Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier: njps+s+FSImKcWIFoYRI60HZJa/pdM/mQd8xYlrCaZE=
Subject key identifier: A7:E6:45:77:69:E8:F7:9A:DB:43:49:C6:6E:A8:99:BE:83:B7:AF:3F
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial: 019D284D3D4531ED207F06D83615E4F9CC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number: 068C
Signing time: Thu 26 Mar 2026 04:00:43 +0000
Manifest this update: Thu 26 Mar 2026 04:00:43 +0000
Manifest next update: Fri 27 Mar 2026 04:00:43 +0000
Files and hashes: 1: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: 2CIZvB7ckq6U+xVrdCbkMI66vQBSunQ3RUOoZk0xlJ8=)
2: ymE5Pc8e6QWHOxlrawdscg3hba0.roa (hash: FR/m/K23gzt9WTvqKJ25/MJlgHD/0x10UFRx1gKHX48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:3d:45:31:ed:20:7f:06:d8:36:15:e4:f9:cc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Validity
Not Before: Mar 26 04:00:43 2026 GMT
Not After : Mar 27 04:00:43 2026 GMT
Subject: CN=a7e6457769e8f79adb4349c66ea899be83b7af3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:82:a2:1e:c5:a6:cc:55:70:6f:b3:a5:30:
00:f1:f3:98:94:8a:8b:dc:bb:57:bc:51:dd:19:96:
89:22:21:c6:63:fe:68:82:aa:fa:f7:63:dc:1e:33:
a6:3f:ec:d8:dd:2c:1b:2a:3f:6a:fd:84:92:70:8e:
aa:b2:36:3a:a4:12:2f:cf:f2:78:28:c4:3c:10:ba:
73:1a:01:20:a3:1b:71:ac:6a:e9:92:7b:3f:5b:56:
40:d0:6d:63:1e:66:93:41:23:3c:20:4c:20:0d:94:
fb:e3:31:47:49:7e:94:ef:7a:34:63:d9:f0:14:5f:
c2:aa:e7:f6:07:b1:5b:1c:32:87:50:d5:16:34:1f:
f7:48:28:7a:a7:f5:93:ff:68:79:25:54:58:0f:24:
43:d6:30:94:bc:dc:d9:21:74:25:e7:5e:fd:8e:80:
cb:e7:ca:d6:f5:23:32:73:79:79:34:c0:1c:38:1c:
34:10:1e:e9:94:6c:be:35:e7:da:c5:09:5e:6f:51:
e9:79:90:21:f0:da:bf:69:65:38:7f:ab:eb:0c:55:
1f:04:f3:85:c1:5f:15:03:7a:5c:a4:94:b5:b4:e5:
19:7f:b6:48:f8:86:ca:15:81:1f:e2:9d:72:c1:13:
d5:cc:38:96:2e:1a:76:8e:24:a7:7f:0c:ce:14:00:
99:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E6:45:77:69:E8:F7:9A:DB:43:49:C6:6E:A8:99:BE:83:B7:AF:3F
X509v3 Authority Key Identifier:
keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:51:b8:17:5f:51:fb:78:0b:04:d6:99:83:f8:8d:b1:0b:3c:
54:7a:2b:75:c5:b6:1b:3f:32:aa:a6:eb:0a:08:f6:f0:30:e6:
9e:a2:48:3a:fb:ca:de:d7:3e:6c:5c:69:0d:d3:52:09:77:d9:
54:cf:43:05:78:0b:d9:2d:b8:69:32:45:96:ae:1c:d2:99:31:
5f:22:f1:b9:6f:2a:bf:de:cd:28:67:1a:58:d5:2d:45:a0:d1:
f6:61:04:91:81:21:97:4d:f5:72:cc:97:27:fc:ba:52:b0:3f:
e6:9a:3c:a1:1a:8a:00:0d:02:83:1b:8d:0e:4a:38:9a:cd:d1:
ec:a9:81:a1:7b:2b:b2:43:d9:10:cf:3d:5f:0a:be:6e:e7:35:
aa:59:ff:ae:43:5e:72:25:d8:ee:44:59:7d:ee:1d:f9:34:6b:
f9:ed:a7:95:02:5f:94:d7:e4:cc:09:aa:50:64:ba:ed:8d:db:
8f:1c:4a:b3:54:11:c9:5b:f7:1e:a8:38:1a:17:2d:a5:39:b1:
fb:c4:92:65:ce:d9:03:36:d5:50:2b:0b:87:3a:4d:4f:d4:aa:
d2:49:4c:d9:a4:f6:2f:1d:c0:9c:f7:1e:34:5c:72:dd:ce:58:
3b:cb:e4:cf:6b:9d:0a:7a:ac:93:6b:9d:88:48:b0:4d:5d:cd:
1c:fc:ed:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:27:09 2026 by rpki-client