Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier: 8AUCAU0PX4eMiFi95mTyPLu8LHNjIS23o+K5ir6XDMk=
Subject key identifier: AF:37:57:AE:03:AC:64:98:8F:BA:65:69:F3:72:B1:C4:85:CE:8F:66
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial: 01A0D2DEC4AEA943F79EDC6FD5E746E243C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number: 0872
Signing time: Thu 24 Sep 2026 10:03:29 +0000
Manifest this update: Thu 24 Sep 2026 10:03:29 +0000
Manifest next update: Fri 25 Sep 2026 10:03:29 +0000
Files and hashes: 1: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: aB6M+m2MlU18pQrSxmelwsey0L2slT7DU9dL8RZsZU0=)
2: ymE5Pc8e6QWHOxlrawdscg3hba0.roa (hash: FR/m/K23gzt9WTvqKJ25/MJlgHD/0x10UFRx1gKHX48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:c4:ae:a9:43:f7:9e:dc:6f:d5:e7:46:e2:43:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Validity
Not Before: Sep 24 10:03:29 2026 GMT
Not After : Sep 25 10:03:29 2026 GMT
Subject: CN=af3757ae03ac64988fba6569f372b1c485ce8f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:1f:5f:32:f3:3b:dc:71:d0:4c:54:50:46:
fd:30:4d:da:c3:eb:2b:20:a5:17:72:ea:45:6d:49:
5f:f8:99:f5:8d:2a:1b:00:32:0c:ea:7f:a8:5b:c1:
9e:d6:fc:6d:4c:14:1c:90:e0:e8:23:11:63:8e:f2:
40:14:0e:20:2d:94:68:64:d7:0b:b3:bf:27:8a:e0:
14:68:7f:2d:e2:81:87:bc:1e:b3:ed:15:62:24:a7:
e4:2d:b5:25:53:f7:13:94:66:cc:22:2a:4c:12:b1:
a6:b0:10:96:11:5e:7e:53:ce:99:0e:65:f7:12:09:
87:2a:d3:fe:2e:57:3d:31:4a:17:1c:25:80:0a:f2:
dc:c0:58:e7:af:be:f7:e8:9c:ea:e5:24:7c:76:8b:
1d:f8:26:1d:bf:2a:50:f3:15:4d:09:39:c7:4c:6c:
52:d9:8a:1a:0b:6e:84:24:cd:e0:7d:46:8c:a2:95:
7f:64:70:eb:ac:ba:55:fa:ff:7d:1a:6c:64:e5:03:
eb:75:cd:e2:24:ed:a8:48:5b:d4:dd:11:37:ef:02:
70:25:d7:f5:06:00:4f:f6:8d:1f:96:91:16:36:42:
b6:02:18:13:9b:42:16:e6:4f:80:26:cc:fa:e3:d9:
72:10:75:1e:e9:51:47:62:8b:e5:32:4c:8f:57:48:
18:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:37:57:AE:03:AC:64:98:8F:BA:65:69:F3:72:B1:C4:85:CE:8F:66
X509v3 Authority Key Identifier:
keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:25:45:fe:eb:54:fe:40:6e:62:02:86:77:97:78:d9:e8:87:
f3:25:80:e7:26:a1:c6:37:fa:82:c8:c3:81:4b:74:16:34:e3:
a9:39:ba:c8:79:c7:74:af:2b:df:06:39:74:3a:02:72:81:96:
0f:ab:85:6e:b0:da:7e:19:d0:cc:75:d2:fb:8e:90:ae:83:d4:
34:ca:13:8b:c8:db:b1:41:58:b4:db:38:c6:e6:be:d3:4c:fd:
23:d8:e6:03:1c:bb:f3:79:0d:10:6d:6c:f3:48:1d:ff:a5:2a:
99:d8:9e:ea:cf:48:2f:1a:65:ad:a2:dc:e0:f2:da:68:80:03:
22:c6:03:66:28:fd:ca:61:fd:15:98:0e:f2:c1:85:fe:1f:7b:
6b:e5:43:ae:d9:90:9e:83:19:7c:b1:c3:9c:6a:e3:bf:5e:6e:
70:23:84:5a:50:b1:8a:37:e2:66:a5:f9:be:06:79:f1:8d:79:
6c:07:5a:5a:f9:34:87:a9:9d:6e:93:d5:23:f1:89:0f:40:6c:
4a:3b:6d:50:f5:a1:28:a2:0e:ea:b8:bd:9e:3f:3c:19:22:bb:
9a:7b:e0:92:1b:8f:b9:91:14:f1:99:ea:11:e9:b5:00:77:77:
a3:da:ed:bd:a5:32:07:3f:a6:ef:3c:d7:37:24:37:ea:7f:5a:
56:23:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:54:45 2026 by rpki-client