Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
File: Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft (raw, json)
Hash identifier: x4kYBIfjb71fF7XXkJxWf3dUkrnq5T468UWETWwGubA=
Subject key identifier: 7C:45:CD:C7:22:C3:9B:C7:44:BB:62:D8:F9:78:CF:DF:59:19:33:ED
Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Certificate issuer: /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Certificate serial: 019D26CD115ACC7B063272BC36091BFAD1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 21:01:06 +0000
Manifest this update: Wed 25 Mar 2026 21:01:06 +0000
Manifest next update: Thu 26 Mar 2026 21:01:06 +0000
Files and hashes: 1: Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl (hash: xD2OpnQkdSF5QRSCQG9ECarCcbT3qU5vVHxObJmOPhk=)
2: cPaYLIOF3VCjmjb4ZY5WFsbWaMY.roa (hash: N1wSv7IKNjHNPgVshCdy+hjLM0GcmgKEhSsoWfHZ7pU=)
3: i0hQjwFxkPTpHyYoOACTdobPX0o.roa (hash: HiHi/d6iXFAJLfNAev9V2WJ5yQo8ek1Ir8HrzJbtcQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:11:5a:cc:7b:06:32:72:bc:36:09:1b:fa:d1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Validity
Not Before: Mar 25 21:01:06 2026 GMT
Not After : Mar 26 21:01:06 2026 GMT
Subject: CN=7c45cdc722c39bc744bb62d8f978cfdf591933ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:d8:86:94:1f:99:d9:38:c6:6a:95:91:d0:
eb:fd:f6:d3:c4:ba:94:88:18:b2:c2:c6:fd:49:26:
e0:c9:4e:8d:43:f6:1c:99:72:d6:2e:a8:56:38:21:
c7:18:0c:3b:7c:7d:8c:68:01:29:21:e5:b5:65:23:
03:0f:2c:9e:b5:8d:3f:e9:01:7d:84:f2:ce:94:ac:
b3:47:4c:a1:35:61:4d:57:e0:da:8e:31:bc:03:c4:
a6:3e:06:b7:45:58:39:07:29:01:42:98:c4:a3:1e:
59:4f:7e:6a:cc:5a:41:87:af:b8:a0:67:19:40:e3:
01:78:cf:5f:b1:2f:bc:f9:8b:bd:99:b7:ef:1f:a6:
b1:1e:59:e1:67:36:55:d4:05:40:d1:bf:48:5c:d1:
5f:c5:d8:53:e3:62:2a:50:da:31:dd:2a:83:a4:99:
fe:3e:46:f1:ea:84:7c:a2:2e:96:5f:8f:44:59:5f:
26:cb:be:18:c6:92:88:d8:7b:4a:53:61:04:99:13:
fa:49:41:3a:9c:78:fa:0d:77:65:c1:03:85:91:df:
65:b3:25:db:50:c9:13:36:10:f0:6d:24:f8:58:eb:
11:8e:d3:4d:50:b5:a0:b9:56:a0:51:cb:2c:d8:88:
41:d5:41:0a:61:c7:88:b2:78:b2:0e:3a:d5:14:df:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:45:CD:C7:22:C3:9B:C7:44:BB:62:D8:F9:78:CF:DF:59:19:33:ED
X509v3 Authority Key Identifier:
keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:68:e6:94:7e:78:7e:6b:4d:9b:34:87:54:23:2e:6f:8d:c8:
24:af:91:86:8d:e3:1e:74:c8:2f:f2:1b:53:35:1f:4d:e8:c2:
c2:85:eb:4c:6a:74:d0:05:18:5f:95:6f:34:37:b2:e0:e7:66:
8c:98:6f:f3:da:52:6f:5a:ef:29:a5:e2:95:84:a4:6b:df:2b:
24:f7:9d:03:67:0b:46:6b:22:88:6d:87:77:c2:98:41:f5:69:
eb:8c:a3:bb:98:be:62:d8:29:3d:5b:8f:16:80:c4:18:16:41:
4b:58:bc:ef:b8:64:d0:ed:ca:64:01:db:fa:19:b8:fa:be:cb:
1f:5c:5c:be:de:de:8f:99:94:b2:6c:bb:a7:d4:6c:df:53:64:
5c:d3:2f:fd:fe:16:c0:eb:a1:da:e8:c5:af:47:e5:19:91:05:
6b:8a:64:14:a7:13:e8:af:aa:27:39:b9:88:ca:36:0a:d4:ef:
67:bb:e7:51:3d:ec:9c:72:1a:55:a3:06:db:49:b4:93:67:c7:
9c:11:07:7b:7f:45:dd:5a:ff:c5:ce:a3:cf:33:7d:3b:e7:75:
86:11:37:0b:af:f2:29:1d:4d:4d:5e:a6:8a:cc:93:9d:2b:07:
58:81:86:89:fd:c2:a5:f8:d6:ce:4f:9a:15:4a:0a:4f:02:b6:
b7:bf:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:16 2026 by rpki-client