Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
File: PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft (raw, json)
Hash identifier: eqOhlo5jAAR2zuVoZ5tjOIweaxLi17EkGFhxLkt6TGo=
Subject key identifier: C6:49:9C:DE:DD:BC:2A:44:8F:39:A4:52:BF:2A:12:9B:A9:4B:CC:BA
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial: 019D265F20BBCBFE78B709131D1097D04CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:01 +0000
Manifest this update: Wed 25 Mar 2026 19:01:01 +0000
Manifest next update: Thu 26 Mar 2026 19:01:01 +0000
Files and hashes: 1: PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl (hash: j8wIrjEAISvxmQy9U10Y7QshKvcPQMnFDwyjXyMRFec=)
2: yAETyxqCIBgHtRNroe6hgJM7AvA.roa (hash: /0cKih93DWtvFY7DowMlTChYQqnFT+3gH96BNNkgjiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:20:bb:cb:fe:78:b7:09:13:1d:10:97:d0:4c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Validity
Not Before: Mar 25 19:01:01 2026 GMT
Not After : Mar 26 19:01:01 2026 GMT
Subject: CN=c6499cdeddbc2a448f39a452bf2a129ba94bccba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:c9:30:1c:8f:f2:a0:36:94:79:e0:cd:55:
3a:5a:de:6d:9f:a6:d8:38:d2:65:7d:69:85:30:3f:
bb:9a:88:98:3e:c3:d6:cf:6b:79:3e:c8:06:89:bc:
c8:25:c8:60:a8:2d:a4:71:fe:10:f3:c5:3f:c0:1c:
70:0e:5a:8e:3c:24:12:a2:33:39:40:7a:2f:d3:b8:
46:05:4e:d5:00:25:85:78:0c:84:7b:26:0f:3d:b6:
65:bf:ae:f4:07:60:a2:47:18:90:0b:e3:74:a8:d1:
87:1f:86:59:d7:ab:3d:b2:32:ec:da:11:21:b8:d6:
6a:24:29:8e:0a:c7:de:71:4f:51:ec:ff:7e:09:09:
ce:97:75:ff:12:9a:c1:41:95:8b:71:d7:df:60:94:
4b:0e:5f:f5:54:fb:03:9b:28:4f:ab:79:cf:1e:11:
f5:a2:0e:35:7d:cc:31:d9:e6:c6:98:5b:58:78:da:
ef:12:b2:f3:55:c7:49:b3:66:d4:31:10:23:cc:f1:
78:ee:58:cc:ec:87:49:2b:71:78:96:ea:74:a9:4a:
c0:73:ba:a0:5e:58:e0:88:40:4d:67:c2:48:7f:92:
bd:68:93:07:0c:72:2e:ce:83:cd:b2:09:1e:be:7d:
6d:33:30:c1:4e:de:b9:1f:87:6a:a4:64:40:cc:9e:
0f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:49:9C:DE:DD:BC:2A:44:8F:39:A4:52:BF:2A:12:9B:A9:4B:CC:BA
X509v3 Authority Key Identifier:
keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:13:cf:c5:b5:a2:37:00:2d:97:d6:df:2c:88:33:d4:ab:7a:
03:bd:9d:79:75:47:3d:19:ca:23:c7:e5:6a:f8:80:05:be:d0:
ef:4b:1c:e2:6f:b7:f0:85:d2:43:ac:bb:52:3c:c4:9d:ee:27:
34:84:c7:43:cc:23:b3:0f:8c:d0:8f:27:e9:2b:88:6b:4d:97:
10:a8:57:65:58:f6:fd:c5:a4:b3:05:23:5b:f7:5b:26:ff:5c:
45:3b:37:82:1c:82:ef:86:0a:d3:b7:7c:e4:6a:fc:7a:0b:3b:
b4:c2:ee:8a:c4:fa:63:19:8b:8b:d1:8e:96:9b:19:14:2a:73:
0a:58:40:19:2a:61:0f:71:5f:54:bc:50:01:87:f3:1b:20:da:
33:50:23:b7:92:cc:83:98:f7:a4:54:10:2c:5f:b0:03:f6:36:
64:91:eb:de:4b:df:23:9c:c6:a7:3c:65:d1:8f:67:8b:5e:e4:
e9:04:41:5a:c6:84:84:70:1d:74:60:63:65:46:36:37:5f:fd:
9c:f0:cf:7a:dd:d2:64:f1:04:74:d4:48:04:0c:08:d3:af:d9:
67:55:b0:df:ce:d3:5f:4b:ea:0d:51:ce:54:ca:39:a2:7d:31:
39:07:8b:4b:b3:0b:fb:4d:d3:22:2b:b9:d2:65:45:c4:ff:af:
ff:c5:ab:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:30 2026 by rpki-client