Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: 7FJiY3+oqTyDpNaeuh5UoNXg+jnf7ivYwxJ8uaTmn40=
Subject key identifier: 60:5A:A6:47:A2:9C:AD:29:8A:0E:80:9D:8F:B3:BD:22:71:BA:A3:8C
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 019E1CB491EFC6D244896B394F546E6E90EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 0AAB
Signing time: Tue 12 May 2026 15:00:56 +0000
Manifest this update: Tue 12 May 2026 15:00:56 +0000
Manifest next update: Wed 13 May 2026 15:00:56 +0000
Files and hashes: 1: 6s7VJQ13Euo-HJYqzPD9JI6QUXk.roa (hash: c+rLw+JU62jWbBeFYHNNvYoEQUH8aS1cBJs7Rsqiv5Y=)
2: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: FskzCRD3fwzINlhS9uVM9HmVEcU0vHS6+J5cvl4/mHg=)
3: l-eytLgQDESo3Q7U-g8ESB5Ei54.asa (hash: aE0YUeBi5ASRfymXp9SI39+Z6VBwaz/uCSaMfvjqWkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:91:ef:c6:d2:44:89:6b:39:4f:54:6e:6e:90:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: May 12 15:00:56 2026 GMT
Not After : May 13 15:00:56 2026 GMT
Subject: CN=605aa647a29cad298a0e809d8fb3bd2271baa38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:3b:5a:a8:a7:eb:41:0c:a0:c2:d3:93:02:
50:82:74:7e:62:7b:da:d0:a0:77:4c:b9:b5:f4:cd:
3e:2f:f0:bd:9d:eb:dd:d4:b7:be:c6:c8:aa:c4:64:
67:1b:27:2a:de:c0:23:5c:2b:46:a7:d7:14:4b:79:
9d:5e:c3:4d:dd:2b:c7:77:07:dc:5d:89:56:ae:32:
fa:f0:1d:f4:c8:76:a2:c4:98:72:b9:c8:4f:62:12:
fa:7d:55:29:ef:e4:36:4b:19:d8:85:20:75:ea:d7:
22:85:f6:23:25:3e:fb:24:a0:78:ce:e0:7b:36:2a:
ea:ae:19:34:b4:0c:15:ed:b6:d2:9e:65:81:5a:73:
97:cd:34:c7:f4:c4:be:54:e6:12:46:8b:28:ce:df:
03:22:c7:cc:1d:f6:af:d4:9c:4e:61:d4:5c:1f:49:
a9:29:f9:92:e0:b6:8b:0b:17:83:f3:86:5a:cb:0f:
44:69:62:66:1d:74:91:08:5d:e5:47:84:73:93:3a:
0d:54:7d:74:b0:c6:fa:36:d0:d3:c3:86:55:fc:30:
a3:ea:4f:62:72:60:4f:1f:10:06:70:d9:44:1e:b4:
2e:b4:13:72:61:df:84:ee:c5:90:79:07:81:3d:17:
99:6c:88:78:8d:90:05:ed:79:c1:2a:c7:1c:d3:64:
62:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5A:A6:47:A2:9C:AD:29:8A:0E:80:9D:8F:B3:BD:22:71:BA:A3:8C
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:24:f0:27:b0:67:b2:20:a4:9d:dd:ec:b1:42:2d:07:e7:16:
a5:d6:f2:e4:9e:a2:db:ea:3b:19:9f:72:0e:eb:b0:5c:25:20:
34:e4:f3:2b:5c:dc:da:dd:0b:4a:c3:ad:32:93:33:45:62:72:
0c:b3:dd:f0:65:c0:0b:20:ca:de:64:34:fa:5e:b6:07:da:f7:
95:4d:57:eb:f5:34:df:db:22:2c:6e:39:66:79:b6:90:d8:c1:
3b:05:c6:b7:24:83:16:50:4c:9d:a6:a6:a7:60:b2:81:07:2b:
9a:78:3b:4f:d6:5b:f1:b5:0a:a1:86:2d:27:ab:f4:e4:b4:dc:
bd:35:52:31:c5:39:29:0f:9b:62:df:0d:32:45:ac:a3:01:37:
36:23:fd:dd:ed:dd:5b:30:d0:c7:8c:fb:ae:dc:95:cb:14:10:
34:6e:58:d7:eb:7e:70:bb:28:07:0f:4f:b4:00:19:7e:4b:07:
28:03:1c:e6:94:a0:45:0a:e0:d6:45:45:6f:8f:93:0e:42:d9:
e1:47:78:c2:34:49:cb:aa:71:19:76:9b:df:c7:e0:8a:e1:fe:
39:ae:56:30:f4:c6:97:67:ed:81:de:fa:f3:24:5e:2a:d1:51:
68:3e:16:5a:27:b5:c1:f9:c2:35:fc:11:a4:48:d4:d6:62:02:
6b:68:fd:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctJHvxtJEiWs5T1RubpDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjODU5ZWQ2OTNjZTNkZTA1OWNhYTBhMGMxZTQyNDVjNWU5
ZTM3ZTQwHhcNMjYwNTEyMTUwMDU2WhcNMjYwNTEzMTUwMDU2WjAzMTEwLwYDVQQD
Eyg2MDVhYTY0N2EyOWNhZDI5OGEwZTgwOWQ4ZmIzYmQyMjcxYmFhMzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT47Wqin60EMoMLTkwJQgnR+Ynva
0KB3TLm19M0+L/C9nevd1Le+xsiqxGRnGycq3sAjXCtGp9cUS3mdXsNN3SvHdwfc
XYlWrjL68B30yHaixJhyuchPYhL6fVUp7+Q2SxnYhSB16tcihfYjJT77JKB4zuB7
Nirqrhk0tAwV7bbSnmWBWnOXzTTH9MS+VOYSRosozt8DIsfMHfav1JxOYdRcH0mp
KfmS4LaLCxeD84Zayw9EaWJmHXSRCF3lR4RzkzoNVH10sMb6NtDTw4ZV/DCj6k9i
cmBPHxAGcNlEHrQutBNyYd+E7sWQeQeBPReZbIh4jZAF7XnBKscc02RiOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBapkeinK0pig6AnY+zvSJxuqOMMB8GA1UdIwQY
MBaAFDyFntaTzj3gWcqgoMHkJFxenjfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUElXZTFwUE9QZUJaeXFDZ3dlUWtYRjZlTi1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mZDkwNTQtNzc4ZC00MTNkLTllOTUt
NTUxMWRhYTcyNzc4LzEvUElXZTFwUE9QZUJaeXFDZ3dlUWtYRjZlTi1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9mZDkwNTQtNzc4ZC00MTNkLTllOTUtNTUxMWRhYTcyNzc4
LzEvUElXZTFwUE9QZUJaeXFDZ3dlUWtYRjZlTi1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyTwJ7Bn
siCknd3ssUItB+cWpdby5J6i2+o7GZ9yDuuwXCUgNOTzK1zc2t0LSsOtMpMzRWJy
DLPd8GXACyDK3mQ0+l62B9r3lU1X6/U039siLG45Znm2kNjBOwXGtySDFlBMnaam
p2CygQcrmng7T9Zb8bUKoYYtJ6v05LTcvTVSMcU5KQ+bYt8NMkWsowE3NiP93e3d
WzDQx4z7rtyVyxQQNG5Y1+t+cLsoBw9PtAAZfksHKAMc5pSgRQrg1kVFb4+TDkLZ
4Ud4wjRJy6pxGXab38fgiuH+Oa5WMPTGl2ftgd768yReKtFRaD4WWie1wfnCNfwR
pEjU1mICa2j9jw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:22:38 2026 by rpki-client