Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: kdpZnRLx1hYlZFFrRxpQiWJ6RpQOXWhs/Pm1qY896Dc=
Subject key identifier: 1A:76:5C:97:D9:53:DC:83:C0:FB:11:7A:2A:E2:E6:8A:AB:08:F4:B0
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 019F9059FE10F998BA269B7A276D4B2A650F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 19:00:44 +0000
Manifest this update: Thu 23 Jul 2026 19:00:44 +0000
Manifest next update: Fri 24 Jul 2026 19:00:44 +0000
Files and hashes: 1: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: ygt1rdGOAJebm33fpeXh0xYde6e3NnM5L1xlSHGLXfY=)
2: epbrSMH-SUdz881xHjrFWBLUM0I.roa (hash: DemzvWRRUYGCK/bGtJiqPfkLK7W/2Q2RB2aeNbl55xw=)
3: fxKKOFmvR7tWz8KnpWFVu5Gljsc.roa (hash: n8tLo/IEZsMPbxqYthr4yxthEmDMzlRhSAVZKwtGCLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:fe:10:f9:98:ba:26:9b:7a:27:6d:4b:2a:65:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Jul 23 19:00:44 2026 GMT
Not After : Jul 24 19:00:44 2026 GMT
Subject: CN=1a765c97d953dc83c0fb117a2ae2e68aab08f4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:f3:7a:b7:e3:19:34:ef:cc:11:ac:a6:84:
dd:fe:dd:69:66:5c:45:17:31:dc:a3:7c:c3:a5:86:
c1:6d:5d:31:04:53:65:a0:84:e3:9f:52:48:86:e7:
2b:f7:98:c0:30:ab:74:1d:ee:dd:2c:d5:92:fb:c7:
23:79:21:46:ef:b8:d8:d1:14:3c:f7:4e:6c:fe:c8:
e7:c3:f2:5c:1d:0c:73:1d:99:74:bd:30:90:69:b5:
5c:42:e1:07:06:88:9b:98:33:59:55:06:07:a5:f6:
f9:f6:18:7c:bb:f9:5e:d2:00:d7:f1:76:d9:54:6a:
e6:c7:59:a7:78:52:bd:f6:18:f3:57:32:db:f1:88:
10:31:e6:8c:20:4a:d5:a1:ec:1f:92:77:ad:96:8b:
1f:b5:5b:81:48:f8:12:e6:6c:28:ac:80:0a:2a:b5:
47:b3:c1:4c:9b:7c:a0:0e:a4:6e:79:e5:e5:42:c1:
67:ff:b0:68:52:f6:87:74:33:7a:2b:51:43:bd:de:
cd:37:73:b6:05:26:b4:dd:1f:cf:f4:fe:2d:97:43:
e4:a9:62:e4:1a:dc:06:db:75:0f:90:73:c2:e6:94:
3e:38:ec:94:66:1d:92:df:6d:05:19:c7:c0:f4:57:
2d:5f:02:63:85:0b:e7:5b:6e:45:de:16:d4:40:34:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:76:5C:97:D9:53:DC:83:C0:FB:11:7A:2A:E2:E6:8A:AB:08:F4:B0
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1d:c6:7a:5e:38:27:78:b0:29:d2:b0:55:7c:3d:ee:fd:db:
82:07:31:e5:2e:0c:ae:7e:a5:61:68:38:83:ae:97:79:0a:80:
96:fa:55:2f:5d:5a:68:ee:d4:5d:8b:f6:17:94:86:df:f2:72:
38:b4:07:2e:b6:e4:23:9a:fe:b5:72:02:81:7e:b1:45:04:a6:
4b:45:13:93:19:a8:11:a8:a3:5b:47:22:c3:71:3e:c2:b5:76:
55:0c:d6:eb:08:65:b6:69:3f:d8:55:49:f2:5c:b9:0f:54:9e:
28:a5:f8:0f:35:c2:19:fd:0f:bc:40:5a:ca:92:cd:3f:34:3b:
3e:63:32:38:c4:b4:b3:32:9a:d3:e0:58:3a:fe:11:bb:7d:b1:
60:81:cb:fe:52:af:4a:93:00:5c:90:05:42:ac:51:4b:74:6f:
9c:f1:ad:b4:4f:53:ad:4a:79:ab:d8:03:da:38:47:a9:4d:ac:
6d:48:10:36:92:8f:b7:25:f0:d4:a2:3b:05:43:2a:b6:24:17:
b1:94:cf:28:28:2e:3b:a0:c2:82:7d:9e:dc:72:3f:e4:bd:df:
f9:7a:af:6b:cc:0f:bc:fb:b3:68:80:40:07:3a:a2:78:c8:72:
d9:2b:7a:d9:0c:94:47:23:7c:06:4d:53:69:3b:03:52:65:ee:
bf:5d:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:52:19 2026 by rpki-client