Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: E9rRpy3Aybrzvgjo2fTDebYwzWFCoIgq/So9hkOs3sI=
Subject key identifier: 12:C1:BC:34:F0:AD:28:8C:3E:E6:19:1E:21:B3:9E:A8:F7:C5:28:28
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 019D265F7C34C37D4EC71896CE2DE8154285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:25 +0000
Manifest this update: Wed 25 Mar 2026 19:01:25 +0000
Manifest next update: Thu 26 Mar 2026 19:01:25 +0000
Files and hashes: 1: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: Ex97gF2eNjz2l4N+JflmrLs1z5SrCa6cS+y7jXj68Iw=)
2: epbrSMH-SUdz881xHjrFWBLUM0I.roa (hash: DemzvWRRUYGCK/bGtJiqPfkLK7W/2Q2RB2aeNbl55xw=)
3: fxKKOFmvR7tWz8KnpWFVu5Gljsc.roa (hash: n8tLo/IEZsMPbxqYthr4yxthEmDMzlRhSAVZKwtGCLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:7c:34:c3:7d:4e:c7:18:96:ce:2d:e8:15:42:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Mar 25 19:01:25 2026 GMT
Not After : Mar 26 19:01:25 2026 GMT
Subject: CN=12c1bc34f0ad288c3ee6191e21b39ea8f7c52828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:08:59:56:bf:1c:f5:0b:22:0c:4b:71:28:
5f:9a:8c:bd:62:cf:22:00:a5:32:5a:0e:28:fe:10:
7c:57:69:bf:4e:16:c8:f9:e6:2c:d1:09:86:b2:fa:
a7:64:63:73:61:f4:92:bf:87:ba:a5:f2:22:7c:8f:
cb:3f:1f:19:c8:3e:60:26:a7:ea:4b:95:13:30:89:
51:e5:5c:77:e7:83:ff:4d:2b:77:47:94:6f:13:74:
2f:15:9f:2b:bb:1a:f0:0b:ea:74:b1:6a:aa:da:ee:
e0:8b:ec:c4:c0:ed:43:3f:25:f5:ef:de:4c:25:ef:
99:ac:0f:19:53:b1:83:1b:c6:f2:5c:4c:92:c4:55:
9f:7f:4f:29:d8:7f:2f:e1:c0:50:99:89:1c:90:6f:
f0:b6:42:88:41:f1:70:67:52:95:2f:4e:3a:f3:56:
2a:df:0b:9a:a1:00:08:bf:c4:db:f6:de:7d:78:1f:
eb:3c:b9:a0:c9:71:f4:06:33:69:7a:0b:b6:03:ef:
18:53:9f:0d:f6:04:9d:f9:0e:a0:82:33:1b:48:ff:
21:a6:b1:08:b7:3c:3c:d9:22:7f:be:38:68:3b:69:
0d:09:99:ce:7a:54:1a:1f:8b:ae:fd:d7:5a:21:ab:
08:f4:9b:b9:b1:2b:4f:f0:91:4b:31:b6:59:55:b6:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C1:BC:34:F0:AD:28:8C:3E:E6:19:1E:21:B3:9E:A8:F7:C5:28:28
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bd:cb:f0:e6:5c:22:d0:fd:34:66:bc:25:d9:78:38:09:49:
90:60:d3:d1:06:52:94:1a:18:17:fc:0f:b0:64:41:84:4c:79:
21:e4:f8:74:f8:44:5d:a1:03:4e:51:ad:68:ed:b5:f0:3b:f9:
e5:88:9f:8c:37:f8:f3:58:43:79:6f:63:0e:72:8d:55:1d:c7:
14:88:d0:0a:dd:0e:73:c7:f1:03:d7:a5:87:11:9e:60:8b:2d:
92:3a:b7:02:07:bb:be:b0:8a:db:de:a3:fb:18:84:30:cd:91:
aa:2b:bd:0c:20:14:05:4e:a5:98:2d:ea:66:70:d8:0f:a6:9a:
f8:e2:f8:de:4d:2c:ca:05:70:8c:ba:38:c8:21:fa:28:70:84:
6c:44:a1:da:03:0a:fd:d1:33:5e:42:5b:da:4a:24:de:46:5e:
c0:40:2e:cd:fb:70:5c:9b:28:19:f2:3c:61:81:67:27:94:02:
84:58:a5:75:c2:8c:79:54:97:bf:20:a5:2d:b9:f4:16:19:4a:
c2:c3:7f:10:42:ca:64:87:b0:65:e0:16:8c:ba:d7:32:55:69:
74:df:21:8f:17:eb:58:5a:81:39:ad:6a:0a:47:61:5b:f2:ab:
51:00:da:33:d9:33:50:b5:56:aa:b9:cb:c2:9f:1c:f7:69:d7:
d0:a7:b4:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX3w0w31OxxiWzi3oFUKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMDI4OWFmZmFhZjA4MGUyNTI3MThlM2Y0NDg5ZGEyOWQ5
ZmE1NWEwHhcNMjYwMzI1MTkwMTI1WhcNMjYwMzI2MTkwMTI1WjAzMTEwLwYDVQQD
EygxMmMxYmMzNGYwYWQyODhjM2VlNjE5MWUyMWIzOWVhOGY3YzUyODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFkIWVa/HPULIgxLcShfmoy9Ys8i
AKUyWg4o/hB8V2m/ThbI+eYs0QmGsvqnZGNzYfSSv4e6pfIifI/LPx8ZyD5gJqfq
S5UTMIlR5Vx354P/TSt3R5RvE3QvFZ8ruxrwC+p0sWqq2u7gi+zEwO1DPyX1795M
Je+ZrA8ZU7GDG8byXEySxFWff08p2H8v4cBQmYkckG/wtkKIQfFwZ1KVL04681Yq
3wuaoQAIv8Tb9t59eB/rPLmgyXH0BjNpegu2A+8YU58N9gSd+Q6ggjMbSP8hprEI
tzw82SJ/vjhoO2kNCZnOelQaH4uu/ddaIasI9Ju5sStP8JFLMbZZVbaaDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLBvDTwrSiMPuYZHiGznqj3xSgoMB8GA1UdIwQY
MBaAFD8Cia/6rwgOJScY4/RInaKdn6VaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAt
MWNmMGZlYWFhM2VhLzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAtMWNmMGZlYWFhM2Vh
LzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXb3L8OZc
ItD9NGa8Jdl4OAlJkGDT0QZSlBoYF/wPsGRBhEx5IeT4dPhEXaEDTlGtaO218Dv5
5YifjDf481hDeW9jDnKNVR3HFIjQCt0Oc8fxA9elhxGeYIstkjq3Age7vrCK296j
+xiEMM2Rqiu9DCAUBU6lmC3qZnDYD6aa+OL43k0sygVwjLo4yCH6KHCEbESh2gMK
/dEzXkJb2kok3kZewEAuzftwXJsoGfI8YYFnJ5QChFildcKMeVSXvyClLbn0FhlK
wsN/EELKZIewZeAWjLrXMlVpdN8hjxfrWFqBOa1qCkdhW/KrUQDaM9kzULVWqrnL
wp8c92nX0Ke0KQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:06 2026 by rpki-client