Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: PTP+85fxxLO3OGl+cnTpTmUwalSy33E0El51bYBPJLU=
Subject key identifier: 12:37:04:95:CB:5C:21:81:23:10:B7:24:DA:9E:64:A6:4F:5A:DD:98
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 019D2884253DC8891F808AD640E242D1FD8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 0A2C
Signing time: Thu 26 Mar 2026 05:00:41 +0000
Manifest this update: Thu 26 Mar 2026 05:00:41 +0000
Manifest next update: Fri 27 Mar 2026 05:00:41 +0000
Files and hashes: 1: 6s7VJQ13Euo-HJYqzPD9JI6QUXk.roa (hash: c+rLw+JU62jWbBeFYHNNvYoEQUH8aS1cBJs7Rsqiv5Y=)
2: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: nb/s6fInumQ7d6Qp0M24g//3kfBWPdqSB2gOtLaGPO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:25:3d:c8:89:1f:80:8a:d6:40:e2:42:d1:fd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Mar 26 05:00:41 2026 GMT
Not After : Mar 27 05:00:41 2026 GMT
Subject: CN=12370495cb5c21812310b724da9e64a64f5add98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:a0:30:dd:e8:c4:68:23:f6:9e:83:6d:79:
98:7d:b5:6c:79:5c:bd:48:11:d4:82:b8:e0:c0:54:
31:f8:c4:a4:64:19:71:4f:d3:ee:bb:80:58:35:6c:
0b:ce:c2:81:bb:a1:a2:bb:cf:02:39:16:d5:ed:e4:
4a:a0:17:2d:1b:91:b1:66:2f:1d:b7:4e:e8:04:40:
e4:89:f9:82:5c:85:7e:08:88:1f:35:9f:28:c5:ee:
99:03:2b:f6:0f:30:cc:31:ab:ce:33:a7:a4:54:df:
70:e3:43:65:83:8a:15:43:73:46:2e:8d:31:2b:69:
bd:1f:be:4a:34:1c:e5:ae:73:9e:72:1b:08:4f:8e:
f6:53:6c:59:f2:ed:d3:14:d6:61:38:2d:f2:34:a1:
e5:e4:dd:b5:b9:67:52:a6:4b:0a:56:41:2e:2a:5e:
25:62:ff:8c:b6:65:43:38:44:62:e7:fc:a2:7f:69:
2c:2c:9f:c2:19:95:2a:7a:02:df:43:9c:c6:8a:34:
79:51:c9:e0:24:20:26:ca:c3:57:70:ab:a8:31:71:
15:22:ce:03:cf:62:01:03:27:4b:6a:e0:32:7d:a3:
5d:a4:f6:7d:ec:55:97:18:d1:7f:21:a7:5e:aa:4e:
a4:72:1a:e8:9e:26:6f:9c:f1:bc:5b:c0:34:86:75:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:37:04:95:CB:5C:21:81:23:10:B7:24:DA:9E:64:A6:4F:5A:DD:98
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5c:99:c2:68:34:ec:83:72:ec:88:06:0a:7d:0b:76:76:14:
37:eb:61:e9:98:76:0a:78:15:0b:95:3b:21:06:78:67:d4:69:
67:9b:31:f2:19:3b:e1:f5:af:84:b4:de:04:12:3c:56:a9:c4:
51:a5:4c:87:68:13:a2:46:df:4d:24:26:13:e6:90:ee:1a:e0:
ec:17:fd:43:61:77:e8:6c:0d:d6:0c:c3:db:3b:a0:90:4c:29:
fa:51:81:9b:b2:48:47:51:3d:3d:bf:b9:34:2b:26:91:db:4f:
e8:4b:bb:81:66:3a:b4:6e:5e:09:09:83:ae:37:bd:c3:eb:87:
76:3d:5f:81:60:18:fd:cd:9f:19:55:52:7b:7a:a4:8c:73:44:
04:a5:3b:78:e8:9d:ae:99:bb:33:5d:f7:38:4a:9c:fd:8c:ac:
df:e4:72:9d:54:5a:de:6a:79:a1:c2:59:0d:11:b5:1d:36:c5:
19:14:e8:19:4a:8e:1f:bc:0c:9b:c8:81:e8:f5:e0:4d:53:1b:
4b:5a:2e:96:9b:6f:cf:4f:cd:37:ea:60:2a:91:62:19:1c:13:
0e:56:42:92:5a:77:06:7f:0d:98:f1:3a:fc:03:55:0c:8f:a2:
77:9a:f4:ab:26:f2:ed:dd:56:84:ae:1c:da:2e:18:f0:9b:28:
ef:01:3f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:06 2026 by rpki-client