Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: VqkJr652DVjVTaXvEeggust7GUMt5Ov5QeyAo6ET5ew=
Subject key identifier: 2B:85:2F:98:C8:2B:9D:0B:D8:F3:6D:BA:89:5C:AB:EB:82:7B:9F:61
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 01A10512C01399443B2BB48ED15DC8F84B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 04:01:17 +0000
Manifest this update: Sun 04 Oct 2026 04:01:17 +0000
Manifest next update: Mon 05 Oct 2026 04:01:17 +0000
Files and hashes: 1: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: yf0SAhrwB4aGswwGOj0me0s3zvB+Qxc4McGpaGKF6H8=)
2: epbrSMH-SUdz881xHjrFWBLUM0I.roa (hash: DemzvWRRUYGCK/bGtJiqPfkLK7W/2Q2RB2aeNbl55xw=)
3: fxKKOFmvR7tWz8KnpWFVu5Gljsc.roa (hash: n8tLo/IEZsMPbxqYthr4yxthEmDMzlRhSAVZKwtGCLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:12:c0:13:99:44:3b:2b:b4:8e:d1:5d:c8:f8:4b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Oct 4 04:01:17 2026 GMT
Not After : Oct 5 04:01:17 2026 GMT
Subject: CN=2b852f98c82b9d0bd8f36dba895cabeb827b9f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:69:e9:21:3d:65:97:4e:4f:6f:f4:3f:6b:
46:1e:2e:ca:22:0b:d4:5a:be:02:fd:5c:90:36:bf:
b7:78:f3:34:3d:79:de:0f:f4:3c:de:c9:78:e1:b8:
64:db:b1:a7:f1:19:e1:bb:26:12:f8:4b:35:f1:95:
89:b4:03:f4:41:c4:7e:42:e9:59:e2:70:66:0d:84:
e2:5f:0d:7a:ce:fe:7f:f3:db:d6:a9:25:55:15:f6:
81:dc:09:b1:34:f2:55:9d:a7:b0:79:91:af:46:cc:
51:0e:cc:49:17:72:e3:4e:2a:08:d2:92:5d:37:33:
f1:52:9a:23:98:88:9a:7f:b3:91:9a:dc:1f:8b:e0:
14:fe:ee:a2:d9:a7:0f:47:bb:64:a7:c0:af:43:0c:
39:70:c9:e1:41:2b:11:48:66:5a:2a:90:14:34:91:
66:08:f8:3f:7d:ac:2c:b0:dc:67:1b:c2:b4:0d:8b:
5c:4e:8c:b5:bb:58:df:2b:31:d6:97:21:2f:51:25:
1a:1f:8b:a9:59:dd:76:52:d6:a0:5c:5e:2b:0d:6b:
90:7a:62:5c:94:93:0c:48:af:5f:52:4e:dd:76:77:
18:ec:e7:bf:ae:60:4d:e3:f0:0a:d7:2b:ae:cb:e3:
de:e3:a5:3e:7d:c2:81:b1:8d:f6:c6:30:9b:69:24:
0a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:85:2F:98:C8:2B:9D:0B:D8:F3:6D:BA:89:5C:AB:EB:82:7B:9F:61
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:67:19:73:27:f1:cc:91:0b:09:73:a4:70:0e:9f:83:a8:28:
e6:a7:db:d4:c4:82:f6:87:5f:ee:49:55:b1:3e:b1:72:c1:44:
b0:7e:d5:d1:a6:24:7c:b2:76:b5:f6:1e:24:88:e8:1a:a6:e3:
a6:c1:6c:e0:51:a2:15:7c:b9:cf:6d:ea:a8:bc:e9:54:aa:64:
16:ac:70:42:5f:02:87:7c:db:82:95:01:a3:8c:d5:59:d1:c2:
49:7d:cf:dc:9b:85:41:a3:68:99:df:ab:24:c6:26:09:8b:b3:
b2:4c:3c:83:a0:2d:a6:e5:46:04:99:aa:21:af:a1:e7:0d:08:
cc:85:d5:d9:2a:3f:d3:01:3e:d0:9b:b2:8f:05:81:b0:8a:df:
8f:93:4e:90:db:8f:55:ec:ab:c4:6b:18:8d:12:af:f8:1c:ca:
46:cc:a1:2e:00:98:f3:46:f6:fb:ac:0c:49:d6:66:9f:ff:03:
a7:d3:76:0a:0f:5e:bf:ed:d2:e7:fa:cf:3a:cf:fd:e1:ab:d5:
b3:23:a8:2d:d1:72:33:ce:b0:bc:4e:70:e8:5a:2a:07:0e:96:
14:19:08:d6:9f:aa:d8:41:9e:fe:4c:b4:a9:e3:45:e5:31:98:
ef:46:f4:bb:a0:d7:18:1d:9e:fe:19:90:9f:6a:3b:57:df:2f:
51:79:99:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:07:26 2026 by rpki-client