Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: JVZIWPaVxgarzJGNlVMrxHYz8ML9rBP+VW8RcrWWPks=
Subject key identifier: 0A:5E:84:FA:77:E7:48:EA:60:35:58:A2:C0:D9:05:C5:E0:74:B3:84
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 01A1024895E18985F94D290555D5F53418C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 0C2B
Signing time: Sat 03 Oct 2026 15:01:13 +0000
Manifest this update: Sat 03 Oct 2026 15:01:13 +0000
Manifest next update: Sun 04 Oct 2026 15:01:13 +0000
Files and hashes: 1: 6s7VJQ13Euo-HJYqzPD9JI6QUXk.roa (hash: c+rLw+JU62jWbBeFYHNNvYoEQUH8aS1cBJs7Rsqiv5Y=)
2: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: RcFlwBppY4eCgZJbGibSFmKQYE4Gf5/XjlLJRyJPi4A=)
3: l-eytLgQDESo3Q7U-g8ESB5Ei54.asa (hash: aE0YUeBi5ASRfymXp9SI39+Z6VBwaz/uCSaMfvjqWkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:95:e1:89:85:f9:4d:29:05:55:d5:f5:34:18:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Oct 3 15:01:13 2026 GMT
Not After : Oct 4 15:01:13 2026 GMT
Subject: CN=0a5e84fa77e748ea603558a2c0d905c5e074b384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:c9:2b:11:9b:d9:b6:76:f1:de:98:3e:3a:
97:37:50:d1:1c:cc:56:f9:3c:8f:bc:72:8c:dc:f7:
4d:95:2f:1d:1c:3f:aa:3d:92:e8:2f:a4:6c:d8:d6:
a4:eb:b8:7e:60:da:c4:db:7e:3b:a4:c3:0a:79:09:
89:30:df:72:53:64:1a:81:02:5c:5b:a9:2d:0c:60:
23:87:90:48:3c:a0:2d:9b:c1:f5:1a:e1:34:91:8f:
da:b8:e6:4a:44:27:0b:84:1d:e6:16:32:db:a8:17:
a6:c2:cb:1d:8d:1a:09:0d:ba:06:24:f6:49:90:0b:
66:0a:af:4a:c9:fa:a9:89:57:15:a4:31:c6:ec:c8:
3e:0e:df:34:ef:d6:7c:b0:d0:b5:a8:a9:4f:9a:01:
e9:cd:38:42:14:8c:ab:ee:e9:e2:19:dc:03:f0:bf:
15:ab:47:5c:da:32:3e:4c:6d:4d:bf:7e:32:c2:25:
ba:17:7c:0a:ae:73:ef:c7:b5:9b:45:0a:36:02:8d:
5f:79:1e:e0:aa:59:25:e6:bf:c6:62:70:44:8a:2f:
90:bb:03:8d:16:1d:c2:ce:3a:e5:02:6d:cd:9f:45:
64:49:af:e5:33:b3:90:b3:a0:6f:98:7b:07:79:c8:
11:d8:4b:f6:14:38:c4:5e:ca:0b:f1:e4:c6:8f:45:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5E:84:FA:77:E7:48:EA:60:35:58:A2:C0:D9:05:C5:E0:74:B3:84
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ce:95:ca:47:a1:d1:24:d2:ac:9e:39:9d:91:54:f6:15:81:
36:11:b7:53:57:c2:29:83:59:0a:3b:41:0e:35:a7:3a:f6:a0:
f1:e8:a3:90:a0:8f:4d:db:c8:28:e7:d5:4d:8b:b7:e9:31:b2:
0f:c5:af:04:3f:73:18:72:6b:c4:2b:90:ad:e0:94:31:22:03:
85:0a:01:b0:93:1b:d2:48:8d:61:ea:8f:c7:01:36:76:b1:2f:
46:df:9c:d0:65:5e:4b:22:dc:8c:9a:8c:d8:28:6a:7e:04:36:
25:58:62:da:b1:a9:fe:54:83:c3:3f:ca:8c:6a:29:f0:32:64:
29:b7:7e:e6:98:09:2f:67:60:3e:93:c5:b2:4f:c8:4c:08:ad:
18:09:6f:13:ca:f0:8e:2a:4a:0e:1a:cb:81:0c:e3:de:bd:24:
fa:c1:03:d9:f0:2f:9b:6e:0f:22:84:bf:80:3a:fa:8e:4a:af:
c6:b6:71:f2:27:1c:ec:b8:c9:02:39:9b:a8:85:a1:e1:37:73:
ae:af:2e:25:a4:eb:ae:44:11:c9:33:67:fd:3e:fc:03:75:b7:
8f:79:85:35:36:ba:b6:d9:ca:d7:79:67:41:7c:c7:ea:32:8b:
e4:bd:1d:d2:46:41:5d:7e:32:ad:54:ac:1a:25:b0:07:9e:fa:
58:1e:63:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:43:00 2026 by rpki-client