Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier: I2DL1gGrI7pNtaBvgezpgcbwBaTl3DdsMLblgmgSfP4=
Subject key identifier: 05:A6:76:DE:EE:AB:0C:EF:DF:39:01:CA:A7:D4:9F:6A:2F:9E:41:E6
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial: 01A0E062155070ED0D988F712E9DC8D3830A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number: 0879
Signing time: Sun 27 Sep 2026 01:01:59 +0000
Manifest this update: Sun 27 Sep 2026 01:01:59 +0000
Manifest next update: Mon 28 Sep 2026 01:01:59 +0000
Files and hashes: 1: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: 6SAxfhgzPAwFVMfjBRbc6ZUPjUX40GjsT/PK9WGciAY=)
2: ymE5Pc8e6QWHOxlrawdscg3hba0.roa (hash: FR/m/K23gzt9WTvqKJ25/MJlgHD/0x10UFRx1gKHX48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:62:15:50:70:ed:0d:98:8f:71:2e:9d:c8:d3:83:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Validity
Not Before: Sep 27 01:01:59 2026 GMT
Not After : Sep 28 01:01:59 2026 GMT
Subject: CN=05a676deeeab0cefdf3901caa7d49f6a2f9e41e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c3:92:79:02:3c:90:d6:8f:d5:d2:5e:e3:bd:
e9:0c:06:04:4c:97:31:0d:dc:b6:54:16:05:b3:b6:
5f:ee:d5:4c:b4:5c:b6:f4:9d:0c:d0:8c:05:15:43:
1a:9f:15:99:d7:78:6e:a2:0c:fd:c5:b3:3c:14:af:
d3:2a:d2:e1:e2:0f:6e:6d:84:90:74:8e:cd:5f:11:
9b:8f:ea:51:e2:27:fa:2d:58:b6:e4:fa:ef:ad:97:
b9:fa:0e:98:3a:c6:08:58:70:a9:53:78:1a:50:f1:
8a:d1:db:87:13:2e:fa:b9:28:78:f4:e3:71:dd:fb:
d5:63:24:ec:22:b1:6b:77:c3:2b:fa:48:53:e1:2d:
8b:14:0e:6f:91:37:17:56:36:05:0a:71:73:a9:bc:
20:38:a5:9d:81:16:60:18:6c:95:d9:e0:df:72:04:
27:06:79:c2:f0:4c:f4:1b:1b:88:10:48:94:62:5c:
d0:9e:fd:86:d8:a0:f5:95:a9:ee:1a:01:49:9e:9a:
ce:ee:d0:72:d4:75:ea:d6:66:d8:5a:39:13:6f:a7:
d7:dd:42:0d:3f:f1:83:ed:3a:de:4f:f6:e2:1a:11:
2b:8f:11:6d:62:a3:8d:5e:1d:37:41:73:3d:8d:0d:
1a:48:14:5f:87:5b:ee:67:9d:c1:13:d2:b9:b4:ff:
9d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A6:76:DE:EE:AB:0C:EF:DF:39:01:CA:A7:D4:9F:6A:2F:9E:41:E6
X509v3 Authority Key Identifier:
keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:52:07:2e:85:69:e8:25:f2:8c:8d:34:1f:89:7a:0b:3d:3a:
2e:0a:fd:29:d0:03:46:ad:6e:31:21:27:5f:9d:02:39:55:bd:
50:56:5a:83:2b:fd:2e:b4:2c:a4:65:6d:40:91:c4:0b:76:ba:
6f:f6:d9:74:52:93:6f:00:9f:7a:29:6d:c6:5a:41:c8:b4:dd:
54:f2:f7:63:92:ae:e4:ba:aa:d4:75:2e:9d:bf:a9:f3:d8:53:
c1:87:b7:c6:f6:65:7f:4c:95:63:e6:37:d5:6d:17:f4:ad:4d:
40:96:e9:35:06:ab:62:29:ce:0b:91:ba:d0:d8:ef:ac:84:ff:
20:23:e1:75:c4:c8:8c:72:3e:0d:af:e0:c1:02:71:7d:a2:bd:
0b:11:1e:5c:5c:6c:20:4f:22:b6:c5:16:8b:56:a4:b2:d0:d7:
53:8d:f8:6c:ed:18:f0:59:07:e6:bd:b9:ce:c4:f2:99:fc:37:
80:59:63:31:f6:bf:e1:e3:41:3e:cc:06:2c:51:ec:71:69:31:
95:14:0b:d4:94:45:44:76:07:67:0f:84:c5:9a:25:c4:58:e1:
12:6a:34:fd:90:ce:b1:45:6f:9e:2a:2e:49:34:ec:a1:29:27:
ad:f6:03:54:ba:92:92:b6:5b:2d:c4:c1:1b:62:16:1f:9b:7c:
96:5c:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:37:42 2026 by rpki-client