Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
File: PwbJ3z-o-T2e8O0EscoENduLxlA.mft (raw, json)
Hash identifier: wCQbhwZPLlxiler8RDzHQT5NOfkXug/iWkHFeoWgRdE=
Subject key identifier: 27:13:A6:22:34:F4:48:60:9F:A3:92:67:EF:EC:94:30:27:55:46:09
Authority key identifier: 3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
Certificate issuer: /CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Certificate serial: 01A0D9179B16442EA319586A29BF3538EC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 15:03:17 +0000
Manifest this update: Fri 25 Sep 2026 15:03:17 +0000
Manifest next update: Sat 26 Sep 2026 15:03:17 +0000
Files and hashes: 1: 7-32Md7Q_fthPHDnPKRu6x3v5Vw.roa (hash: jKLcvLv2eQ3ck8qI0kEKdK//Dg+ioPx0eWUIN6VBJvE=)
2: PwbJ3z-o-T2e8O0EscoENduLxlA.crl (hash: QgzOWvXdtfMcATmlaIIkFaVHxJnuqEkvDvrNRqhNomE=)
3: hrCfuMVXLBCd5tVXj7Gmqzx0zMA.roa (hash: lBA8s9K0T2c9sC0fKCrfeOpYhHxaUfWtbc2uSEp45FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:9b:16:44:2e:a3:19:58:6a:29:bf:35:38:ec:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Validity
Not Before: Sep 25 15:03:17 2026 GMT
Not After : Sep 26 15:03:17 2026 GMT
Subject: CN=2713a62234f448609fa39267efec943027554609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e5:4d:ae:45:c4:a5:70:f5:74:fd:3f:46:38:
dd:66:bd:1d:f5:d6:30:5f:0d:4d:27:b3:22:30:34:
ff:b5:5e:d7:a8:79:0c:ad:1e:a7:f9:43:ed:d0:59:
ba:5f:9c:b7:0a:6a:5a:69:f7:ce:fb:1c:86:a1:f5:
9b:bd:3b:59:b4:4f:cb:48:3b:7c:76:76:71:a1:a7:
93:14:60:21:26:98:c9:31:82:87:4f:2f:45:e5:86:
b3:c7:db:fb:71:ae:7a:f1:4c:95:9e:1c:14:37:93:
05:b3:26:2e:62:b9:d1:85:88:a5:af:f8:75:6c:d7:
b4:a0:b0:7b:6d:c9:ce:e3:3a:67:fa:ed:fb:0d:f1:
f3:a7:5a:ec:9a:70:ef:af:3b:17:06:8e:d0:38:ff:
0b:52:4b:28:d6:6d:0d:59:4b:4b:14:cf:3d:a2:b9:
31:1e:bb:ed:fc:d8:b1:ff:cf:d1:1b:d4:62:ab:82:
e6:40:15:3b:6b:23:e1:2b:91:55:b2:c3:bf:73:43:
ee:9a:18:7e:f0:85:79:99:66:18:79:e8:e0:fb:bc:
f2:09:7a:11:a9:f9:56:15:ec:25:3c:5e:d5:c3:a5:
42:10:7f:db:17:77:17:c9:2a:43:b7:98:a6:f3:14:
10:88:af:4f:ba:92:2d:e4:f2:3b:08:5b:03:9b:1e:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:13:A6:22:34:F4:48:60:9F:A3:92:67:EF:EC:94:30:27:55:46:09
X509v3 Authority Key Identifier:
keyid:3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e5:61:6e:d6:0e:b3:eb:47:43:98:80:6c:ab:d9:10:5e:9f:
fc:bf:26:b1:e2:2d:b3:d9:d6:6e:79:91:eb:9b:87:38:bd:19:
ef:31:cb:bf:1d:86:20:f5:0e:22:a9:29:6b:2e:e8:c0:a9:0d:
0a:f9:f4:74:dd:26:3d:20:99:19:3e:6a:3a:17:0e:50:0d:35:
73:3a:1a:0d:08:e0:9f:27:de:95:11:7e:80:2d:86:44:bb:40:
7f:44:49:68:9a:cc:18:bd:b5:2f:f6:eb:29:be:d3:6f:47:7c:
07:ef:ce:82:69:bd:e2:30:c9:1b:62:66:ef:8d:7a:93:29:e5:
86:28:7e:36:cd:d4:7f:5c:38:83:7d:10:18:9f:39:11:55:85:
e0:ce:2d:87:fb:6d:df:7b:17:92:cc:c2:f7:df:fa:f2:51:8b:
37:ec:ba:20:35:0b:5b:6a:b2:3a:42:64:f6:36:e5:1b:57:d2:
bd:4c:03:eb:06:ed:3e:a2:5d:37:e8:a8:74:3f:a9:e6:76:b7:
90:20:7e:d2:fd:f7:b3:bc:19:da:41:60:05:d1:2c:e4:d9:0f:
03:be:51:30:59:30:12:52:cf:b9:1d:58:20:75:59:29:bb:c4:
d3:af:78:89:64:ad:2f:1d:8b:dd:7d:4c:20:04:f3:3d:c2:4d:
5c:fe:07:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:16:21 2026 by rpki-client