Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
File: PUx4cBk93824kLZkfMi1bBGW_wg.mft (raw, json)
Hash identifier: oHwujumCusY0lPiGDFxy8DVoUU8K+XURGj9jAY/QijY=
Subject key identifier: 21:B6:D4:C2:03:82:C5:9C:31:59:77:B2:78:AB:D3:BF:55:E4:BB:DC
Authority key identifier: 3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
Certificate issuer: /CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Certificate serial: 019D2928EB2FAEFD6126BA73C7F841FF15B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
Manifest number: 13D9
Signing time: Thu 26 Mar 2026 08:00:40 +0000
Manifest this update: Thu 26 Mar 2026 08:00:40 +0000
Manifest next update: Fri 27 Mar 2026 08:00:40 +0000
Files and hashes: 1: PUx4cBk93824kLZkfMi1bBGW_wg.crl (hash: dvuIJRgb25H6qx494e6HzjgK6dkAF1szD9ucyYMwYbw=)
2: rRKv9CxGyUCT4BR0ojzvLolgqHY.roa (hash: PKrbbfUo5w96wJrjh8BIjySL4ib4nKQRw9UtDNlC4HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:eb:2f:ae:fd:61:26:ba:73:c7:f8:41:ff:15:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Validity
Not Before: Mar 26 08:00:40 2026 GMT
Not After : Mar 27 08:00:40 2026 GMT
Subject: CN=21b6d4c20382c59c315977b278abd3bf55e4bbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:e1:99:3b:15:97:43:21:f4:6c:b0:3e:c8:
a9:57:0c:b8:9c:a6:ca:27:e0:bb:16:11:04:53:f4:
89:38:12:3f:c2:65:19:1d:c2:f6:d7:ae:f7:c3:13:
2c:12:9a:5b:c5:c2:28:32:07:91:cc:cf:78:9e:aa:
9f:80:b3:36:b6:91:75:36:59:1a:67:eb:dc:64:cf:
8e:a4:b4:f8:39:f2:33:27:04:cf:a9:7a:96:ea:92:
3e:16:d6:c6:df:72:be:7c:df:c5:19:fe:12:64:3e:
33:0a:31:df:ad:74:5e:56:81:f7:21:b8:c6:96:47:
08:18:ad:aa:a7:57:4f:85:7d:7f:6b:44:55:f4:dd:
4e:5a:83:2e:51:3e:c3:b2:ed:01:c5:f1:df:23:6e:
13:77:f0:4f:5c:5a:d6:61:6a:89:99:72:ad:eb:50:
95:84:26:8a:fe:87:1b:8c:7e:bf:bb:26:89:6a:bf:
49:27:f5:3a:87:8a:ed:3c:b2:61:99:58:df:68:25:
dd:a6:79:d5:79:ee:2d:83:17:f3:5d:37:1b:cf:eb:
eb:dc:95:43:db:e3:ec:70:a0:6a:1e:6b:b0:68:a7:
07:81:49:87:f2:01:f9:4d:c0:1b:17:ea:0d:7c:50:
68:dc:df:c5:b9:ac:c4:68:fc:72:40:5d:f9:51:e9:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B6:D4:C2:03:82:C5:9C:31:59:77:B2:78:AB:D3:BF:55:E4:BB:DC
X509v3 Authority Key Identifier:
keyid:3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bd:35:41:24:24:82:fe:ea:05:65:b7:f8:42:9a:6d:01:9a:
d4:a4:e5:93:4f:dc:e1:8a:75:11:f8:2f:4a:cc:d3:ab:ef:76:
2e:9b:40:95:56:54:df:c4:72:4a:30:05:b7:83:a9:fa:44:25:
a5:e2:0a:9c:07:d8:ac:de:25:f8:a8:86:75:7f:06:d3:82:e9:
f6:60:da:00:99:78:6d:19:85:ea:0a:69:0f:ff:07:17:f1:12:
e4:76:1a:5a:af:00:12:25:4d:1a:85:25:b1:31:b5:c5:5a:c7:
f7:77:5a:64:4a:06:1d:ef:0b:dc:6e:fb:0a:b2:1b:5b:7a:ac:
d6:1f:50:f8:c2:af:7a:6a:5f:6b:bb:b9:7e:aa:ff:f5:90:9e:
3b:95:f5:10:f1:85:ec:f2:f7:5a:62:70:9a:7f:a7:e5:d6:5a:
c2:81:17:46:f7:11:d1:42:fd:23:ca:e2:56:bf:c6:fc:9f:17:
39:d6:92:24:d4:d4:fc:8e:42:fa:38:19:58:f4:5b:e9:0f:e1:
37:cf:84:21:4d:b0:99:67:a2:46:36:4b:bb:94:18:45:09:f5:
f8:0f:ba:78:0a:ba:98:68:a5:c8:21:7e:2b:8e:91:57:70:80:
80:0b:c0:55:d2:57:c3:72:92:9b:36:d7:dc:eb:b7:8c:45:b0:
6a:16:f0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:26 2026 by rpki-client