
30:a9:75:77:56:97:30:0e:86:9d:6a:f8:2f:ce:a6:3f:94:e5:
6d:b5:2c:1a:44:de:9b:d9:84:4c:48:32:38:e7:f8:30:d6:36:
88:97:b9:ea:0c:6e:66:05:5c:bc:e6:b8:cd:e5:54:ce:99:92:
c9:87:f0:47:da:8e:c5:ab:8a:09:30:d9:c5:c7:c3:35:e8:fb:
dc:73:94:55:05:8c:b0:06:e0:67:da:49:11:47:ca:d3:44:c1:
05:46:2a:98:11:a1:0d:6d:41:7f:3d:3a:33:4b:be:72:20:bf:
cd:a3:d1:b8:a2:13:bd:ca:61:25:be:45:4c:2d:15:83:5f:ab:
ca:93:28:cd:c9:0c:e9:7f:83:2a:57:e7:8f:93:ea:03:9b:23:
39:50:db:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:17 2026 by rpki-client