Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: OySoPvNGXE/BlHZ0vh/lowiny+n5fJYHuN/7ySlnUfA=
Subject key identifier: 10:7D:C1:AC:DE:85:8F:32:71:CA:AE:DB:CB:1F:F5:02:6C:58:9D:7A
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 019F916C6C70275B34C2645411D75F40BAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 0B6C
Signing time: Fri 24 Jul 2026 00:00:29 +0000
Manifest this update: Fri 24 Jul 2026 00:00:29 +0000
Manifest next update: Sat 25 Jul 2026 00:00:29 +0000
Files and hashes: 1: 6s7VJQ13Euo-HJYqzPD9JI6QUXk.roa (hash: c+rLw+JU62jWbBeFYHNNvYoEQUH8aS1cBJs7Rsqiv5Y=)
2: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: rpKZk10+Kqwc4Gtv9h+AJC1TvbNW29Gra/aaQbiOECY=)
3: l-eytLgQDESo3Q7U-g8ESB5Ei54.asa (hash: aE0YUeBi5ASRfymXp9SI39+Z6VBwaz/uCSaMfvjqWkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:6c:70:27:5b:34:c2:64:54:11:d7:5f:40:ba:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Jul 24 00:00:29 2026 GMT
Not After : Jul 25 00:00:29 2026 GMT
Subject: CN=107dc1acde858f3271caaedbcb1ff5026c589d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:93:d9:92:df:22:ed:93:12:65:b2:ac:55:14:
e8:de:5c:90:0c:4a:ea:e2:9a:d7:9b:24:c1:ba:e8:
d0:80:af:39:97:d0:cf:32:9d:68:4e:6c:42:41:ad:
62:b7:bf:13:84:ad:55:59:af:cf:af:36:20:8c:9c:
f3:03:c5:c6:9d:ce:61:bc:38:29:59:e7:9e:aa:27:
11:42:9c:0f:ab:7d:0d:a0:1b:ab:7f:65:7a:d7:9a:
5f:89:36:d9:66:a5:a3:c6:4b:8f:4a:2a:c5:58:44:
2a:80:c5:56:8c:fa:c2:ab:80:30:48:d1:17:58:33:
35:61:15:ba:85:71:fe:6c:3a:b3:14:5d:8c:e0:85:
d3:d6:41:52:04:65:0e:79:03:e6:bc:24:5d:c5:be:
e3:96:1d:bb:16:58:34:19:ec:30:f7:44:ca:43:6e:
fd:b7:7f:2d:f3:95:7f:65:0f:7b:bc:41:67:f4:0e:
84:48:c8:e4:d6:e7:79:87:37:73:c7:28:7a:ff:8f:
c5:5a:0c:c1:dd:4b:72:02:63:cb:c8:a1:3a:59:e8:
ea:f7:e4:89:9d:6d:cc:bd:25:b7:1c:d1:78:3a:60:
55:ec:66:af:77:c5:2e:c5:ed:bd:1e:b4:92:6d:98:
29:ab:b2:64:af:4d:6a:2f:1c:52:f1:77:99:d0:7a:
2c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7D:C1:AC:DE:85:8F:32:71:CA:AE:DB:CB:1F:F5:02:6C:58:9D:7A
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:50:dc:f5:ab:e7:bb:b2:a3:e8:ba:bd:e1:e7:26:f1:7f:3f:
29:9f:f9:2a:da:0d:a3:43:4e:1a:7c:0d:38:64:12:10:4e:af:
e5:ac:54:cd:64:e9:c2:c1:7d:ea:19:4c:8d:cd:8e:53:8a:fe:
c1:3a:f1:06:bd:2c:44:e1:b8:10:fa:69:f7:60:d4:a6:23:4d:
43:89:96:0a:16:99:6f:ca:71:b6:18:7f:06:a7:55:18:2d:3c:
0d:75:6e:4a:47:50:94:af:97:9b:15:2a:ea:b6:3e:d9:02:39:
96:2a:99:b2:69:3b:87:2f:a2:2c:3c:66:a3:cf:aa:b4:15:fb:
d8:8f:60:7c:b8:d5:f1:f7:ec:eb:e9:68:d0:e6:e5:d8:27:2e:
af:ce:b7:40:2f:e7:f4:7a:d5:39:18:b2:0f:cf:be:16:16:43:
0b:67:c1:dd:88:a2:aa:8a:6b:d2:9b:1c:15:df:e8:b5:b6:80:
21:80:31:6e:34:7a:13:9f:c4:3f:26:5f:c4:9e:d9:d6:ed:5d:
4b:86:7e:05:8a:1c:e0:9d:49:5d:d5:7f:53:03:d0:8d:54:06:
e9:9c:03:44:6a:d2:89:ad:69:4f:cf:a7:ff:84:1c:e2:b1:90:
80:53:ff:a5:21:37:05:4d:e7:06:06:2f:d4:28:12:a9:20:bc:
0e:a8:62:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:49 2026 by rpki-client