Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier: DoVEOLoQEosZ+xW8+xTbGB/EPEKazuYbXxSwCa1DPXU=
Subject key identifier: 38:52:66:A1:43:DC:02:2D:A8:03:A6:BB:BC:1B:48:16:B6:73:F4:5F
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial: 019E1F7E95D52B8157FDBC1BBB3F7C5C85FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number: 070C
Signing time: Wed 13 May 2026 04:00:49 +0000
Manifest this update: Wed 13 May 2026 04:00:49 +0000
Manifest next update: Thu 14 May 2026 04:00:49 +0000
Files and hashes: 1: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: D+DKg8zvUFC3mlnIlLTKaZzdpEiK9YKXbTM0Ri0FUtk=)
2: ymE5Pc8e6QWHOxlrawdscg3hba0.roa (hash: FR/m/K23gzt9WTvqKJ25/MJlgHD/0x10UFRx1gKHX48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:95:d5:2b:81:57:fd:bc:1b:bb:3f:7c:5c:85:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Validity
Not Before: May 13 04:00:49 2026 GMT
Not After : May 14 04:00:49 2026 GMT
Subject: CN=385266a143dc022da803a6bbbc1b4816b673f45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fb:09:12:d7:87:b1:20:54:7b:62:34:bd:eb:
d0:81:ce:91:b1:b6:62:e5:9e:90:71:99:09:aa:69:
7b:db:7c:88:c1:3d:8e:4b:a7:ba:65:19:e4:77:5c:
5c:34:87:31:ca:fe:3d:1c:c3:eb:2b:11:4c:22:f0:
3b:e2:e0:f5:fc:23:ed:26:a0:0d:89:49:e6:18:b8:
89:a1:87:b4:fa:65:56:b9:c8:ac:c5:42:f7:c5:f9:
17:da:40:3c:84:2f:e7:7d:47:2c:37:29:41:e0:04:
41:1e:6d:f9:42:e1:6f:bd:48:d2:e8:f8:b9:a9:44:
7a:7f:8a:d7:54:6f:43:82:59:d2:36:f5:a1:da:05:
b3:41:d5:c1:78:bd:65:55:8f:9d:68:8e:32:86:c2:
f5:29:d2:7d:0d:e2:c9:21:09:93:ff:db:a3:7c:fa:
4b:90:8a:2c:48:9e:4b:b8:4f:3e:b0:20:2d:25:2e:
65:6e:f3:f0:46:e5:ff:ce:2c:ac:df:73:3d:85:1d:
e1:b1:86:89:a6:61:1b:b5:c9:9d:42:ed:a1:bc:a0:
2a:a9:46:47:80:4e:d0:b1:78:c2:6d:c5:67:fc:9c:
85:3f:07:f5:3c:74:ea:92:24:a7:52:f5:7c:11:7c:
58:cf:55:f4:d9:f1:66:0a:0a:14:32:64:cb:85:4f:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:52:66:A1:43:DC:02:2D:A8:03:A6:BB:BC:1B:48:16:B6:73:F4:5F
X509v3 Authority Key Identifier:
keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1a:56:cd:e8:9e:97:32:ff:1f:f8:d6:36:e5:13:d9:26:f1:
ec:93:de:fc:81:2f:43:c0:fd:b7:21:81:0d:66:60:8c:d8:91:
05:f9:9d:e8:94:ae:84:9e:3a:3f:0c:a1:a1:93:de:72:83:3e:
b2:82:04:ea:46:86:1c:95:6d:32:07:46:50:77:48:c0:82:77:
d5:fb:26:1f:e2:01:38:6f:79:72:40:c4:52:8d:f3:a3:67:4e:
a9:4c:68:69:8c:76:ec:a1:01:2d:08:a6:93:7f:95:fe:48:93:
fb:1f:b4:5c:66:63:f2:62:a0:ec:d5:66:16:e4:8b:8a:59:7a:
03:41:b6:9d:cd:8d:a5:49:04:e6:57:6f:34:c0:f7:d3:16:11:
9a:9c:c4:10:bf:79:9f:46:5f:ac:1e:50:44:25:5b:57:75:20:
05:49:6b:a9:33:7f:52:6f:e5:19:62:73:1a:e5:07:6d:9c:e9:
fe:df:ea:2b:58:ec:1a:d8:a7:65:86:cc:a2:b4:35:b1:a6:14:
f5:03:7e:c0:12:9b:66:d4:52:03:13:2d:89:56:77:b6:3e:9f:
c0:7b:f8:ad:f8:9f:cb:35:78:76:ef:24:4b:f6:50:52:c1:4a:
53:37:2f:d1:a2:5a:59:a8:db:bd:ab:aa:4e:c7:c9:e3:3e:a3:
b9:06:ab:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffpXVK4FX/bwbuz98XIX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNmFiZTVjNDhhZWNlYmQ0YTIzN2UxNTNjMzY4NGYzMDYw
OGQ0NDQwHhcNMjYwNTEzMDQwMDQ5WhcNMjYwNTE0MDQwMDQ5WjAzMTEwLwYDVQQD
EygzODUyNjZhMTQzZGMwMjJkYTgwM2E2YmJiYzFiNDgxNmI2NzNmNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/sJEteHsSBUe2I0vevQgc6RsbZi
5Z6QcZkJqml723yIwT2OS6e6ZRnkd1xcNIcxyv49HMPrKxFMIvA74uD1/CPtJqAN
iUnmGLiJoYe0+mVWucisxUL3xfkX2kA8hC/nfUcsNylB4ARBHm35QuFvvUjS6Pi5
qUR6f4rXVG9DglnSNvWh2gWzQdXBeL1lVY+daI4yhsL1KdJ9DeLJIQmT/9ujfPpL
kIosSJ5LuE8+sCAtJS5lbvPwRuX/ziys33M9hR3hsYaJpmEbtcmdQu2hvKAqqUZH
gE7QsXjCbcVn/JyFPwf1PHTqkiSnUvV8EXxYz1X02fFmCgoUMmTLhU96LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhSZqFD3AItqAOmu7wbSBa2c/RfMB8GA1UdIwQY
MBaAFD1qvlxIrs69SiN+FTw2hPMGCNREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFdxLVhFaXV6cjFLSTM0VlBEYUU4d1lJMUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81ZmI4MDMtNDMzMy00MTc1LTkwZGYt
YWVjMTRlYTE3ZWJmLzEvUFdxLVhFaXV6cjFLSTM0VlBEYUU4d1lJMUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC81ZmI4MDMtNDMzMy00MTc1LTkwZGYtYWVjMTRlYTE3ZWJm
LzEvUFdxLVhFaXV6cjFLSTM0VlBEYUU4d1lJMUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBpWzeie
lzL/H/jWNuUT2Sbx7JPe/IEvQ8D9tyGBDWZgjNiRBfmd6JSuhJ46PwyhoZPecoM+
soIE6kaGHJVtMgdGUHdIwIJ31fsmH+IBOG95ckDEUo3zo2dOqUxoaYx27KEBLQim
k3+V/kiT+x+0XGZj8mKg7NVmFuSLill6A0G2nc2NpUkE5ldvNMD30xYRmpzEEL95
n0ZfrB5QRCVbV3UgBUlrqTN/Um/lGWJzGuUHbZzp/t/qK1jsGtinZYbMorQ1saYU
9QN+wBKbZtRSAxMtiVZ3tj6fwHv4rfifyzV4du8kS/ZQUsFKUzcv0aJaWajbvauq
TsfJ4z6juQariw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:16:07 2026 by rpki-client