Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
File: PiWraYX3nKneBumOi52iRdhVmrY.mft (raw, json)
Hash identifier: /oui74WrLIOG8wFFhYblasMT85PuJJlZi42dvAg/4jY=
Subject key identifier: 53:ED:52:26:CE:6B:CD:4C:73:B3:77:76:38:E0:5A:DE:82:EE:1A:D5
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 019E1F10AA383EFB3ED6AD8372421D784ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
Manifest number: 068A
Signing time: Wed 13 May 2026 02:00:46 +0000
Manifest this update: Wed 13 May 2026 02:00:46 +0000
Manifest next update: Thu 14 May 2026 02:00:46 +0000
Files and hashes: 1: 83T4vy6w6s-NbeBOg3NKn516tgI.roa (hash: sjPUQm6Zny+WJ2MxBOvr0gIX9HwjXltWJjMRmGQhU5Q=)
2: HXtw_REMuYJU-uoqytyoK089wJo.roa (hash: y0auMTcaijuymINcdrlEwiSn0wKl15siQmyezHbX9Mk=)
3: PiWraYX3nKneBumOi52iRdhVmrY.crl (hash: TFmOrk/O4/+qVAHutVEtn1Izrb7tJVKNGdYM/x818Ik=)
4: Z07tktorOBcHfE3hsn2N89eRrmM.roa (hash: 7mXHoHwif1lVmpqWPvn8rNFkNTwiLeFAHtrPjsutn9A=)
5: v_6hfKyRVIjeJvA7Hn7c_7uLcEI.roa (hash: AjN5pZH9Vkd0aFs/22Tncp1jiELMZjwI4H52yGKSq88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:aa:38:3e:fb:3e:d6:ad:83:72:42:1d:78:4a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: May 13 02:00:46 2026 GMT
Not After : May 14 02:00:46 2026 GMT
Subject: CN=53ed5226ce6bcd4c73b3777638e05ade82ee1ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:95:c6:cb:77:44:ff:8d:ae:aa:33:5b:7b:
5f:e2:e4:1c:bf:9c:d8:7c:e2:c0:38:b4:d8:5f:b4:
5a:0a:7c:aa:b6:f8:16:23:81:f5:31:fd:d0:6b:13:
c4:28:56:7c:96:04:45:ad:a7:10:92:ed:04:ff:c8:
d6:82:9f:9d:5f:06:e2:7e:60:59:f6:73:64:bd:46:
70:d0:c4:6d:3f:4f:10:61:75:16:a3:20:6d:17:a8:
11:9a:d4:f2:ee:93:76:75:cb:49:81:8f:4d:30:13:
09:0f:0f:7a:ef:c0:da:f0:c3:12:fb:e6:33:3b:b7:
37:35:98:00:25:91:30:2a:59:40:d4:f3:29:13:eb:
ab:a0:6c:a8:65:a6:e6:83:ac:92:9d:30:28:b7:6d:
4c:1d:20:6c:94:1c:93:4d:93:b5:da:6c:80:4f:47:
c7:e0:f2:38:57:18:d0:b7:bf:46:93:b8:90:50:46:
22:5a:4f:0e:df:12:7b:69:ea:e7:ed:b1:98:30:5f:
3f:9f:cc:ab:95:0a:8b:bc:ab:2f:5e:fc:ba:5f:c3:
ea:29:b0:e6:98:c6:83:a5:29:c7:df:58:8c:a5:26:
89:0e:94:d0:2e:2f:44:cd:7b:5c:5a:45:9a:4c:68:
82:6a:1c:25:f1:f0:e0:9b:3b:67:10:21:2c:8c:a1:
40:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:ED:52:26:CE:6B:CD:4C:73:B3:77:76:38:E0:5A:DE:82:EE:1A:D5
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:cb:e4:9c:bf:f1:1f:71:94:57:c8:d9:6d:5c:fd:84:4e:1b:
9f:4c:29:a2:92:13:57:fd:30:54:2d:54:7d:1e:09:33:cf:39:
8c:f8:b2:18:52:49:0e:c0:34:fe:c8:d5:6c:2d:dc:5e:13:80:
62:b4:b2:29:7d:7a:76:78:2c:74:14:ef:72:9d:cb:2f:29:d3:
50:92:82:2c:fb:2b:d0:43:1e:e3:f1:07:8b:8d:f4:bd:51:76:
e1:af:7a:1c:1f:5b:dc:77:8c:6e:1a:28:41:90:36:b0:13:91:
ad:51:83:65:35:28:ea:82:94:83:ca:1e:46:32:9f:c4:81:a2:
5f:fa:03:0f:ae:1e:97:a2:96:27:e0:11:99:54:a3:2e:86:b2:
06:0f:9b:54:38:56:41:73:70:ca:f6:c5:5d:a2:ed:65:af:60:
6a:29:bd:32:39:79:a6:2e:df:56:0e:1a:7a:25:98:3d:f5:04:
6a:a6:bd:86:5f:40:0a:7a:83:02:c5:5d:7f:36:fb:01:61:8a:
db:47:5e:28:3e:05:a1:c5:f8:56:74:1b:e0:7d:34:c3:bb:bb:
36:a5:83:d1:fb:ad:1e:b5:a4:91:73:97:6f:c7:dc:aa:7e:e5:
04:fd:44:18:c1:65:94:c4:74:13:7f:6a:6c:36:c1:82:53:52:
0b:8f:fa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:37 2026 by rpki-client